RECRUITER & TALENT SOURCING

Curriculum Vitae • Mert Sunar

MERT SUNAR

CYBER SECURITY SPECIALIST • DEVSECOPS • AI SECURITY
Email: mert@mertsunar.com.tr Web: mertsunar.com.tr Location: Istanbul, Turkey

// PROFESSIONAL SUMMARY

Cyber Security Specialist and Security Engineer with deep expertise in penetration testing, infrastructure hardening, and high-assurance defense electronics (TEMPEST and encrypted communications within TÜBİTAK/ASELSAN/ROKETSAN projects). Proven leader in engineering automated DevSecOps CI/CD pipelines and pioneering enterprise guardrails against adversarial LLM attacks and Prompt Injection.

// CORE TECHNICAL ARSENAL

Security & Pentesting: Nmap, Burp Suite Pro, OWASP ZAP, Wireshark, Metasploit, Nuclei, Nikto, STRIDE Modeling
DevSecOps & Systems: Docker, Linux Kernel, eBPF, AppArmor, WireGuard, GitLab CI, Trivy, Nginx, Redis
Secure Software: PHP 8.4+, Phalcon 5, PDO, MySQL 8, PostgreSQL, Python 3.12+, JavaScript, REST APIs
AI & Defense Standards: LLM APIs, AI Agent Sandboxing, Prompt Injection Firewalls, MCP, TEMPEST Standards

// PROFESSIONAL EXPERIENCE

Lead Cyber Security & DevSecOps Specialist 2024 – Günümüz
Kurumsal Siber Güvenlik & Teknoloji • İstanbul, Türkiye

Architecting enterprise cloud and hybrid security postures; integrating SAST, DAST, and container security into CI/CD pipelines; driving AI-assisted vulnerability management and threat modeling.

Impact: Achieved 99.2% compliance in enterprise audits and reduced average vulnerability remediation turnaround by 65%.
Defense Systems & Secure Communications Integration Engineer 2022 – 2024
Savunma Sanayii Projeleri (TÜBİTAK / ASELSAN / ROKETSAN Ekosistemi) • Ankara, Türkiye DEFENSE SYSTEMS

Testing and verification of encrypted communication systems, TEMPEST hardware emission compliance, defense electronics integration, and secure protocol implementation across military-grade hardware platforms.

Impact: Completed zero-vulnerability acceptance tests on secure communication devices with thorough system integration compliance.
Secure Software Engineer & Penetration Tester 2020 – 2022
Bilişim & Danışmanlık Grubu • İstanbul, Türkiye

Developing secure software architectures for enterprise web applications; conducting regular black-box and white-box penetration tests; implementing OWASP security controls.

Impact: Redesigned security architecture for 30+ enterprise web applications, eliminating SQL injection and authorization bypass vectors.
Linux Systems & Network Security Administrator 2018 – 2020
Kurumsal Altyapı Çözümleri • İstanbul, Türkiye

Managing high-availability Linux server clusters; configuring enterprise firewalls, IDS/IPS sensors; implementing server hardening benchmarks and centralized log auditing.

Impact: Hardened 100+ production Linux servers with zero unauthorized intrusions over a multi-year production lifecycle.

// EDUCATION

Ahmet Yesevi Üniversitesi M.SC. DEGREE
Siber Güvenlik / Cyber Security (Yüksek Lisans)
İşletme Fakültesi BACHELOR
İşletme / Business Administration (Lisans)

// CERTIFICATIONS & CREDENTIALS

Practical Network Penetration Tester (PNPT)
TCM Security (2024)
Verify
Certified Ethical Hacker (CEH)
EC-Council (2023)
Verify
AWS Certified Security - Specialty
Amazon Web Services (2024)
Verify
Certified DevSecOps Professional (CDP)
Practical DevSecOps (2023)
Verify

// LANGUAGES

Turkish: Native
English: Professional Working Proficiency