currently @ Enerjisa Üretim · securing critical infrastructure

Ahmet Kulekci

cyber security architect · istanbul

I'm a cybersecurity engineer focused on large-scale cloud and critical infrastructure security. I work across threat modeling, cloud-native security architecture, and defense automation over hybrid IT/OT and Kubernetes environments, with a strong DevSecOps foundation.

//RECENT BLOGS ON SUBSTACK
loading recent posts…
→ all posts on Substack ↗
//WORK HISTORY 2020 — NOW
Enerjisa Üretim
Working on security architecture for hybrid environments, focusing on IAM, and infrastructure hardening. I also supported OT security through pentesting, vulnerability management, and SAST/DAST integration in SSDLC processes.
2024 — present
BtcTurk
Worked on security operations across Azure, AWS, and on-prem environments, focusing on cloud hardening, CSPM, security baseline enforcement, and DevSecOps practices. I also contributed to incident response, vulnerability management, and breach attack simulations in a Purple Team setting.
2021 — 2024
Veri Security
Worked on digital forensics, assisting law enforcement with evidence analysis and investigation in cybercrime and fraud cases.
2020 — 2021
//CERTIFICATIONS 09 ITEMS
Certified AI Security Professional
CAISP · Practical DevSecOps
In progress
In progress
Certified Cloud Security Professional
CCSP · (ISC)²
2026.08
Verify link
Certified DevSecOps Professional
CDP · Practical DevSecOps
2026.08
Verify link
Certified Container Security Expert
CCSE · Practical DevSecOps
2025.12
Verify link
Certified Red Team Lead
CRTL · Zero-Point Security
2025.06
Verify link
Certified Red Team Operator
CRTO · Zero-Point Security
2025.04
Verify link
Microsoft Azure Security Engineer
AZ-500 · Microsoft
2023.04
Verify link
Microsoft Cyber Security Architect
SC-100 · Microsoft
2023.04
Verify link
Cyber Threat Intelligence Analysis
CTIA · EC-Council
2023.02
Verify link
//PROJECTS 04 ITEMS
cspm · posture
✓encryption at rest
✓mfa enforced
✕public storage
✓least privilege
CSPM Tool
Open-source Cloud Security Posture Management tool for multi-cloud environments. Automated security compliance checks, real-time drift detection, and remediation playbooks for AWS and Azure infrastructures.
CloudCSPM
cis · controller
Cloud CIS Benchmark Controller
Kubernetes operator that continuously monitors and enforces CIS benchmarks across cloud resources. Features automated remediation, Slack alerts, and compliance reporting dashboards.
KubernetesGo
kubectl
$ kubectl get pods
api-7f9c Running
scan-job Pending
audit-rbac Running
Kubectl Scripts Collection
Curated collection of kubectl scripts for security auditing, RBAC analysis, and rapid incident response in Kubernetes clusters. Includes automated pod security policy validation and network policy generators.
KubernetesBash
recon · attack path
Azure Pentest Automation Framework
Python-based framework automating Azure security assessments. Performs automated reconnaissance, privilege escalation checks, and generates detailed vulnerability reports with MITRE ATT&CK mapping.
PythonAzure
//CONTACT GET IN TOUCH
[email protected]→

Based in Istanbul, working remote. Open to security-engineering work, collaborations, and conversations about cloud, OT, and DevSecOps.

GitHub ↗ LinkedIn ↗ Twitter ↗ Substack ↗