Hasan Tufan Turhan

I am a cybersecurity professional with over 4 years of experience securing critical infrastructures in the finance and technology sectors. My expertise covers web, mobile, API, and network penetration testing, as well as in-depth source code analysis (SAST), dynamic testing (DAST), software composition analysis (SCA), and container & Kubernetes security.

I combine manual testing with automation to discover and exploit real-world vulnerabilities, providing clear and actionable reports that help organizations strengthen their security posture. I also have hands-on experience in ISO 27001 compliance, red teaming, threat modeling, and building automated security testing pipelines.

My goal is to help organizations reduce their attack surface, build strong and sustainable security architectures, and align with international security standards.

✅ Key Skills:

• Penetration Testing (Web / Mobile / API / Network)

• Source Code Analysis (SAST), DAST & SCA

• Container & Kubernetes Security

• Vulnerability Assessment & Reporting

• ISO 27001 Compliance

• Red Teaming & Threat Modeling

• Linux, Scripting & Security Automation