System Risk Analysis
I identify and assess risks across the group's systems and digital assets, and prioritise them by impact.
[ DIGITAL RISK & BRAND PROTECTION ]
I work as a Senior Digital Risk & Brand Protection Specialist at a private group of companies. I am responsible for this work across the whole group.
01
I started in 2012 out of curiosity. I wanted to understand how systems really work, and over time that curiosity turned into a career in security.
Since 2023 I have been responsible for digital risk and brand protection across a private group of companies. The work covers system risk analysis, brand protection, phishing detection and reverse engineering research.
From 2016 to 2023 I ran my own mining hardware, ASICs and GPU rigs, and mined Bitcoin, Ethereum, Ethereum Classic and Ravencoin. Most of what I know about firmware, power and cooling comes from keeping those machines running. Outside work, I now spend time on local AI: building datasets, improving their efficiency, and training and fine-tuning models on my own hardware.
The subject I keep coming back to is post-quantum cryptography, mainly the new key exchange and signature schemes. I want to know how systems that were never designed for them will cope, and what they change higher up, in TLS termination, DDoS mitigation at the edge and signing on blockchains. For now that means reading the standards, running the implementations and keeping notes.
02
The first four are my professional areas. The last two come from personal projects.
I identify and assess risks across the group's systems and digital assets, and prioritise them by impact.
I monitor the group's brands for misuse: lookalike domains, cloned websites, fake social media accounts and fake mobile apps.
I detect phishing pages and campaigns aimed at the group and its brands, and analyse the infrastructure behind them.
I take apart phishing kits, malicious files and suspicious applications to understand how they work and what they target.
For seven years I ran ASICs and GPU rigs mining Bitcoin, Ethereum, Ethereum Classic and Ravencoin. I know that side from operating it: pool credentials, where firmware comes from, remote management, power and thermal limits, and the attacks that go after hashrate and leave the wallet alone.
Dataset creation, improving dataset efficiency, local model training and fine-tuning. The whole process runs on my own hardware.
03
What I am working on now.
My role covers every company in the group and includes system risk analysis, brand protection, phishing detection and reverse engineering research.
I build datasets, improve their efficiency, and train and fine-tune models locally on my own hardware.
I read the standards for ML-KEM and ML-DSA, run the implementations and keep notes.
04
The short version, by date.
Curiosity about how one system worked. I had no plan for where it would go.
ASICs and GPU rigs that I set up, ran and maintained myself. Firmware, pool configuration, power draw and cooling were things I dealt with more or less every day.
A private group of companies. Digital risk and brand protection for the whole group.
Dataset creation and efficiency work, local model training and fine-tuning.
05
Headlines from sites I read: security news, crypto and AI. Pulled from the publishers' RSS feeds every 30 minutes; each one links to the original article.
06
For professional matters, or to talk about local AI and post-quantum cryptography, you can reach me by e-mail.
hello@okankilicer.com