Mustafa
Bagci
Cybersecurity/IT Security/IAM
Business informatics graduate focused on IT security. I combine risk assessment (ISO 27001), Identity & Access Management and secure automation — from analysis to clean implementation.
Try helpwhoamiprojects · Tab to autocomplete
Security as a craft,
not a checklist.
I help organizations understand and deliberately reduce their attack surface — pragmatic, transparent and grounded in real-world operations.
As a working student at Zurich Insurance Group, I currently assess the cybersecurity of mid-sized and large enterprises against ISO 27001. Earlier, at KfW Bankengruppe I automated Identity & Access processes and cut the manual effort of access provisioning by 90%.
My background in business informatics means I think about security not only technically, but also across processes, governance and measurable value.
▣ Security & Risk
Risk assessments to ISO 27001, SIEM/SOC/EDR, BCM and forensic analysis — from finding to remediation.
◈ IAM & Automation
Identity governance, recertification and secure automation with Python & REST APIs.
◉ Cloud & Networking
Network security, Cisco/Wireshark, containers & virtualization with Docker and a clean SSDLC.
Experience
Working Student — Cyber & IT
- Conducting cyber risk assessments for mid-sized (>€400M revenue) and large enterprises (>€1bn revenue) across industries against ISO 27001 (SIEM, SOC, EDR, OT, SSDLC, BCM, FW/DMZ).
- Analyzing forensic reports, roadmaps and annual reports to evaluate response measures, security initiatives and cyber-relevant risk factors.
Working Student — Application & Technology (Client)
- Built IAM software for automated access provisioning with API integration to an external cloud service — reducing manual effort by 90%.
- Led the recertification of access rights for more than 800 data rooms.
- License and user management across more than 11 software applications.
- 2nd- and 3rd-level support including troubleshooting and API/UI improvements with the SaaS provider’s developers.
Education
- Penetration Testing & Secure Coding
- Network Security
- Distributed Applications & Integration Engineering
- Object-oriented programming (Java, Python)
- Operating systems, networks, databases & SQL
- IT controlling & project management (COBIT, TOGAF)
Performance comparison of ARM and x86-64 architectures in QEMU emulation (Debian/FreeBSD) — focusing on virtualization, containerization & system performance with Docker.
Skills
// Self-assessment · core skills
Selected Projects
IAM Proof of Concept
Automated access provisioning with API integration to an external cloud service, including support for recertifying large data-room inventories.
Camunda BPMN Workflow
Modeling and orchestration of business processes via a BPMN engine with connected service logic.
Sudoku Solver
Constraint-based solver using backtracking — a compact, efficient implementation as an algorithm study.
Spring Boot Game
Interactive game application built on a Java backend with Spring Boot — focused on clean architecture.
Let’s talk about
security.
Open to working-student, internship and entry-level roles in cybersecurity & IT — in the Frankfurt am Main area or remote.