Umut Şimşek

Leading a small team of security experts to secure public & private cloud infrastructures. Using cloud native features and cspm tool capabilities in automation. Guiding and mentoring other security teams within company. Improving security posture and compliance in cloud environments and container orchestration platforms ie kubernetes and openshift. Helping establish security baseline standards and defining security principles for critical cloud services

Performed firewall rule base change approvals and consultancy for on premises and cloud (AWS & Azure) infrastructures, periodic firewall rule reviews Enforced compliance with company security policies & standards Responsible for cloud-based Web Filtering Service, Network Firewall, Web Application Firewall services Took part in Security Incident response and handling activities which falls within network security domain, Problem and Change Management activities

• Conduct POC demonstrations for NAC & SIEM, implementation & on-site support for Network Access Control (NAC) projects mainly for largest financial institutions of Turkey • Support product research & development activities • Troubleshoot-fix product issues

• Coordinated, supervised penetration tests and performed remediation activities • Maintained disaster recovery site, coordinated and performed disaster recovery tests • Administered and maintained core banking application servers, storage and backup systems, SIEM solution • Managed core-banking and other local services according to ITIL principles • Managed local projects, coordinated geographically distant central teams

• Administered and maintained core banking application servers, storage and backup infrastructure • Ensured security of core banking platform • Administered and maintained Business Service Management and Operations monitoring application • Measured and generated SLA reports • Took part in Business Continuity tests

• Administered and maintained domain, messaging infrastructure and client systems • Developed operating procedures & standards • Analyzed malware, responded to IT Security incidents • Designed and operated Data Centre facility • Administered VMware and Hyper-V virtualization platforms, proxy/firewall, SMTP gateway and Anti-Virus applications • Implemented critical processes, hardware, network and database utilization monitoring solution

• Installed, administered, maintained, fine-tuned and troubleshot IPS, Firewall, SSLVPN, Load Balancer, Content Filter, Web & Email Security Gateway appliances and applications as part of Managed Security Services (MSS), Nette Çocuk Var and Intranet Security projects of Turkish Telekom – Largest ISP of country. • Trained MSS customers • Responded to network level attacks • Provided L1 support and security consultancy • Performed mitigation and analysis against Cyber attacks

• Developed and enforced corporate security policies • Met compliance and regulatory requirements • Performed Incident Response activities • Analyzed malware • Administered Active Directory and critical file servers change auditing solution • Administered SSLVPN, URL filter, Proxy/Firewall Server, IPS,WAF applications and appliances • Coordinated and planned patch management process • Security scanned web applications • Performed internal penetration tests