Ömer Can VURAL

Vulnerability Management and Penetration Tester @ KKB Kredi Kayıt Bürosu

About

Offensive Security Engineer and SWE specializing in low-level vulnerability research, reverse engineering, and exploit development. With a strong foundation in C/C++ and systems architecture, I focus on dissecting complex systems from Kernel drivers to cryptographic software and discover zero-day vulnerabilities. I am deeply passionate about pushing the boundaries of offensive security, combining my engineering background with autonomous security tooling to uncover critical flaws at the core of operating systems and applications.

Country

Türkiye

City

Ankara

Industry

Computer & Network Security

Skill

Offensive Security, C/C++, Vulnerability Research, System-Level Programming, Low-Level Programming, Embedded C/C++, Tersine Mühendislik, STM32, Logic Design, Ağ Güvenliği, Cybersecurity, Firmware Development, Assembly, Rapid7 Nexpose, Qt, Entegre Sistemler, OpenSSL, Tenable Nessus, Vulnerability Management, Penetration Testing

Experience

Vulnerability Management and Penetration Tester

KKB Kredi Kayıt Bürosu

2023-8 - 2024-5 · 10 mos

• Vulnerability Management : Performing the distribution of Operating System and 3rd Party Application Patches and validation of security vulnerabilities. Following the vulnerability tickets and mitigate this vulnerabilities. Vulnerability management with Nexpose Rapid 7 & Tenable Nessus. • Tooling & Automation : Designed and implemented a Python/Bash-based vulnerability management automation pipeline that aggregated scan results that autonomously prioritize findings by CVSS scores and report relevant departments. • Infrastructure Hardening : Implemented automated checks to apply CIS Benchmark configurations across Windows endpoints and assisted in baseline compliance validation. • Red Team Operations : Supported red team operations by conducting Active Directory hardening, lateral movement validation and APT simulations. Performed 8+ web app and 3+ mobile app penetration tests

Engineering Intern - Cybersecurity

Baykar Technologies

2023-7 - 2023-7 · 1 mo

• Plug-in Development for Security Solutions : Implemented software plug-ins for an security tooling suite. • Vulnerability Research : Conducted research on OWASP Top 10 impacts on enterprise services (AD, web apps), documented cases, and recommended mitigations.

Engineering Intern - Embedded Software Development

Z-Sistem Aviation & Informatics Industry

2022-10 - 2022-12 · 3 mos

• Developed Custom Firmware Modules : Contributed to PX4 autopilot modules (C/C++, CMake) and implemented a custom mission system and emergency handling; validated modules via Gazebo simulation. • Cross-Platform Development : Implemented MAVLink modules and QGroundControl integrations to ensure reliable telemetry for mission profiles.