Ismail Arici

Cloud Security Engineer | Associate Security Analyst

Skills

Cloud Computing

Collaborated on the design, implementation and maintenance of a complete AWS infrastructure to develop internal and external applications for e-commerce platforms for multiple clients.
Applied IaC using Terraform and CloudFormation to enable a client to automate configuration, reuse codes for related projects, and perform documented configurational changes.
Maintained automated monitoring and alerting processes for a cloud infrastructure by analyzing performance metrics and evaluating security to identify incidents and mitigate breaches.
Familiarity with containerization tools and orchestration technologies such as Docker and Kubernetes.

Cybersecurity

Detailed understanding of enhanced security through training and experience with computer networking, securing networks, identity and access management, risk management, business continuity, intrusion detection, vulnerability management, incident response, and defensive security.
Extensive knowledge in compliance and regulatory governance and common cyber security frameworks such as NIST and PIPEDA.
Experience applying the MITRE ATT&CK Framework to locate threats and identify risks in the infrastructure informed by common vulnerabilities and threats.

Leadership & Communication

Supervised and mentored a cohort of junior engineers to facilitate the development of technical skills and integration into the existing team culture, helping the majority of them obtain full-time roles in the organization.
Led numerous team projects to generate solutions for infrastructural problems, which resulted in greater cost efficiencies when using cloud services.
Established and maintained relationships with multiple clients to ensure an accurate and ongoing understanding of their technical requirements, expected timelines, and budget considerations.
Demonstrated proficiency writing and presenting technical and architectural reports to diverse clients and cross-functional teams to ensure that client requirements were addressed through effective solutions.
Completely fluent in writing and speaking English and Turkish.

Scripting Languages

Extensive experience learning and applying multiple languages, including Python, Terraform Configuration Language, JSON, YAML, and SQL, to provision and configure infrastructural changes and interact with databases, as well as HTML and CSS for web development.

Experience

Security Analyst | Case IQ | CANADA | 06/2023 - Present

Implemented identity and access management (IAM) controls, including role-based access controls (RBAC) and multi-factor authentication (MFA).
Developed and maintained incident response plans for events and incidents and coordinated remediation efforts.
Completed comprehensive client security assessments, identifying risks and ensuring alignment with organizational and regulatory security standards.
Conducted cloud security assessments and audits to ensure adherence to best practices and regulatory standards.
Triaged and escalated alerts from various security systems and appliances, enhancing the organization's incident response capabilities.
Managed vulnerability, risk, and compliance activities, ensuring adherence to industry standards (ISO 27001, SOC 2, HIPAA).
Collaborated on achieving ISO 27001 certification and SOC 2 Type II compliance, enhancing the organization's security posture and aligning with industry standards.
Collaborated cross-functionally on security processes and responded to security inquiries from stakeholders.

Cloud Engineer | RGS Software | TURKEY | 06/2019 - 12/2022

Led infrastructure maintenance and development for e-commerce platforms using AWS.
Automated provisioning using Terraform and CloudFormation, improving infrastructure reliability.
Developed solutions for cost optimization, reducing AWS expenses by 20% in one year.

IT Supervisor & Instructor | Medipol University | TURKEY | 09/2016 - 06/2018

Designed and maintained an infrastructure for a shared file system for 100 instructors.
Archived access logs for university compliance and mentored engineering students in English proficiency.

Education

Ph.D. in Leadership, Higher and Adult Education | University of Toronto | CANADA

Dissertation topic: The privacy paradox: Managing compliance requirements while adopting new technologies in Higher Education.

Cybersecurity Training Program | Fields Institute of Mathematics | CANADA | 2023

An intensive program focused on cloud security, risk management, and vulnerability management.

Master of Arts in English | Canakkale University | TURKEY | 2019

Bachelor's in English | Istanbul University | TURKEY | 2013

Projects

Key projects include:

Designed and deployed a highly available and secure 3-tier application environment in AWS using Terraform.
Collaborated on the design and maintenance of AWS infrastructure for multiple clients, applying IaC for automation.
Completed the cloud resume challenge and deployed it on Microsoft Azure. See https://cloudresumechallenge.dev