Okan taşçıoğlu

I am a hands-on penetration tester with a strong background in application and API security, combined with practical secure backend development experience. I focus on identifying real-world vulnerabilities through full attack lifecycle testing, including reconnaissance, exploitation, and post-exploitation, with an emphasis on business logic, access control, and privilege escalation issues.

On the engineering side, I build and secure production-ready REST APIs using Python and Java, implementing modern authentication and authorization mechanisms, role-based access control, and secure data handling. This development background allows me to assess applications with a deep understanding of how systems are actually designed, built, and deployed.

I take a practical, results-driven approach to security, aligning my work with OWASP Top 10 and secure-by-design principles. I maintain a strong hands-on security profile, including a high global ranking on TryHackMe (#105), and aim to deliver findings that are actionable, realistic, and valuable to engineering teams.