Baris Ekici - Senior Cyber Security Consultant, 15 Years

🚀 FRATCH GPT 2.0 - Find freelancers with a single prompt. Now including price benchmarking.

Recommended expert

Available

Cologne, Germany

Check rate

Experience

Apr 2025 - Present

1 year 5 months

Founder / Product & Security Architect

Pirpirik

Perform secure code reviews and provide secure-coding guidance across the application and platform architecture.
Engineer infrastructure security and design security-monitoring architecture, incident-response playbooks and Security-by-Design controls.

Sep 2024 - Jan 2025

5 months

Application Security Expert

Interhyp AG

Delivered supply-chain security, static application security testing, software composition analysis, application-security assessments and remediation guidance.

Sep 2024 - Jan 2025

5 months

Cryptography & Data Security Expert

Interhyp AG

Analysed the current architecture and cryptographic controls against the ING Group cryptography and data-security standard, covering encryption in use, in transit and at rest.
Produced gap analysis, remediation requirements and architectural recommendations and presented findings to stakeholders.

Jul 2024 - Jan 2025

7 months

Incident Response Process & Playbook Consultant

badenIT GmbH

Reviewed and revised incident-response processes and playbooks, prepared structured procedures and defined technical and organisational response measures.

Jul 2024 - Jan 2025

7 months

Security Service Portfolio Consultant

badenIT GmbH

Assessed the market and current architecture, evaluated technical feasibility and designed bookable security services and a service catalogue.

May 2023 - Sep 2024

1 year 5 months

Senior Detection Engineer / Purple Team Consultant

Confidential Defense Company

Operated and further developed Elastic SIEM in a complex Azure environment: log-source onboarding; parsing, normalisation and correlation; rule and use-case development; alert tuning; Cases/Investigations; L2 incident analysis and response.
Performed threat hunting, cyber threat intelligence, forensic attack and IOC analysis, and developed IOC-scanner rules using Elastic Security, Elasticsearch, Kibana, Logstash, Elastic Agent, KQL, EQL, Sigma and YARA.
Conducted red-team and purple-team assessments spanning exploit development, lateral movement, OPSEC testing, cryptographic and protocol analysis, and social-engineering scenarios; analysed existing incident playbooks and delivered risk and remediation guidance.

Feb 2023 - Apr 2023

3 months

Penetration Tester / Security Consultant

Confidential Global Private Bank

Performed infrastructure and web-interface penetration testing, SAST/DAST/SCA assessments, cryptographic-solution review and security-level analysis.
Coordinated project stakeholders and provided risk-oriented remediation recommendations.

Jan 2022 - Jul 2022

7 months

Security Consultant - Secure Unidirectional Data Transfer

BioNTech

Contributed to the design and implementation of secure unidirectional data transfer for a high-security data-flow architecture.

Sep 2021 - Mar 2022

7 months

Autonomous Driving Security Consultant

Ministry of the Interior Baden-Württemberg

Developed security concepts, assessments and requirements for autonomous and connected systems using threat modelling, security risk analysis and Secure-by-Design principles.

Sep 2021 - Jan 2022

5 months

IoT Security Quality Assurance Consultant

Fraunhofer Institute / Ministry of the Interior Baden-Württemberg

Developed IoT and embedded security requirements, threat models, risk assessments and quality-assurance measures, including a questionnaire for secure hardware, software and firmware development.

Jun 2021 - Sep 2021

4 months

Post-Incident Forensic Investigation Consultant

Doctolib

Reconstructed attacker activity and the event sequence; analysed attack vector, root cause, system weaknesses, evidence and indicators of compromise; produced remediation and hardening recommendations.

Apr 2021 - Dec 2022

1 year 9 months

Security Consultant - Data Encryption & Cryptography

Schaeffler

Analysed and advised on encryption in use, in transit and at rest, cryptographic engineering and enterprise data-protection architecture.

Aug 2020 - Dec 2020

5 months

Lead Consultant - Ransomware Incident Response & IT/OT Recovery

EBRO Thailand

Led incident response and forensic investigation in a mixed IT/OT manufacturing environment, assessed the scope of compromise and analysed attack paths and weaknesses.
Supported and coordinated containment, eradication, restoration and recovery across affected infrastructure, systems and security teams; designed remediation and hardening measures and advised stakeholders on impact and recovery priorities.

