Looking for a job

Cebrayil Tagiyev

@cebrayiltagiyev

Cybersecurity leader at B&B Security, leading Red Team operations and offensive security across web, mobile, network, and cloud.

Azerbaijan

Message

At B&B Security, I define and execute offensive security strategy across web, mobile, network, and cloud penetration testing. I lead Red Team operations and oversee complex assessments, including source code audits and application architecture reviews.

Previously, at Cyberpoint LLC, I planned and led Red Team operations to assess organizations’ detection and response capabilities. I’ve also delivered enterprise security assessments and consulting, supported security technologies at International Bank of Azerbaijan, and taught practical cybersecurity at IDTech Academy.

Experience

Work history, roles, and key accomplishments

Current

Head of Offensive Security Unit

Current

B&B Security

Jun 2025 - Present (1 year 4 months)

Led offensive security strategy, managed Red Team operations, and developed KPI frameworks. Mentored the offensive security team and collaborated with SOC, GRC, and Security Engineering teams.

Offensive Security Red Teaming Penetration Testing KPI development Team Leadership Security Strategy Risk Management

Current

Cybersecurity Instructor

Current

IDTech Academy

May 2025 - Present (1 year 5 months)

Delivered cybersecurity training covering network security, red teaming, and core security principles. Developed hands-on labs and mentored students in practical security skills.

Cybersecurity Education Network Security Red Teaming Lab Development Mentorship

Cyberattack Operations Team Lead

Cyberpoint LLC

Jul 2022 - Jun 2025 (2 years 11 months)

Led Red Team operations and developed strategic cybersecurity initiatives. Mentored team members and presented technical findings to clients and stakeholders.

Red Teaming Penetration Testing Strategic Planning Team Leadership Client Communication KPI development

Cybersecurity Consultant

Diesec

May 2023 - Jan 2024 (8 months)

Provided cybersecurity consulting services to enterprise clients, performing security assessments across web, mobile, API, network, and cloud environments. Advised on secure design and remediation strategies.

Security Assessments Web Application Penetration Testing (WAPT)Mobile Pentest API Testing Network Security Cloud Security AWS Azure Code Review

Lead Penetration Tester

Rabitabank

Nov 2021 - Jul 2022 (8 months)

Performed penetration tests on infrastructure, web applications, mobile applications, and APIs. Investigated phishing attacks and provided security consulting services.

Penetration Testing Web Application Security Mobile Security API Security Infrastructure Security Phishing Analysis Social Engineering

Information Security Specialist

International Bank of Azerbaijan

May 2020 - Nov 2021 (1 year 6 months)

Administered enterprise security technologies including PAM, DLP, and MDM. Implemented data protection protocols and investigated phishing attacks.

PAM DLP MDM Endpoint Security IAM Security Awareness Phishing Analysis

System/Network Engineer

Azerbaijan National Academy of Science

Apr 2019 - May 2020 (1 year 1 month)

Administered Windows and Linux server environments and managed enterprise network infrastructure. Monitored system performance and maintained technical documentation.