TARIK KOBALAS

- Integrating open-source (mostly) and/or commercial DevSecOps tools (e.g. vulnerability dependency, software composition analysis, secret scanning, SAST, DAST, IaC compliance check, container security) - Implementing OWASP framework controls company-wide to ensure software meets security standards - Performing internal web, network, and mobile penetration tests - Conducting Threat Modelling sessions in shaping a secure architecture through the software development life cycle plan/design phase

- Web application security assessments - Leading of product management team - Project Management for the development and implementation of penetration tests - Protective measures, safety improvements for corporate network and web application

Managing of product development team. Contribution and designing of SIEM, Log Management System, Authentication Systems, Endpoint Security, DLP/NLP, Network Security software products. Software architect for cloud base logging, cloud base captive portal and cyber threat intelligence service Research and solution providing for regulation/standard compliance for both developed products and internal ISMS process. Administration of quality team for test automation of software products and projects.

Leading Security Team performs penetration tests (internal/external/wireless network, web/mobile application, ddos, and social engineering), cyber security consultancy for clients and security hardening for developed products. Leading Technical Support Team performs technical meetings, Demos, PoC’s, trainings, maintenance, mail/call/ticket supports. 1000+ Enterprise, 3000+ End-user Local (mostly)-Global customers have been supported. Managed security service provider for CRYPTTECH products and partners.

Log collection module development for syslog and snmp protocols on .NET (mono compatible with Ubuntu Server environment). String parsing backend service with regular expressions and C# preprocessors. Data source integration frontend with Kendo UI development for MVC wrappers. Indexing and searching modules with ElasticSearch for selected fields. Ubuntu Preseeding for automated ISO installations. Configuration management with Team Foundation Server and bug tracking with Redmine.

Social Media Platform for Turkey's leader Telco Operator and Content Management System for another GSM Operator. Development in Nanjing/China with Java on Spring Framework, Struts, iBatis, JSP, Velocity Requirement Analysis and Design (Functional Requirement Specification and API Specification Preparation) Transcoding Technologies, Client Side Application Development and Tests (Java, SOAP) Used Technologies/Environments: J2EE, Eclipse, PLSQL, Glassfish, Jboss, Oracle, RHEL, SLES, Windows

- Software Developer of CryptoLOG on Linux Systems - Security Information and Event Management Systems Implementation and Support - Open Source Security Information (OSSIM) Security Analyst and Engineer Web: PHP, JS, MySql Core: C#, Python