Jul 2020 - Sep 2020

3 months

Security Incident Response Consultant

Doctolib

Performed incident assessment and technical investigation, analysed technical information and indicators of compromise, identified contributing weaknesses and supported containment, remediation and security hardening.

Jun 2020 - Dec 2022

2 years 7 months

External Cyber Security Expert

PwC Germany

Engaged by PwC as an independent external expert across multiple concurrent and sequential international client assignments in healthcare, manufacturing, biotechnology, automotive/IoT, cryptography and the public sector.
Provided incident response, EDR/XDR evaluation and implementation, SIEM proof-of-concept advisory, technical security audits, architecture review, remediation planning and project/stakeholder management.

Jun 2020 - Dec 2021

1 year 7 months

Cloud Infrastructure Security Consultant

Deutsche Bahn AG

Advised system-development teams and conducted incident response, APT and suspicious-activity investigation, forensic/system analysis, weakness identification, fix tracking and hands-on remediation support.
Developed and implemented cloud-security concepts, guidelines and logging/monitoring concepts across Azure, AWS, Kubernetes and container platforms; performed process and guideline gap analysis.

Oct 2019 - Mar 2020

6 months

Vehicle Cyber Security Specialist

Hyundai-Kia Motors Corporation

Advised on ECU security features and incident-response concepts; designed incident-response processes and embedded-security architecture and integrated security processes into the applied process model.
Analysed embedded Linux, chip-level security design, functional security and inner-/inter-ECU communication; performed gap analysis and developed ECU security concepts.

Aug 2018 - Feb 2020

1 year 7 months

Application Security & Secure Coding Coach

Debeka AG

Advised development units on security requirements, static analysis and DevSecOps; performed SAST, DAST and source-code analysis and supported data anonymisation.
Coached secure coding and software-system analysis and created and delivered secure-coding training.

May 2018 - Jun 2018

2 months

Penetration Tester

Volkswagen AG

Performed infrastructure, autonomous-systems and web-interface penetration testing, SAST/DAST/SCA, cryptographic-solution assessment and security-level analysis.

Feb 2018 - Mar 2018

2 months

Security Awareness Trainer

Confidential Client

Delivered workshops on social engineering, spear phishing, cybercrime, mobile and email security, phishing and secure password design.

Oct 2017 - Jun 2018

9 months

Penetration Tester / Security Consultant

ERGO Group AG

Performed infrastructure and web-interface penetration testing, SAST/DAST/SCA and cryptographic assessment; managed project stakeholders and delivered security advice.

Aug 2016 - Nov 2017

1 year 4 months

Security Incident Response Specialist

ThyssenKrupp AG

Conducted forensic attack analysis and global compromise investigation, distinguishing attempted from successful compromise and prioritising incident response.
Designed and implemented countermeasures and incident-response tactics, supported global control rollout and coordinated international stakeholders.

May 2016 - Jul 2017

1 year 3 months

Penetration Tester / Security Consultant

StreetScooter Aachen

Tested development infrastructure and web interfaces; performed SAST/DAST/SCA, cryptographic assessment and security-level analysis and delivered remediation advice.

Apr 2016 - Apr 2016

1 month

London, United Kingdom

Cryptography Specialist

T2 Japan

Analysed cryptographic concepts and applied solutions, consolidated cryptographic papers and delivered security-level assessment and advice.

Aug 2015 - Sep 2015

2 months

Infrastructure Security & Defense Specialist

AXA Konzern AG

Designed countermeasures and WAF rules, extended defensive software baselines, researched web attack scenarios, hardened web servers and provided security advice.

Jul 2015 - Mar 2016

9 months

Security Research & Defense Specialist

Deutsche Post E-Post Development

Reengineered defensive baselines, designed countermeasures and WAF rules, assessed current web attack scenarios, performed penetration testing, server-configuration review, forensics and incident response, and coordinated stakeholders.

May 2015 - Aug 2015

4 months

Hanover, Germany

IT Security & Incident Response Specialist

Nord/LB

Performed software-security and applied-cryptography research, forensic analysis and incident response; reviewed security tests; designed security mechanisms, requirements and incident-response services; supported PAM operations and coordinated with disaster recovery and business continuity.

Dec 2014 - Apr 2015

5 months

Security Researcher / Penetration Tester

Confidential German Security Company

Researched vulnerabilities across systems and devices; designed security tests; performed source-code and web-application analysis, SAST/DAST/SCA and hardening; supported secure software, cryptographic communication and security-lab engineering.

