Back to blog
Oğulcan Doğan

Oğulcan Doğan

DevSecOps / Cloud Security Specialist

About Me

I work at the intersection of cloud technologies and security. As a DevSecOps Cloud Security Specialist, my core focus revolves around engineering secure CI/CD pipelines, automating infrastructure scanning, and safeguarding cloud-native environments.

Beyond corporate security infrastructures, I look at software with a researcher's eye to identify complex logic vulnerabilities and enjoy contributing to the global tech ecosystem through communities like AWS Community Builders and high-altitude avionics research.

Work & Leadership Experience

Nov 2023 - Aug 2024
DevSecOps Analyst (Part-Time)
PurpleBox, Inc. | Atlanta, GA, USA (Remote & Onsite)
  • Designed and implemented secure CI/CD pipelines using Jenkins, Docker, and Kubernetes.
  • Led AWS cloud security initiatives for serverless architectures (Lambda, EKS, API Gateway, DynamoDB etc.) ensuring compliance with the AWS Well-Architected Framework.
  • Performed detailed architecture assessments focusing on IAM policies, data encryption, security logging, and monitoring.
  • Automated Infrastructure-as-Code (IaC) security scanning using Snyk and Checkov.
  • Conducted API and application penetration testing using OWASP ZAP, Burp Suite, SonarQube, and Qualys, ensuring remediation of identified vulnerabilities.
  • Implemented real-time threat detection and monitoring solutions using AWS CloudWatch and CloudTrail.
  • Optimized Qualys-to-Jira data flows via REST APIs and implemented automated security ticket integration using an open-source connector.
  • Managed Azure cloud operations and Microsoft 365 security, administering Azure AD and Microsoft Security Center policies.
July 2022 - Jan 2023
Freelance Security Researcher
HackerOne | Remote
  • Reported vulnerabilities in web and mobile applications through the HackerOne platform.
  • Identified and documented critical issues such as SQL Injection, XSS, CSRF, and IDOR.
  • Submitted detailed Proof-of-Concepts (PoCs) and remediation suggestions to program owners following OWASP Top 10 and NIST standards.

Competitions & Awards

2025
1st Place — TEKNOFEST 2025
High Altitude Rocket Competition (Avionics Lead) | Turkey

Led the avionics team to design, test, and deploy critical flight computer telemetry and safety systems for a high-altitude rocket deployment, securing first place nationally.

2024
1st Place — TEKNOFEST 2024
Medium Altitude Rocket Competition (Avionics Lead) | Turkey

Directed avionics software and hardware operations, successfully managing mid-flight communication architecture and critical recovery system logs.

Education

2022 - Expected 2025
Associate of Science (AS) - Computer Programming
Tarsus University | Mersin

GPA: 3.35 | Honors: First place in the faculty; Honor student.
Relevant Coursework: Cloud Security, Web Programming, Linux Systems, Cybersecurity Fundamentals.

Ongoing - Expected 2026
Bachelor of Science (BS) - Business Administration
Anadolu University | Eskişehir