Rufat Gasimov

Built reusable Python security tooling and custom Burp Suite extensions, automating manual assessment work across 20+ Agile product squads. Led security assessments across web, mobile, and REST/GraphQL APIs, identifying 40+ high/critical vulnerabilities including authentication bypasses, IDOR, and business logic flaws.

Designed and rolled out an enterprise DevSecOps pipeline serving 30+ applications, cutting critical production vulnerabilities by 70% and reducing remediation MTTR from 45 to under 15 days. Owned the security workstream for the on-premises-to-AWS migration, delivering a landing zone that passed government certification with zero critical findings.

Integrated HP Fortify SAST into Jenkins CI/CD as a release gate covering 100% of production deployments. Delivered 25+ assessments across online banking, mobile banking, and payment APIs, driving remediation of 150+ vulnerabilities including critical business logic flaws.

Built .NET Core microservices with JWT/OAuth2.0 authentication and tuned the Entity Framework Core data layer for query performance.

Certified Kubernetes Administrator (CKA) certification obtained in 2026.

Offensive Security Exploit Developer (OSED) certification obtained in 2022.

Offensive Security Certified Professional (OSCP) certification obtained in 2021.

Bachelor of Science in Information Technology from Baku Engineering University, completed in 2020.