Onur Kolay
Principal Security Engineer @Keepnet
Signup · Get unlimited contacts
WORK HISTORY
Principal Security Engineer @Keepnet
London, GB
Led threat modeling for new features and architecture changes, identified design risks early, defined practical controls. Embedded secure coding practices into engineering workflows through standards, guidance, and enablement. Owned vulnerability management end to end, triage, prioritisation, remediation support, validation across apps and cloud. Integrated SAST, DAST, and dependency scanning into CI CD pipelines to automate security checks across the SDLC. Partnered with engineers to drive remediation, balanced risk reduction with delivery speed. Acted as senior authority for secure by design decisions across cloud architecture, application patterns, and SDLC controls. Built security culture initiatives, delivered phishing awareness work, ran a security champions programme. Communicated risk clearly to senior stakeholders, enabled decisions and prioritisation.
EDUCATION
Mustafa Hüsnü Gemici Anadolu Öğretmen Lisesi
High School Diploma
V.I. Vernadsky Taurida National University
Bachelor's degree, Computer Engineering
ABOUT ONUR KOLAY
I am a Principal Security Engineer working across application security, DevSecOps, and threat intelligence in cloud based SaaS environments. I focus on building secure by design delivery by embedding security into engineering workflows through standards, automation, and hands on partnership with product teams. My day to day work includes threat modeling for new features and architecture changes, security design reviews, and running a practical vulnerability management process from discovery to remediation validation. I implement tooling and pipeline controls for SAST, DAST, and dependency scanning to keep coverage consistent across the SDLC. I also care a lot about the human side of security, running security culture initiatives, phishing awareness, and a security champions programme that helps teams own security locally. I communicate risk clearly to senior stakeholders so decisions get made, not delayed.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.