Summary
Erdem Yıldız is a Senior Application Security and DevSecOps Engineer with nine years of experience securing web, API, mobile and cloud-native systems, currently leading application security at VakıfBank in Istanbul. He brings hands-on expertise in penetration testing, secure code review, SAST/SCA/IaC/DAST pipelines, and container/Kubernetes hardening, combined with practical automation to embed security into CI/CD. As an instructor at UNIQUESEC and former consultant, he has designed enterprise secure-devops processes and trained teams on reducing false positives and tuning protection rules. Certified in AWS SAA and CKA and experienced with banking-grade compliance work, he blends offensive testing skills with pragmatic defensive engineering. Colleagues rely on him for turning complex vulnerability findings into prioritized, actionable remediation plans that align security with delivery velocity.
9 years of coding experience
1 year of employment as a software developer
Bachelor's degree, Computer Science, 3.55, Bachelor's degree, Computer Science, 3.55 at Trakya Üniversitesi
Turkish, İngilizce