Doğan Aydın
Software Architect | Go & Python | Microservices | Cybersecurity Platforms
Türkiye (Remote) [email protected] linkedin.com/in/dgn-ydn github.com/doganaydindev
Currently Software Architect at Dista Siber Güvenlik, since Sep 2024.
Professional Summary
Software Architect with 15 years of software development experience across architecture, system design, and hands-on delivery in cybersecurity, payments/e-money, Web3, industrial automation, and enterprise ERP domains. Currently working as Software Architect on ECHO (Echo CTI) at Dista, an external threat protection platform covering attack surface management, digital risk protection, and cyber threat intelligence. Previously designed and built Go microservices with Gokit and Apache Kafka for an electronic money and payment services provider. Experienced with Python (FastAPI, Celery), Go, MongoDB, PostgreSQL, Redis, RabbitMQ, Kafka, and Keycloak. Focused on scalable distributed systems, event-driven architectures, API design, and data stores; effective both as a team player and working independently.
Core Competencies
- Architecture
- Software Architecture, Software Design, Microservices, Distributed Systems, Event-Driven Architecture, Asynchronous / Queue-Based Processing, REST APIs, OpenAPI, Secure Coding
- Languages & Frameworks
- Python, FastAPI, Celery, Django, Go (Golang), Gokit, JavaScript, TypeScript, Node.js, Rust, C#, .NET, Java, PHP, CakePHP, C
- Data & Messaging
- MongoDB, PostgreSQL, MySQL, Redis, Apache Kafka, RabbitMQ
- Identity, DevOps & Tooling
- Keycloak, OAuth2, OpenID Connect (OIDC), 2FA, Docker, GitLab CI, Docusaurus, API Documentation
- Cybersecurity
- Attack Surface Management (ASM), Digital Risk Protection (DRP), Threat Intelligence, Threat Hunting, IOC Management, STIX/TAXII, OpenCTI, MITRE ATT&CK, Sigma, OSINT, Vulnerability Scanning, SSL/TLS, DNS Security, Nmap, Shodan, Censys
- Other
- Web3, Solana, Arduino, IoT, Industrial Automation
Professional Experience
-
Software Architect — Dista Siber Güvenlik (Echo CTI)
Sep 2024 – PresentECHO External Threat Protection Platform (EchoCTI): attack surface management (ASM), digital risk protection (DRP), and cyber threat intelligence (CTI) modules in one platform.
- Software architect on the ECHO platform, working across its ASM, DRP, and CTI modules.
- Attack surface management: automated, continuous discovery of external-facing digital assets from a customer's main domain, with uptime monitoring, critical port discovery and active port scanning, service detection, DNS analysis, website and mail server security checks, and active vulnerability scans.
- Alerting: email and API notifications when a critical vulnerability is detected, plus incident playbooks for response.
- Digital risk protection: phishing and fake domain detection and tracking, credential leak (PII) detection, impersonating social media account and rogue mobile app detection, and IP, SMTP server, and domain reputation monitoring across the surface, deep, and dark web.
- Cyber threat intelligence: threat investigation (brand search), IOC investigation, OSINT investigation, Git tracker (GitHub investigation), vulnerability tracking, and APT / threat actor monitoring.
- Threat feed and IOC integration over API with SIEM and endpoint security solutions.
- Platform access features including 2FA login and multi-user access.
-
Senior Software Developer — SuperPay Ödeme Hizmetleri ve Elektronik Para A.Ş.
Apr 2023 – Dec 2023- Designed and implemented scalable payment-related backend services as Go microservices built with Gokit for a licensed electronic money and payment services company.
- Built event-driven communication between services on Apache Kafka, using asynchronous messaging to decouple producers and consumers.
- Modeled and integrated data persistence with PostgreSQL and MongoDB according to each service's requirements.
- Applied software design and web engineering practices to service boundaries, API contracts, and Go codebases.
-
Software Engineering Manager — Moobile
May 2022 – Nov 2022- Managed and led the developer team building the company's Web3 technologies.
- Directed and contributed to Web3 development with JavaScript, TypeScript, Rust, and the Solana blockchain.
- Shaped the software infrastructure supporting the team's Web3 products.
-
Freelance / Independent Software Developer — Self-employed
Jan 2019 – May 2022- Delivered custom web applications and backend services for clients as an independent contractor.
- Built REST APIs and full-stack web solutions with Node.js, JavaScript/TypeScript, and Go.
- Designed data models and integrations on relational and document databases for client systems.
-
Senior Software Developer — Bullseye Athletics
Jan 2018 – Jan 2019Sports facility management system covering member registration, facility entries, and prepaid cards.
- Developed the web application and user database for managing member data.
- Built a networked locker-lock system on Arduino integrated with the facility system.
- Delivered iOS and Android self-service applications for members.
- Worked with C, Node.js, and Arduino across hardware and software components.
-
Senior Software Developer — Heyt Technology
Jan 2017 – Jan 2018- Led software development on the project team delivering factory automation solutions.
- Built automation software with C# and .NET integrated with Arduino-based hardware.
-
Senior Web Developer — MKS DevO Chemicals
Jan 2015 – Jan 2017- Developed the company's ERP system in Java, translating business processes into software requirements.
- Built and maintained additional internal Java and PHP projects.
-
Software Developer — Procom Bilişim
Jan 2012 – Dec 2014- Developed custom software and websites for clients.
- Built web applications with PHP and the CakePHP framework.
- Used MySQL for application data storage.
-
Freelance / Independent Software Developer — Self-employed
Sep 2011 – Dec 2011- Built custom websites and web applications for clients with PHP and MySQL.
- Implemented server-side PHP logic and MySQL schemas for client web projects.
Projects
- ferris-pulse (Rust): Uptime monitor (HTTP/TCP/DNS/ICMP/TLS), TUI, REST API, hot-reload. github.com/doganaydindev/ferris-pulse
- dlqautopsy (Go): AWS SQS dead-letter queue analysis into local SQLite. github.com/doganaydindev/dlqautopsy
- retcon: SQLite-backed workflow runtime. github.com/doganaydindev/retcon
- Ödev Makinesi: AI-powered homework helper web application. odevmakinesi.com
Certifications
- Secure Coding in Go (LinkedIn Learning, 2023)
- Go Essentials: Concurrency, Connectivity, and High-Performance Apps (LinkedIn Learning, 2023)
- Practice It: Go REST API Server (LinkedIn Learning, 2023)
- Software Architecture: From Developer to Architect (LinkedIn Learning, 2023)
Education
High School Diploma — Türkiye