Aug 2014 - Dec 2014

5 months

Istanbul, Turkey

Security Technical Lead

HSBC Bank AS

Designed and implemented security tests, source-code analysis, cryptographic communication reviews, web and server assessments, SAST/DAST/SCA, social-engineering and physical-security tests; coordinated external resources and a distributed team.

May 2014 - Aug 2014

4 months

Security & Communications Systems Engineer

Deutsche Bank AG Cyber Security

Reviewed and designed cryptographic communication systems; performed system and communications engineering, server-configuration and source-code reviews; developed security requirements, policies and solution designs.

Oct 2013 - Feb 2014

5 months

Security Consultant / Penetration Tester

TÜV Rheinland Service GmbH

Evaluated security appliances and anti-malware concepts; performed SAST/DAST/SCA, appliance reviews, black-/white-box web and network penetration tests; engineered honeypot and IDS capabilities and provided cryptographic endpoint advice.

Jan 2013 - Sep 2013

9 months

Security Engineer / Systems Administrator

ParStream GmbH

Administered security appliances and high-availability Linux/Unix systems; conducted network penetration tests, incident analysis and handling, endpoint-encryption support, policy/requirements design and coordination of an international distributed team.

Jan 2012 - Dec 2012

1 year

Penetration Tester / Application Security Consultant

Deutsche Post AG - E-Postbrief

Analysed source-code vulnerabilities; designed security tests using OWASP ASVS and OWASP Top 10; performed server reviews, SAST/DAST/SCA and black-/white-box testing; developed security requirements, policies and remediation advice.

Sep 2011 - Jan 2012

5 months

Secure Software Developer / Security Engineer

Deutsche Welle

Designed and developed secure JBoss plugins and extensions, hardened Linux and Windows servers and operating systems, and performed source-code reviews in a high-availability environment.

Sep 2010 - Sep 2011

1 year 1 month

Security Intelligence Engineer

Yello Strom GmbH

Designed and engineered a big-data environment for security incidents, analysed incidents, conducted data and text mining and audited a data-warehouse environment.

May 2010 - Sep 2010

5 months

Software Developer

ISB-Bonn GmbH

Designed and implemented Sage CRM extensions and databases and tested and evaluated customised solutions.

Mar 2009 - May 2010

1 year 3 months

Software Developer / Test Lab Administrator

Akkaya Consulting GmbH

Designed and implemented software modules and extensions; performed source-code, software, security and mobile-application testing; developed databases and supported networks, systems and test-lab operations.

Dec 2008 - Mar 2009

4 months

Software Security Tester

Akkaya Consulting GmbH

Designed and engineered a test network and lab, implemented software tests, administered test servers and performed source-code reviews.

Aug 2007 - Nov 2008

1 year 4 months

Security Software Developer

REWE Informations-Systeme GmbH

Designed and implemented a security-monitoring tool.

Jan 2000 - Dec 2006

7 years

Infantry / Electronic Warfare

German Armed Forces - Division Spezielle Operationen

Military service in an infantry and electronic-warfare context.

Industry experience

See where this freelancer has spent most of their professional time.

Experienced in Information Technology, Government and Administration, Automotive, Manufacturing, Biotechnology, and Healthcare.

Information Technology

Government and Administration

Automotive

Manufacturing

Biotechnology

Healthcare

Business area experience

See which departments and functions this freelancer has contributed to most.

Experienced in Information Technology, Operations, Quality Assurance, Product Development, Audit, and Project Management.

Information Technology

Operations

Quality Assurance

Product Development

Audit

Project Management

Summary

Senior Cyber Security Consultant with more than 15 years of international experience across cyber defense, digital forensics and incident response, detection engineering, security architecture, cryptography, application security, cloud security and offensive security. Combines hands-on technical investigation and engineering with architecture design, requirements development, remediation planning and stakeholder advisory in regulated, high-risk and mission-critical environments.

Engagement experience spans defense, banking and insurance, critical infrastructure, industrial manufacturing, automotive and embedded systems, healthcare and biotechnology, government and public-sector organisations, and international technology environments.

