LinuxNmapFortinetJuniper SRX FirewallF5 LTM Load balancerOpenVASCVE güvenlik açığı değerledirmesiIPS, URL filteringDNS filteringIPSEC NAT PolicySnort rule convertWAF moduleMetasploit FrameworkCisco, Nexus, HP, Aruba switch and router configurationJuniper mag ssl vpnMcafee Web GatewayIPS monitoring and alarm managementLibrenms, Oxidized, phpIPAM, TacacsGUIOpen source security scanning toolsSIEM and Log ManagementHP Arcsight (ESM,Logger,Connectors)ArcSight FlexConnectorParser (REGEX)Mushroom Networks Bonding (SD-WAN-4G LTE)Exinda WAN Optimization MonitoringVmware virtualization technologiesRiverbed WAN optimizationLanguagesTürkçeİngilizceWorked on cryptology algorithms, acoustic steganography, and AI-based security methods.Thoroughly tested open-source security tools and developed scenario-based applications.Enhanced my proficiency in Social Media Intelligence (SOCMINT)and visual data analysis.This period was a time for me to regain my health and develop my technical skills at an interdisciplinary level.Therefore, I wish to utilize my experiences more in an analyst role.Network and Security SpecialistJan 2020 - Dec 2022Ministry of Treasury and Finance, Republic of Türkiye - Contracted IT Personnel, AnkaraSDN Migration & Network TransformationMigration of the existing network infrastructure of headquarters and provincial units to a Software-Defined Networking (SDN)architecture.Replacement of Juniper Firewall (Layer 3)infrastructure with Fortinet NGFW (Layer 7)solutions.Within the migration scope: Reconfiguration of Firewalls, F5 load balancers, Core (VSS), edge switches, and MPLS routersat headquarters/provinces.Multi-Vendor Support & ConsolidationProvided technical support for existing network equipment (independent of brand/model).Consolidationof distributed multiple firewalls under centralized management via a single NGFW.Cybersecurity OptimizationFortinet Product Portfolio Operations:IPS, URL/DNS filtering, IPSEC, NAT Policy management.Snort rule conversionand proactive measures for zero-day vulnerabilities.F5 LTM Load Balancer Integration:Application-based traffic routing with iRule, SNIdefinitions.Secure exposure of web services through the firewall.Real-time monitoring and interventionfor attacks like SQL injection, XSS, etc., using the WAF module.Pentest & Vulnerability Management:Network-wide vulnerability assessmentusing OpenVAS, Nmap, Metasploit Framework.Reporting server/device (asset) vulnerabilities and implementing hardening practices.F5 and firewall-based mitigation(e.g., ACL, rate limiting) for vulnerabilities that cannot be patched.Project Management & Administrative ExperienceField experiencein SDN migration, security solution integration, and operational processes.Proficiencyin public/private sector tenders and technical specification preparation processes.Network and Security SpecialistMay 2019 - Dec 2020SBI Information Technology, AnkaraCentral management and execution of operational processesfor a large-scale network infrastructure covering 50,000+ users and 1,200 locations.Configuration and optimization of network devices:Firewall configurations(security policies, ACL, VPN settings).High availability and performance optimization on Core (VSS) switches.Management of edge switches and routers(VLAN, QoS, routing protocols).Proactive monitoring and maintenance activities to ensure stability and uninterrupted accessin the distributed architecture.Network and Security SpecialistFeb 2018 - Apr 2019Promet Information Systems, Ankara
HobbiesPhotography (Learned for bypassing DLP - Note: This is a direct translation of your unique reason)ReferencesProvided upon request.Multi-Vendor Network Device Management:Configuration, management, and optimization of Cisco, Nexus, HP, and Arubaswitches/routers (VLAN, STP, VTP, HSRP/VRRP, OSPF/BGP routing protocols, QoS policies, CLI/TFTP/SNMP based config management & backup).Security and Load Balancing Solutions:Juniper SRX Firewall (Layer 3) Management:Security policies, NAT, VPN, IDP/IPS rules management, log analysis, traffic monitoring.Juniper Pulse SSL VPN Management:User access policies, authentication, authorization.F5 Load Balancer Operations:VIP configurations, iRule optimizations, performance monitoring, capacity planning.Web Security and Monitoring:McAfee Web Gateway Management:URL filtering, malware protection, reporting, user-based access policy