Barış Yıldırım

Professional résumé / Web edition

Barış Yıldırım

Application Security Engineer

I am an application security and software engineer with experience across backend development, security engineering, and cloud infrastructure. My work includes DAST automation, security tooling, application security testing, and production software delivery in enterprise and product environments.

01 / Selected impact

Security work with an engineering boundary.

  1. Led an automated DAST orchestration framework spanning Burp Suite, OWASP ZAP, and gRPC testing.

  2. Built real-time orchestration, telemetry, analytics, and reporting capabilities for a controlled cyber range.

  3. Developed Linux-based network-security products and enterprise authentication integrations.

  4. Delivered security rollout plans, technical documentation, and cross-functional product features.

02 / Experience

Professional experience.

  1. Udemy

    Sr. Application Security Engineer

    —

    Ankara, Turkey

    Owned application-security automation and cloud-security integration work across Kubernetes-based enterprise environments.

    • Led the design and implementation of automated DAST orchestration using Burp Suite, OWASP ZAP, and grpcurl.
    • Built scanning workflows for monolithic and service-oriented applications running in Skaffold environments.
    • Deployed and configured Wiz connectors and sensors across Kubernetes infrastructure.
    • Integrated Strix into vulnerability review workflows to support finding analysis and triage.
    • Produced operational designs, technical documentation, and rollout plans for DAST adoption.
    • Coordinated mobile application security testing readiness and vendor onboarding activities.

    Wiz · Kubernetes · Burp Suite · OWASP ZAP · grpcurl · Skaffold · Strix

  2. Aquila Dijital Teknoloji A.Ş.

    Full Stack Engineer

    —

    Ankara, Turkey

    Delivered full-stack features for an enterprise resource planning product serving the construction industry.

    • Implemented backend functionality with Django and frontend components with React and TypeScript.
    • Contributed to application design, feature planning, testing, and production support.
    • Worked with cross-functional teams on business-critical functionality and system usability.

    Django · React · TypeScript

  3. Engarde Teknoloji A.Ş.

    Founding Software Engineer

    —

    Ankara, Turkey

    Built a full-stack cyber range for controlled simulation of distributed network attack scenarios.

    • Implemented real-time orchestration, monitoring, telemetry collection, and reporting capabilities.
    • Developed backend services, frontend interfaces, and analytics workflows for simulation and assessment.
    • Contributed to technical architecture and product decisions as an early engineering team member.

    Full-stack platform · Real-time orchestration · Telemetry · Analytics

  4. Labris Networks

    System and Software Engineer

    —

    Ankara, Turkey

    Developed system and backend functionality for UTM and centralized network-security management products.

    • Enhanced Active Directory integrations for enterprise authentication and authorization workflows.
    • Worked on Linux-based embedded security systems, networking services, and management infrastructure.
    • Contributed to maintenance, feature development, troubleshooting, and performance improvements.

    Linux · Networking · Active Directory · Embedded systems

  5. Labris Networks

    Software Engineer Intern

    —

    Ankara, Turkey

    Contributed to networking, web development, Linux package management, hosting, and cybersecurity projects.

    • Assisted with internal tools and system-component development and maintenance.

  6. Rekrom Optoelektronik

    Software Engineer

    —

    Ankara, Turkey

    Developed full-stack internal applications and contributed to optical simulation software for engineering projects.

    • Participated in software design, implementation, testing, and maintenance.

  7. Keydata Bilgi İşlem Teknoloji Sistemleri A.Ş.

    Software Engineer Intern

    —

    Ankara, Turkey

    Built frontend and backend features for a collaborative full-stack web application.

    • Worked with React, Ionic, Node.js, and Express.

    React · Ionic · Node.js · Express

03 / Projects

Selected systems and product work.

Security automation platform

Product and platform engineering

VulnScope

Turns scanner execution into an inspectable workflow while keeping findings distinct from lower-confidence observations.

PostgreSQL · Celery · HTTP/TLS · Nmap · Transactional outbox

Professional application security

Sr. Application Security Engineer

Security Automation Platform

Produced reusable scanning workflows, technical documentation, and organization-level DAST rollout plans.

Burp Suite · OWASP ZAP · grpcurl · Kubernetes · Skaffold · Strix

Controlled security simulation

Founding Software Engineer

Engarde

Delivered platform capabilities for real-time simulation control and evidence-based assessment workflows.

Full-stack platform · Real-time orchestration · Telemetry · Analytics · Reporting

Academic project

Bilkent University

Erasmus Application

A full-stack application built with Spring Boot and React.

Spring Boot · React

Academic project

Bilkent University

JobTalk

An AI-assisted interview automation platform built with Flask and React.

Flask · React

04 / Technical capabilities

Tools organized by engineering responsibility.

Application Security

Assess web, API, mobile, and cloud-connected applications while translating findings into practical engineering work.

  • Application and API security
  • Mobile security testing
  • Vulnerability assessment
  • DAST and SAST

Security Automation

Design repeatable scanning and review workflows for different protocols, application shapes, and delivery environments.

  • Burp Suite and OWASP ZAP
  • gRPC testing with grpcurl
  • Finding review workflows
  • DAST rollout design

Software Engineering

Build backend services and product interfaces with maintainable boundaries across APIs, workers, data, and user workflows.

  • Python, Java, and TypeScript
  • Django, Flask, and Node.js
  • React and Angular
  • REST APIs and microservices

Platform & Infrastructure

Work across Linux, containers, orchestration, cloud services, delivery pipelines, and operational data stores.

  • Linux, Docker, and Kubernetes
  • EC2, EKS, and S3
  • GitLab CI/CD
  • PostgreSQL, MongoDB, and Redis

Languages

Turkish — native

English — professional working proficiency

05 / Education

Academic foundation.

İhsan Doğramacı Bilkent University

B.S. in Computer Engineering

2020 — 2025

06 / Community and participation

Teaching, community, and continued practice.

Sep 2022 — May 2023

Google Developer Students Club, Bilkent University

Board Member

  • Delivered theoretical and hands-on sessions on Kotlin and Android Studio.
  • Organized technical activities and supported student learning initiatives.

Sep 2021 — Jan 2023

İhsan Doğramacı Bilkent University

Undergraduate Teaching Assistant

  • Delivered instructional sessions covering Microsoft Office, Python, and Java.
  • Supported practical exercises, laboratories, course delivery, and assessment.

2019

John Cabot University, Rome

JCUMUN — UNODC committee

07 / Contact

Application security, automation, and product engineering.