Yusuf Fatih Uludag
Sdet @GM Financial
Signup · Get unlimited contacts
WORK HISTORY
Sdet @GM Financial
Proactively identified and documented critical security vulnerabilities during the testing lifecycle, focusing on OWASP Top 10 risks such as Broken Access Control and input validation flaws.• Integrated SAST and DAST tools such as SonarQube, Veracode, OWASP ZAP, and Burp Suite into CI/CD pipelines (Azure DevOps), enabling continuous security validation within the SDLC. • Collaborated with development and DevOps teams to implement secure coding practices, addressing vulnerabilities such as SQL Injection, XSS, and Broken Access Control identified during automated testing. • Led the development and maintenance of the core automation framework using Java, Selenium, and Cucumber to validate end-to-end application functionality and security controls.• Performed comprehensive API security and functionality testing using REST Assured and Postman to validate backend endpoints against integration risks and potential vulnerabilities.• Collaborated closely with development teams to integrate automated security and functional tests into Azure Repos and Pipelines, directly supporting Continuous Integration and Deployment (CI/CD).• Implemented the Page Object Model (POM) design pattern to ensure high maintainability and scalability of the test framework.• Executed comprehensive test strategies (Regression, Integration, Sanity, Smoke) to ensure overall application stability and reliability.• Authored and maintained documentation for test cases, vulnerability reports, and mitigation strategies to support compliance with NIST CSF and ISO 27001 standards.• Conducted performance testing using JMeter to identify and address system bottlenecks, optimizing application responsiveness.• Actively drove quality and security alignment within all Agile ceremonies, including refinement, planning, and retrospectives, to ensure security requirements were addressed early in the sprint.
EDUCATION
Balıkesir Üniversitesi | Balikesir University
Bachelor's degree, Computer Teacher Education
Balıkesir University
Bachelor's degree, Computer Education and Instructional Technology
ABOUT YUSUF FATIH ULUDAG
Results-driven engineer with over 10 years of IT experience and 3+ years specializing in Application Security (AppSec) and software quality. Possess strong practical experience in vulnerability management, application security testing (SAST/DAST), and log analysis within large-scale enterprise environments.Skilled in identifying, assessing, and remediating vulnerabilities using tools such as Qualys, Splunk, OWASP ZAP, SonarQube, and Veracode. Leverages a strong background in automation (Java, Selenium, REST Assured) and CI/CD (Azure Pipelines) to integrate security testing directly into the SDLC.Proven track record of collaborating with development teams to implement secure coding practices and ensure compliance with NIST CSF. Holds key certifications including CompTIA Security+, Qualys VMDR Specialist, and IBM Cybersecurity Analyst.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.