Skills

Cyber Defense & Dfir: Incident Investigation, Compromise Scoping, Forensic Reconstruction, Root-Cause Analysis, Containment, Eradication, Remediation, Recovery Support And Post-Incident Hardening.
Detection Engineering & Security Operations: Elastic Security Operations And Development; Log-Source Onboarding; Parsing, Normalisation And Correlation; Detection Rules And Use Cases; Alert Tuning; Threat Hunting; L2 Analysis; Kql, Eql, Sigma, Yara And Mitre Att&Ck.
Security Architecture & Cryptography: Secure Architecture, Encryption In Use/In Transit/At Rest, Cryptographic Architecture And Protocol Analysis, Controlled Data-Flow Design, Key-Management Context And Architectural Gap Analysis.
Application Security & Devsecops: Sast, Dast And Sca In Ci/Cd; Security Quality Gates; Threat Modelling; Secure-By-Design; Secure Code Review; Secure-Coding Guidance; Software Supply-Chain Security And Remediation Advisory.
Cloud & Infrastructure Security: Azure And Aws Security, Kubernetes And Container Security, Infrastructure Assessment, Logging And Monitoring Concepts, System Hardening, Vulnerability Handling And Remediation Tracking; Limited Gcp Exposure.
Offensive Security & Purple Teaming: Infrastructure, Network And Web-Application Penetration Testing; Red-Team Assessments; Exploit Development; Lateral Movement; Opsec Testing; Social-Engineering Assessments And Validation Of Defensive Controls.
Governance, Requirements & Strategic Advisory: Security Requirements Engineering, Technical Feasibility Studies, Service Design, Incident-Response Process And Playbook Engineering, Gap Analysis, Technical-Policy Translation, Project Coordination And Stakeholder Communication.

Languages

German

Native

English

Advanced

Education

Bonn-Rhein-Sieg University of Applied Sciences

B.Sc. · Computer Science / IT Security · Sankt Augustin, Germany

B.I.B. International College

B.Sc. · Applied Computer Science · Paderborn, Germany

University of Southampton

B.Sc. · Software Technology · Southampton, United Kingdom

Statistics

Experience

Total positions 40

Experience in Information Technology 10 y

Avg length 10 m

Longest experience 6 y 11 m

Global experience

Countries worked in 3 (United Kingdom, Germany, Turkey)

Primary country United Kingdom

Expertise

Recent roles Founder / Product & Security Architect, Application Security Expert, Cryptography & Data Security Expert

Main industries Information Technology, Government and Administration, Automotive

Main business areas Information Technology, Operations, Quality Assurance

Qualifications

Highest degree Bachelor

Profile

Member since

August 2026

Need a freelancer? Find your match in seconds.

Try FRATCH GPT

Frequently asked questions

Have questions? Find more information here.

Baris is based in Cologne, Germany.

Baris speaks the following languages: German (Native), English (Advanced).

Baris has at least 25 years of experience. During this time, Baris has worked in at least 38 different roles and for 36 different companies. The average length of individual experience is 1 year and 7 months. Note that Baris may not have shared all experience and actually has more experience.

Based on recent experience, Baris would be well-suited for roles such as: Founder / Product & Security Architect, Application Security Expert, Cryptography & Data Security Expert.

Baris's most recent position is Founder / Product & Security Architect at Pirpirik.

In recent years, Baris has worked for Pirpirik, Interhyp AG, badenIT GmbH, Confidential Defense Company, and Confidential Global Private Bank.

Baris is most experienced in industries like Information Technology, Government and Administration, and Automotive. Baris also has some experience in Manufacturing, Biotechnology, and Healthcare.

Baris is most experienced in business areas like Information Technology, Operations, and Quality Assurance. Baris also has some experience in Product Development, Audit, and Project Management.

Baris has recently worked in industries like Information Technology, Biotechnology, and Automotive.

Baris has recently worked in business areas like Information Technology, Project Management, and Audit.

Baris holds a Bachelor in Computer Science / IT Security from Bonn-Rhein-Sieg University of Applied Sciences, a Bachelor in Applied Computer Science from B.I.B. International College and a Bachelor in Software Technology from University of Southampton.

Baris is immediately available full-time for suitable projects.

Daily rate distribution

0 2 4 6 8

<€480 €480-640 €640-800 €800-960 €960-1120 €1120+

The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.

Average rates for similar positions

Rates are based on recent contracts and do not include FRATCH margin.

1000

750

500

250

Daily rate avg. 770 €

The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.

1000

750

500

250

Median rate 800 €

The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.

Calculated based on our freelancers’ daily rates as of 26 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.