management.Security Monitoring and Alarm Management:Proactive Monitoring of IPS/IDS Systems:Alarm management and automatic action scenarios.Open Source Network Management Tools:Network performance monitoring and reporting with LibreNMS.Automatic configuration backup and version control with Oxidized.IP address management and planning with phpIPAM.Centralized AAA management with TacacsGUI.Security Scanning and Vulnerability Management:OpenVAS and Nmap based security scans:Network vulnerability assessment and penetration tests, vulnerability reporting and remediation planning.Information Security SpecialistAug 2016 - Jan 2017Barikat Information Security, AnkaraLog Management for Network and Security Products (IPS, URL, etc.):SIEM and Log Management,analysis of log types, writing correlation rules.Planning, installation, and management of HP ArcSight (ESM, Logger, Connectors) or other SIEM solutions.Agent (connector) development with ArcSight FlexConnector.Ensuring logs or security content are recorded according to standards.Making adjustments using Parser (REGEX)knowledge.Defining and applying security rules.Network Solutions Sales and Support SpecialistDec 2013 - Oct 2015IIT Internet and Communication Technologies, AnkaraMushroom Networks Bonding (SD-WAN - 4G LTE) Technologies and Exinda WAN Optimization Monitoring Product Families:Installation and Demo Processes within Project Scope:Configuring all devices, performing pre-sales demo applications.Providing post-sales topology analysis, configuration, installation, and technical support services.Projects:High-Speed Train Internet Project:Creating an MPLS-like highly available infrastructure by bonding (combining) multiple LTE connections.Ensuring traffic routed to the center exits to the internet according to corporate security policies (IPS, URL filtering, etc.).Secure and optimized management of user traffic through a tunnel structure.
Field Support SpecialistFeb 2013 - Dec 20134G Communication Technologies, AnkaraEGM Datacenter Design:Data center and energy systems infrastructure design, implementation, and support.Post-sales design and tracking of power, cooling, structured cabling, and floor layout considering industry standards, requirements, and best practices.Coordinating and planning vendor and subcontractor activities.Implementing energy-saving and cost-reduction projects.Planning and auditing within the framework of Structured Cabling, Fiber-Copper Infrastructure(Single Mode - Multi Mode cable and appropriate SFP, LH-LX selections, etc.), fire suppression, climate control, security standards, and from perspectives of Space Efficiency and Optimization(CFD and PUE) in critical centers at periodic frequencies.Space security and resilience(redundancy level, risks) and (compliant with ISO 27001).Good knowledge of global information security organization data center physical infrastructure standards like TIA, ASHRAE, IEC. Applying these standards.Making basic revisions to work organization according to project workflow and scope.Performing infrastructure energy systems and capacity planning floor layout.Monitoring the integration of all systems in real-time.Reporting, documentation, and providing necessary training.System Support InternAug 2010 - Oct 2010Hayat Net Information and Communication Services, İstanbulSupporting demo installations of VMware virtualization technologies and the Riverbed WAN optimizationproduct family.System Support InternAug 2009 - Oct 2009Hayat Information Technologies, İstanbulTraining and installation of the VMware product family. Supporting the setup of application virtualization and desktop virtualization environments.Student Information Services Staff (Part-Time)Apr 2008 - Oct 2008Marmara University Institute of Educational Sciences, İstanbulInternal and external correspondence procedures, document and record keeping tasks.Preparation of documents such as regulations and board memorandums, understanding process flow in government.Technical Support InternJul 2003 - Sep 2003Escom Computer, AnkaraAssisting with computer peripheral installation.CoursesCCNA TrainingMar 2014CCNP Route, Switch, TSHOOTFeb 2019Fortinet2021Ethical Hacker2024Note:I learned all the current products practically through workload management. I took the courses to ensure no theoretical knowledge was missing and to understand what to pay attention to when designing systems.