PROFESSIONAL SUMMARY
  • •Penetration Tester and QA Automation Engineer with hands-on experience in identifying security vulnerabilities, performance bottlenecks, and functional bugs across web and mobile applications.
  • •Led performance optimization efforts on high-traffic platforms like Oniki, simulating thousands of users to identify and resolve bottlenecks.
  • •Built end-to-end automated test suites for critical user flows, reducing manual testing efforts and catching regression bugs early in the development cycle.
  • •Collaborated closely with dev teams to improve code quality, adopt testing best practices, and embed testing into CI/CD pipelines.
  • •Proficient in security assessments, API testing, and defect lifecycle management using modern QA frameworks.
TECHNICAL SKILLS
Testing: Cypress , Jest , Postman , Metasploit , Burp Suite , Nmap , K6 , Sqlmap , OWASP Top 10 , Performance Testing , Load Testing , Security Testing , API Testing
Languages & Frameworks: Javascript , Next.js , NodeJS , ExpressJS , PHP , Laravel
Databases & Performance:  MySql , PhpMyAdmin , Prisma
Frontend: React.js , HTML & CSS , Tailwindcss , Shadcn
Other: Git , REST API , Axios , Linux , Jenkins , Search , CI/CD , Redmine , Basecamp , Strapi , cloudinary
WORK EXPERIENCE
Penetration Tester - Freelancer
  • •Perform full-scope web-application penetration tests aligned with OWASP Top 10.
  • •Provide executive-level reports and developer-ready remediation plans; average client re-engagement rate > 80 %.
    • 05/2024 – present
  • •Assisted senior security engineers in threat-model reviews and black-box testing; validated fixes for top-priority CVEs.
  • •Authored step-by-step exploitation guides used in internal knowledge base.
    • 05/2024 – 07/2024Gebze
    Full Stack Developer - Freelancer
  • •Delivered responsive, SEO-friendly web apps with Next.js, React, and Tailwind; average Lighthouse score > 90.
  • •End-to-end ownership: requirements, architecture, CI/​CD, and production hand-over—always on time and within scope.
    • 05/2023 – 04/2024
    QA Tester⁠, MGS Software
  • •Oniki (AI-powered event platform):
  • •Designed load-testing scripts with K6, mimicking 5 000+ concurrent users; uncovered critical CPU-bound bottlenecks and helped cut average response time by 35 %.
    • 12/2021 – 04/2023Istanbul
  • •IVMO (money-transfer platform):
  • •Created an end-to-end Cypress suite covering 120+ scenarios; integrated with Jenkins to run on every pull request and release.
  • •Eliminated regression escapes, raising release confidence to > 95 %.
  • •Kokpit (SaaS field-management, 40 000+ guards):
  • •Automated functional, API, and security tests; enabled nightly CI pipelines that reduced manual test effort by 70 %.

    • Key Tech: Cypress · K6 · Postman · Jenkins · Loadium · Browser DevTools

    QA Testing Intern⁠, MGS Software
  • •Learned Cypress from scratch and built the first reusable automation framework for the QA team.
  • •Organized and documented more than 50 manual test cases, laying the foundation for future automation.
    • 11/2021 – 12/2021
    EDUCATION
    08/2019 – 08/2021Bartin, Türkiye
    Languages
    Turkish | English | Arabic