MS
MERT SUNAR SEC_OPS ACTIVE
HOME / Experience

Career Track & Defense Experience

Hands-on technical engineering across cyber operations, defense electronics, secure development, and DevSecOps.

DEFENSE SECTOR HIGHLIGHT UNCLASSIFIED COMPLIANCE

Defense Systems Experience (TÜBİTAK / ASELSAN / ROKETSAN)

Specialized integration and testing for TEMPEST emissions, encrypted communication devices, and hardware security. Conducted in strict adherence to national classification policies and non-disclosure obligations.

Lead Cyber Security & DevSecOps Specialist

2024 – Günümüz
Kurumsal Siber Güvenlik & Teknoloji • İstanbul, Türkiye

Architecting enterprise cloud and hybrid security postures; integrating SAST, DAST, and container security into CI/CD pipelines; driving AI-assisted vulnerability management and threat modeling.

KEY ACHIEVEMENT: Achieved 99.2% compliance in enterprise audits and reduced average vulnerability remediation turnaround by 65%.
Kubernetes Docker Linux Python Phalcon GitLab CI Burp Suite Trivy OWASP ZAP

Defense Systems & Secure Communications Integration Engineer

2022 – 2024
Savunma Sanayii Projeleri (TÜBİTAK / ASELSAN / ROKETSAN Ekosistemi) • Ankara, Türkiye DEFENSE SYSTEMS

Testing and verification of encrypted communication systems, TEMPEST hardware emission compliance, defense electronics integration, and secure protocol implementation across military-grade hardware platforms.

KEY ACHIEVEMENT: Completed zero-vulnerability acceptance tests on secure communication devices with thorough system integration compliance.
Encrypted Comms TEMPEST Systems Secure Hardware C/C++ Linux Kernel Wireshark Defense Electronics

Secure Software Engineer & Penetration Tester

2020 – 2022
Bilişim & Danışmanlık Grubu • İstanbul, Türkiye

Developing secure software architectures for enterprise web applications; conducting regular black-box and white-box penetration tests; implementing OWASP security controls.

KEY ACHIEVEMENT: Redesigned security architecture for 30+ enterprise web applications, eliminating SQL injection and authorization bypass vectors.
PHP Phalcon MySQL JavaScript REST APIs Nmap Burp Suite OWASP Top 10

Linux Systems & Network Security Administrator

2018 – 2020
Kurumsal Altyapı Çözümleri • İstanbul, Türkiye

Managing high-availability Linux server clusters; configuring enterprise firewalls, IDS/IPS sensors; implementing server hardening benchmarks and centralized log auditing.

KEY ACHIEVEMENT: Hardened 100+ production Linux servers with zero unauthorized intrusions over a multi-year production lifecycle.
Ubuntu Server Nginx Apache iptables Suricata Bash Scripting SSL/TLS Redis