Ismail Arici

Security Engineer | Security Analyst

Skills

Cloud Computing

Collaborated on the design, implementation and maintenance of a complete AWS infrastructure to develop internal and external applications for e-commerce platforms for multiple clients.
Applied IaC using Terraform and CloudFormation to enable a client to automate configuration, reuse codes for related projects, and perform documented configurational changes.
Maintained automated monitoring and alerting processes for a cloud infrastructure by analyzing performance metrics and evaluating security to identify incidents and mitigate breaches.
Familiarity with containerization tools and orchestration technologies such as Docker and Kubernetes.

Cybersecurity

Detailed understanding of enhanced security through training and experience with computer networking, securing networks, identity and access management, risk management, business continuity, intrusion detection, vulnerability management, incident response, and defensive security.
Extensive knowledge in compliance and regulatory governance and common cyber security frameworks such as NIST and PIPEDA.
Experience applying the MITRE ATT&CK Framework to locate threats and identify risks in the infrastructure informed by common vulnerabilities and threats.

Leadership & Communication

Supervised and mentored a cohort of junior engineers to facilitate the development of technical skills and integration into the existing team culture, helping the majority of them obtain full-time roles in the organization.
Led numerous team projects to generate solutions for infrastructural problems, which resulted in greater cost efficiencies when using cloud services.
Established and maintained relationships with multiple clients to ensure an accurate and ongoing understanding of their technical requirements, expected timelines, and budget considerations.
Demonstrated proficiency writing and presenting technical and architectural reports to diverse clients and cross-functional teams to ensure that client requirements were addressed through effective solutions.
Completely fluent in writing and speaking English and Turkish.

Scripting Languages

Extensive experience learning and applying multiple languages, including Python, Terraform Configuration Language, JSON, YAML, and SQL, to provision and configure infrastructural changes and interact with databases, as well as HTML and CSS for web development.

Experience

Security Analyst | Case IQ | CANADA | 06/2023 - Present

Contributed to the successful completion of SOC 2 Type II and ISO 27001 certifications through cross-functional collaboration and policy implementation.
Participated in security integration efforts across three platforms following two acquisitions, ensuring consistent application of security controls.
Helped design and operationalize a vulnerability management process focused on early detection, prioritization, and remediation as part of a shift-left security approach.
Worked with engineering and product teams to integrate security into the software development lifecycle (SDLC), including static and dynamic application security testing.
Managed vulnerability, risk, and compliance activities to support adherence to ISO 27001, SOC 2, and HIPAA requirements.
Contributed to vendor assessments, focusing on data residency, AI model usage, authentication requirements, and subprocessor management.
Conducted cloud security assessments and audits to ensure adherence to best practices and regulatory frameworks.
Completed client security assessments, identifying risks and ensuring alignment with organizational and regulatory standards.
Triaged and escalated alerts from various security systems, improving incident response workflows and time to resolution.
Developed and maintained incident response plans for security events and coordinated remediation efforts across teams.
Implemented identity and access management (IAM) controls, including role-based access controls (RBAC) and multi-factor authentication (MFA).
Collaborated cross-functionally on internal security processes, supported audit readiness, and responded to compliance-related stakeholder inquiries.
Recognized as “Case IQ Star” – Employee of the Quarter in July 2025 for contributions to the security and compliance program.

Cloud Engineer | RGS Software | TURKEY | 06/2019 - 12/2022

Led infrastructure maintenance and development for e-commerce platforms using AWS.
Automated provisioning using Terraform and CloudFormation, improving infrastructure reliability.
Developed solutions for cost optimization, reducing AWS expenses by 20% in one year.

IT Supervisor & Instructor | Medipol University | TURKEY | 09/2016 - 06/2018

Designed and maintained an infrastructure for a shared file system for 100 instructors.
Archived access logs for university compliance and mentored engineering students in English proficiency.

Education

Ph.D. in Leadership, Higher and Adult Education | University of Toronto | CANADA

Dissertation topic: The privacy paradox: Managing compliance requirements while adopting new technologies in Higher Education.

Cybersecurity Training Program | Fields Institute of Mathematics | CANADA | 2023

An intensive program focused on cloud security, risk management, and vulnerability management.

Master of Arts in English | Canakkale University | TURKEY | 2019

Bachelor's in English | Istanbul University | TURKEY | 2013

Projects

Key projects include:

Designed and deployed a highly available and secure 3-tier application environment in AWS using Terraform.
Collaborated on the design and maintenance of AWS infrastructure for multiple clients, applying IaC for automation.
Completed the cloud resume challenge and deployed it on Microsoft Azure. See https://cloudresumechallenge.dev