AppSec Engineer: Vulnerability Management & Bug Bounty

Jobless; Fatih; On-site; TRY 180,000 - 280,000; Full time

Job summary

Trendyol is seeking an Application Security Engineer to work with our engineering teams to strengthen security across web and mobile platforms. You will test, validate fixes, and guide secure coding practices.

You’ll support the bug bounty program and build custom tools to improve threat detection. The role requires collaboration, clear communication, and a proactive security mindset to promote best practices throughout the organization.

Qualifications

• Proven web and mobile security testing experience.
• Experience addressing OWASP Top 10 vulnerabilities.
• Ability to perform root-cause analysis and remediation guidance.
• Experience with bug bounty platforms and tooling.
• Familiarity with front-end and back-end frameworks.

Responsibilities

• Collaborate with engineering to enhance application security across platforms.
• Perform web and mobile security testing and validate fixes via code reviews.
• Develop custom security tools and security rules (Semgrep/Nuclei).
• Guide secure coding practices and promote security across teams.
• Manage Bug Bounty Platform and remediation workflows.

Skills

Web security testing

Mobile security testing

Secure coding guidance

Programming languages

Communication skills

Education

Professional certifications in application security (eWPT, eWPTXv2, OSWE, eMAPT, GWAPT)

Tools

Semgrep

Nuclei

OWASP ZAP

Job description

Trendyol is seeking an Application Security Engineer to work with our engineering teams to strengthen security across web and mobile platforms. You will test, validate fixes, and guide secure coding practices.

You’ll support the bug bounty program and build custom tools to improve threat detection. The role requires collaboration, clear communication, and a proactive security mindset to promote best practices throughout the organization.