Software Development
Custom web applications, APIs and internal tools. Clear structure, tested code and documentation your team can work with after handover.
- Web applications and dashboards
- REST APIs and integrations
- Process automation
01 — Perspective
I help businesses build reliable software and protect what matters, from the first line of code to the cloud.
Eray UlusoySoftware Engineer & Security Consultant
I — Services
Engineering and defensive security
Three disciplines that usually sit with three different vendors. Keeping them together means security decisions are made while the system is designed, not after it ships.
Cybersecurity
Penetration testing and vulnerability assessments for web applications and networks. Each finding is rated by severity and explained with a clear fix.
- Web application penetration testing
- Vulnerability assessment
- Code and configuration review
Cloud & AWS
Secure foundations on AWS: access control with least privilege, sensible network design and storage that is private by default.
- IAM and access design
- VPC and network setup
- S3 and configuration reviews
II — Approach
A clear method, from first call to handover
Every engagement follows the same four stages, so you always know where the work stands and what comes next.
I.
Understand
Your goals, your current systems and the risks that matter most to your business.
II.
Design
A written plan for the architecture and security controls, agreed before any build starts.
III.
Build & Test
Implementation with automated tests, followed by my own attacker-style review.
IV.
Secure & Support
Hardened deployment, documentation and a handover your team can maintain.
III — Engagements
Ways to work together
Fixed-scope engagements with a clear deliverable. Scope and price are agreed in writing after a short introductory call.
Secure application build
A new web application or API, designed and built with security reviewed at every stage.
- Typical length
- 4 – 10 weeks
- You receive
- Source code, deployment, technical documentation
Security assessment
A structured test of an existing website, application or network to find weaknesses before someone else does.
- Typical length
- 1 – 3 weeks
- You receive
- Written report with severity ratings and fixes, plus a retest
AWS readiness review
A review of how your AWS account is set up, focused on access, exposure and the basics that prevent most incidents.
- Typical length
- 1 – 2 weeks
- You receive
- Findings, priorities and a step-by-step remediation plan
IV — About
An engineer who also thinks like an attacker.
I have spent the past four years building software and testing systems for security weaknesses. That combination shapes how I work: I write code expecting it to be attacked, and I test systems knowing how they are built.
I now work independently under my own name, which means every client works with me directly, from the first conversation to the final handover. I am currently extending my work into cloud infrastructure through the AWS certification track.
Certification track
AWS Certified Cloud PractitionerCloud concepts, security, core services
In progressAWS Certified Solutions Architect – AssociateSecure and resilient architecture design
PlannedAWS Certified Security – SpecialtyDetection, incident response, data protection
PlannedV — Principles
How I work
Discretion
Your code, your systems and anything I find in them stay confidential. Findings go only to the people you name.
Precision
Clear scope, clear reports and no unnecessary complexity. Every recommendation comes with the reason behind it.
Accountability
One person responsible for the work from start to finish. Nothing is passed on to subcontractors.
VI — Contact
Let's discuss your project.
Tell me briefly what you need using the form, or send me a message on LinkedIn. I reply to every enquiry within two working days, and the first call is free of charge.
LinkedInlinkedin.com/in/eray-u-163bb5373
LocationRemote · Working with clients internationally