Ayşe Aktağ

- Security Architecture - Secure by Design & Secure SDLC - Threat Modeling (STRIDE, Attack Trees) - Architecture Risk Assessment - Security Requirements Engineering - Secure Cloud & Application Architecture - Security Governance and Consulting

-Leading end-to-end application security processes for web and mobile applications -Designing, establishing, and integrating Secure SDLC practices across development teams -Owning the selection, configuration, and continuous improvement of SAST, DAST, and dependency scanning tools -Conducting and overseeing advanced secure code reviews for critical components -Performing risk-based analysis and prioritization of security vulnerabilities and coordinating remediation efforts across teams -Ensuring compliance with OWASP Top 10 and relevant industry security standards -Evaluating penetration testing results, owning remediation actions, and tracking closure to completion -Providing technical guidance and mentorship to engineering teams on secure software development best practices

-Monitored and analyzed security events, vulnerabilities, and policy violations, ensuring timely mitigation and compliance with security standards -Operated and maintained security monitoring and response processes in alignment with SOC workflows, including incident detection and escalation -Took operational responsibility for network and perimeter security controls, including Firewalls, VPN, Proxy, WAF, DLP, and DDoS protection mechanisms -Executed penetration testing and technical security assessments using industry-standard tools and methodologies -Applied OWASP Top 10, MITRE ATT&CK, and PTES frameworks in vulnerability analysis and risk evaluation -Managed the vulnerability management lifecycle, including remediation tracking and stakeholder coordination -Designed and delivered security awareness trainings and contributed to security policy and procedure documentation

-Performed web and mobile application penetration testing, identifying and validating security vulnerabilities using tools such as Burp Suite, OWASP ZAP, and MobSF, in alignment with OWASP Top 10 and secure coding best practices. -Discovered and reported a critical authentication vulnerability in a mobile banking application, contributing to the enhancement of the app’s security posture and safeguarding sensitive user data. -Supported the daily operations and maintenance of cybersecurity appliances, including firewalls, endpoint protection, and monitoring tools. -Assisted in the planning, coordination, and execution of cybersecurity-related projects, collaborating with cross-functional teams. -Conducted technical research on emerging cybersecurity threats, tools, and techniques to support proactive defense strategies and knowledge sharing within the team.

-Conducted comprehensive web application penetration testing, identifying critical vulnerabilities and providing actionable remediation recommendations. -Performed in-depth mobile application penetration testing across multiple platforms, ensuring robust security posture. -Supported and actively participated in ISO/IEC 17025 accreditation processes, maintaining compliance with international standards for testing and calibration laboratories. -Contributed to ISO 9001 quality management system implementation and audits, promoting continuous improvement and adherence to quality standards in cybersecurity operations. -Engaged in IoT device test and evaluation processes, assessing security risks and vulnerabilities in embedded systems and connected devices to strengthen overall IoT security.