Cloud Security & DevSecOps Engineer

Onkatec; İzmit; Presencial; TRY 420.000 - 720.000; Jornada completa

Descripción de la vacante

Onkatec is looking for a Cloud Security & DevSecOps Engineer to own application security, cloud infrastructure and DevSecOps processes. We don't just find vulnerabilities; we analyze risks, build solutions and improve infrastructure so security is a natural part of the SDLC.

Onkatec is an AWS Advanced Tier Services Partner and won the AWS Consulting Partner of the Year - Turkey award at the 2026 Regional AWS Partner Awards.

Formación

• Security-focused with hands-on experience in Linux, networking and system security.
• AWS or equivalent cloud platform experience.
• Strong knowledge of web and API security including OWASP Top 10.
• Experience with security testing tools: Burp Suite, OWASP ZAP, Nessus, Nmap, Trivy.
• Familiar with Docker, Kubernetes, Git and CI/CD processes.
• Knowledge of IAM, WAF, network security and secrets management.
• A proactive problem-solver who can implement fixes, not just report issues.

Responsabilidades

• Run regular security checks on web apps, APIs and cloud infra.
• Perform vulnerability scans and authorized penetration tests when needed.
• Prioritize vulnerabilities and coordinate fixes with the dev team.
• Improve security and configuration of cloud infrastructure (AWS first).
• Integrate automated security checks (SAST, DAST, SCA) into CI/CD.
• Manage security across Docker, Kubernetes and Linux environments.
• Build logging, monitoring, alerting and incident response capabilities.
• Standardize security processes and automate them where possible.

Conocimientos

Linux basics

Networking

System security

Cloud platforms (AWS)

Web/API security

OWASP Top 10

Problem solving

Team collaboration

Herramientas

Burp Suite

OWASP ZAP

Nessus

Nmap

Trivy

Docker

Kubernetes

Git

CI/CD pipelines

Descripción del empleo

Employee Type: Full Time - Office
Job Type: Cloud Security & DevSecOps Engineer
Industry: Information Technology & Services

Cloud Security & DevSecOps Engineer

We're looking for a teammate to strengthen our technology team and take ownership of application security, cloud infrastructure and DevSecOps processes.

We don't just want someone who finds vulnerabilities. We want someone who analyzes risks, builds solutions, improves our infrastructure and makes security a natural part of the software development process.

Onkatec is an AWS Advanced Tier Services Partner and won the AWS Consulting Partner of the Year - Turkey award at the 2026 Regional AWS Partner Awards. We deliver end-to-end technology solutions for businesses across Cloud, DevOps, Migration & Modernization, Security and Generative AI.

Responsibilities

• Run regular security checks on web applications, APIs and cloud infrastructure.
• Perform vulnerability scans and authorized penetration tests when needed.
• Prioritize the vulnerabilities you find and work with the development team to get them fixed.
• Improve the security and configuration of our cloud infrastructure, AWS first and foremost.
• Integrate automated security checks (SAST, DAST, SCA) into CI/CD pipelines.
• Manage security processes across Docker, Kubernetes and Linux environments.
• Build out logging, monitoring, alerting and security incident response.
• Standardize security processes and automate them as much as possible.

What We're Looking For

• Experience with Linux, networking and system security.
• Hands-on knowledge of AWS or a similar cloud platform.
• A strong command of web and API security and the OWASP Top 10.
• Experience with Burp Suite, OWASP ZAP, Nessus, Nmap, Trivy or similar tools.
• Familiarity with Docker, Kubernetes, Git and CI/CD processes.
• Knowledge of IAM, WAF, network security and secrets management.
• The ability to solve security problems, not just report them.

What Kind of Teammate Are We Looking For?

• Takes ownership and follows work through
• Spots risks and acts on them without waiting to be told
• Works closely and smoothly with the development team
• Enjoys researching, learning and improving processes
• Strikes the right balance between security and development speed

Our goal isn't just to run security tests; it's to build secure, sustainable and scalable systems.