Who Am I?

I actively contribute to backend development while also taking responsibility for securing applications, performing vulnerability assessments and evaluating systems from an attacker's perspective. My role goes far beyond a traditional backend developer position: it combines software development with continuous application security improvement.

• Developing APIs, microservices and backend modules with a strong emphasis on secure coding practices
• Conducting security assessments aligned with OWASP Top 10 and SANS 25
• Performing regular Web/API penetration tests and enforcing strict security controls
• Analyzing, prioritizing and reporting vulnerabilities, collaborating with development teams for remediation
• Reducing the attack surface through threat modeling and attack surface analysis
• Integrating SAST, DAST and dependency scanning tools into CI/CD pipelines
• Implementing modern authentication and authorization mechanisms such as OAuth2, JWT, RBAC and MFA
• Using a Red Team mindset to develop proof-of-concept exploits, test bypass techniques and evaluate system resilience
• Supporting log management, security monitoring and incident response activities

In December 2024 I brought my freelance work together under the Echomerce brand. Echomerce focuses on software development, e-commerce solutions, digital marketing and advertising management, building custom solutions around each client's specific needs.

We turn years of business management experience into smart, effective strategies that help clients succeed. Echomerce is not just a brand name; it represents our vision for excellence in digital solutions and a partnership built on trust.

In June 2022 I founded my own company and started taking on freelance work, based on the industry and business management experience I had built up over the years. Running my own business gave me the freedom to serve clients better and to keep developing myself.

For Zai Bodrum I strengthened the brand's digital presence through strategic planning, content management and optimisation of advertising campaigns. My remote support in social media and website management contributed directly to the brand's growth.

Worked full-time as a developer on corporate web projects and internal systems.

Worked with PHP, Laravel, HTML5, CSS, JavaScript, jQuery, Vue.js and Bootstrap on both internal and external client solutions: corporate websites, e-commerce sites and custom software, plus internal projects such as a proposal tracking system and a CRM, and IoT projects automating electricity consumption measurement.

Completed my high-school internship in the IT department of Floteks A.Ş., working on user support, firewall management with Fortinet products, server and network administration — gaining hands-on experience with tools used across the industry.

Graduated as an honours student. Co-founding vice president of CüSiber (Cumhuriyet University Cyber Security Society) — we organised trainings and conferences.

Anadolu University Open Education Faculty.

Active member of UHAVK (Uludağ University Aviation Society), with a focus on air sports.

Fundamentals of SOC analysis: monitoring, incident response and threat analysis.

Credential ID: 0902010290022

A full-day conference with five speakers: Applied Information Security Awareness (İsmail Saygılı), Careers in Cyber Security (Ertuğrul Başaranoğlu), Our Footprints in Search Engines (Hamza Şamlıoğlu), PowerShell and Client Side Attacks (Halil Dalabasmaz), 50 Shades of MS-SQL (Eyüp Çelik).

A two-day training programme: Introduction to Cyber Security (Fatih Mehmet Dişçioğlu), Malware and Cryptology (Kağan Işıldak).