Fatih Kocalar

To execute the long-term security strategy, aligning technical security debt reduction with business growth and platform scalability. Embedding security best practices from initial design and deep-dive code reviews to automated deployment and continuous monitoring. Acting as the central security authority, coordinating complex initiatives across multiple engineering squads to ensure consistent implementation of security controls and standards. Leading comprehensive security risk assessments To conduct proactive security reviews, identifying potential attack vectors before code reaches production.

Lead enterprise-wide security initiatives, reducing internal and external cyber risk exposure through proactive detection and remediation strategies. Implement and enforce security controls across Microsoft Azure and Microsoft 365, increasing overall cloud compliance with NIST CSF. Own and manage the vulnerability management lifecycle. Conduct security assessments, to uplift in the organization’s security maturity score. Collaborate cross-functionally with IT, compliance, DevOps, Software Development to ensure alignment with OWASP Top 10, CIS Controls, and ISO 27001. Manage security operations and incident response processes, reducing time to detect and contain threats. Spearheaded continuous improvement initiatives through threat analysis.

Designed, deployed, and maintained end-to-end security architectures across cloud and on-prem environments, ensuring high availability and regulatory compliance. Conducted regular penetration tests and vulnerability scans, leading to reduce in exploitable risks. Monitored SIEM and EDR systems for anomalies, implementing behavioral analytics to improve detection coverage across endpoints and servers. Responded to and managed security incidents using documented IR processes. Maintained security policies, access control procedures, and secure coding guidelines aligned with ISO 27001 and NIST 800-53. Collaborated with DevOps and software engineering teams to embed security-by-design and DevSecOps practices into CI/CD pipelines. Regularly assessed threat trends and threat intel feeds, integrating emerging risk scenarios.

Developed and executed an enterprise-wide information security strategy, enhancing the company’s overall security posture in line with PCI DSS, SOX, and ISO 27001. Built and enforced comprehensive security policies, procedures, and awareness programs, achieving 100% participation in security training across departments. Led risk management processes, identifying, assessing, and mitigating business-impacting risks through continuous evaluation of controls and third-party exposure. Deployed new security tools and technologies, such as DLP, SIEM, and vulnerability scanning platforms, improving incident detection rates. Collaborated with global InfoSec teams and compliance stakeholders to align risk and control frameworks with local and international regulations. Managed security budgets and vendor relationships, optimizing spend while increasing tool efficacy through effective vendor evaluation and contract negotiation. Delivered timely security consulting and risk advice to product, legal, IT, and development teams to ensure secure product delivery and compliance readiness. Drove patch and vulnerability management processes, ensuring critical vulnerabilities were remediated.

Maintaining large scale (150+ servers), high traffic (millions of requests daily), and distributed payment systems, Maintaining configuration assessments of systems to implement CIS Benchmark’s best practices. Managing the availability, latency, scalability, security and efficiency of software and systems both on cloud and on-premises, Managing services compliant with standards PCI-DSS, ISO 20000, ISO 22301 and ISO 27001. Reviewing and influencing new designs, architectures, standards, and methods for cyber security and micro services. Resolving critical service problems that detected on critical services and security products. Configuration of web servers running on docker. Creation of use cases and dashboards, reporting of events and investigation of potential incidents on SIEM solutions. (Graylog, IBM Qradar)

Creation of use cases and dashboards, reporting of events and investigation of potential incidents on SIEM solutions. Reviewing, analyzing and developing of Use Cases. Creating and deploying of Incident Response Plans and playbooks for Financial Companies. Security maturity assessments & analysis for Gulf Region Country corporations. Creation of DLP policies, fine tunings and mitigating false positives. Hardening of endpoints and servers with the scope of CIS Benchmarks. Security Architecture Assessments as Zero Trust.

Coordinating & Managing OT&IT Security Project. Compliance with Critical Infrastructure Regulations. Managing, updating and configuring security products such as NG Firewall, Mail GW, Antivirus, Load Balancer, SIEM, PAM, NAC, Sandbox. Hardening on systems. Vulnerability analysis Analyzing scada protocols and work flows. Implementing of ISO27001 & ISO27019 standards.

SIEM (Logsign) experience including management, rules creation, use case deployment, reporting, correlation and investigation. Consulting to clients about implementing sources in their corporations on SIEM. Updating, troubleshooting and assisting to write correlations & alarms

Auditing with COBITv4 & PCIDSS Standarts and banking regulations in Turkey. Performed internal network penetration tests (host discovery, port scanning and vulnerability analysis with using nmap, wireshark, kali linux and nessus) Performed mobile application test with using BurpSuite for banking application (iOS)

Exchange Student Program (ERASMUS)