About Me
Muhammed Hüseyin Karazeybek is a Lead Cyber Security Consultant
specializing in Application Security and Penetration Testing, with
nearly 6 years of hands-on experience across banking, fintech and
other regulated industries. He leads a 10-person dedicated
cybersecurity team for a global bank within RSU Consultancy,
overseeing approximately 1,500 application security and penetration
testing engagements per year.
In his current role, Hüseyin drives end-to-end AppSec programs:
web, mobile and API penetration testing, vulnerability analysis and
management, open banking security assessments, penetration testing
architecture design and security consultancy. He aligns the bank's
security assessments with leading standards and frameworks,
including OWASP, PTES/OSSTMM, NIST SP 800-115, MITRE ATT&CK,
TIBER-EU, BDDK and PCI DSS.
On the SSDLC side, Hüseyin leads SAST, DAST and secure development
initiatives, partnering closely with development teams to embed
security from the earliest stages of the software lifecycle. He
also delivers quarterly secure coding trainings to 300+ developers,
translating real-world findings into practical engineering
guidance.
Beyond consulting work, Hüseyin builds AI-driven tooling for AppSec
testing and IncidentOps workflows, combining Python-based ML
development with LLM integration. He is a Certified AI/ML Pentester
(C-AI/MLPen), Certified AppSec Practitioner (CAP), eWPTXv2
(Certified AppSec Pentesting Expert), API Security Architect, and
Microsoft Certified Software Developer (MCSD).
Hüseyin is also an active speaker and instructor at universities,
technical communities and industry events — including GDG Bursa
DevFest, GDG Hackathons, the Siber Vatan & Türkiye Siber
Güvenlik Kümelenmesi Bootcamp 2025 and the HSD YouTube channel. He
co-founded the AI and Cybersecurity communities at Bursa Uludağ
University, where he continues to mentor student teams working on
AI and security projects.
What I'm Doing
-
Application Security
End-to-end AppSec programs across banking and fintech: SSDLC integration, SAST, DAST, SCA and IAST tooling, secure coding standards, and vulnerability management aligned with OWASP, NIST and BDDK.
-
Web, Mobile & API Pentesting
Manual and automated penetration testing for web, mobile and API applications, including open banking flows. Designing pentest architectures and producing clear, remediation-focused reports for both technical and management stakeholders.
-
AI & LLM Security
Python-based ML development and LLM integration, building AI-driven tools for AppSec testing and IncidentOps workflows. Certified AI/ML Pentester (C-AI/MLPen) with applied research on securing ML systems and LLM-powered applications.
-
Consultancy & Training
Security consultancy for banking and open banking projects, plus quarterly secure coding trainings for 300+ developers. Speaker and instructor at GDG Bursa, Siber Vatan Bootcamp, HSD and various university communities on AI & cybersecurity.
