Looking for a job

Ismail YILDIRIM

@ismailyildirim

Senior Security Engineer at Microsoft who unified Azure and AWS security controls and cut routine alert workload by over 40%.

United States

Message

At Microsoft, I own baseline security configuration across Azure and AWS, using Azure Policy Initiatives aligned to CIS, NIST 800-53, and ISO 27001. I deployed Defender for Cloud across both environments and work with technology owners to prioritize and remediate security findings.

I also operationalized Microsoft Sentinel with custom KQL analytics rules and Azure Logic Apps playbooks, reducing analyst workload on routine alerts by over 40%. I deployed Defender for Endpoint and managed Intune controls to strengthen endpoint baselines.

At PAAY, I owned incident response for a fintech payment authentication platform and improved Defender for Cloud Secure Score by 38% while cutting cloud misconfigurations by 60%. That work supported PCI-DSS and SOC 2 Type II compliance with zero audit findings.

Experience

Work history, roles, and key accomplishments

Current

Senior Cloud Security Engineer

Current

Microsoft

Sep 2024 - Present (2 years 1 month)

Owned baseline security configuration across Azure and AWS, authoring Azure Policy Initiatives aligned to CIS, NIST 800-53, and ISO 27001. Deployed Defender for Cloud, Defender for Endpoint, and Sentinel, reducing analyst workload on routine alerts by over 40%.

Azure Policy CIS Benchmarks NIST 800 53 ISO 27001 Microsoft Defender for Cloud Microsoft Defender For Endpoint Microsoft Sentinel KQL Azure Logic Apps Intune MDM MAM ASR Bitlocker Microsoft Defender Security Design

Senior Security Engineer

PAAY

Jan 2022 - Sep 2024 (2 years 8 months)

Owned incident response program for a fintech payment authentication platform, defining severity criteria and authoring custom KQL analytics rules. Achieved PCI-DSS and SOC 2 Type II compliance with zero audit findings, improving Secure Score by 38% and cutting cloud misconfigurations by 60%.

Microsoft Sentinel KQL PCI DSS SOC2 Microsoft Defender for Cloud CSPM VNet NSG ASG Purview DLP Entra PIM JIT Conditional Access

Security Engineer

WEX

May 2020 - Jan 2022 (1 year 8 months)

Reduced cloud security incidents by 30% through PCI-DSS, HIPAA, GLBA, and NIST CSF hardening audits. Implemented Microsoft Sentinel SIEM with custom KQL detection rules and built SOAR automation playbooks in Azure Logic Apps.

PCI DSS HIPAA GLBA NIST CSF Intune Microsoft Defender For Endpoint Microsoft Defender for Cloud ARM Templates Bicep Microsoft Sentinel KQL Azure Logic Apps PowerShell Python

Cybersecurity Specialist

Protiviti

Oct 2017 - Apr 2020 (2 years 6 months)

Delivered cloud security assessments across GDPR, HIPAA, PCI-DSS, and ISO 27001 for enterprise clients, identifying configuration and access gaps. Guided multiple clients to compliance with zero audit findings by implementing CIS and NIST baselines.

GDPR HIPAA PCI DSS ISO 27001 CIS Benchmarks NIST RBAC Security Architecture