About

I am Tahsin, an application security engineer based in Ankara. I started building and managing my own systems in high school, setting up servers, configuring networks, and maintaining a database-driven website in PHP. I learned to code through these projects, writing SQL queries and stored procedures and developing server administration tools in Visual Basic and C#.

Running those systems also introduced me to security. When my website faced SQL injection attempts and my server came under DDoS attacks, I had to learn how those attacks worked and how to defend against them. That experience shaped my approach to security: understanding how a system is built, how it can fail, and what it takes to protect it.

At university, I built on that foundation through courses, practical labs, and projects in C and C++, alongside hands-on experience in robotics programming.

I have been working at the Central Bank of the Republic of Türkiye since 2022. I test web applications, APIs, and mobile applications, and work with developers to resolve security findings. I also integrate security checks into CI/CD pipelines and develop tools to automate repetitive tasks across security workflows.

Today, much of my focus is on AI security and the use of AI in security engineering. I assess AI systems, including the applications, data, agents, and integrations around their models. I also build tools that use locally hosted language models to support security reviews and automate parts of the review process.

Beyond my day-to-day work, I enjoy vulnerability research, working on exploits, and reverse engineering binaries. I am particularly drawn to open-ended problems that require investigation rather than a fixed set of steps. Following unexpected behavior and gradually understanding its cause is a large part of what keeps me interested in security.