Cyber Defence Engineer-Incident Response

Vodafone Group Plc; Fatih; Hybrid; TRY 600,000 - 900,000; Full time

Benefits offered by this job

Hybrid working kit

Ergonomic kit allowance

Digital meal voucher

Flexible transportation allowance

Private health insurance

Job summary

Vodafone Türkiye is seeking an experienced security analyst to detect and respond to cyber events with attacker‑mindset techniques. You will review logs from Active Directory, databases, networks, and applications, aligning with PCI-DSS, ISO27001, KVKK, GDPR and other standards.

The role emphasizes SIEM/SOAR content development, MITRE ATT&CK expertise, and collaboration across audits and incident response teams. Hybrid work and strong English skills are valued.

Qualifications

• BSc. in Computer / Industrial / Electrical & Electronics Engineering is desired.
• Master’s degree (preferably in Computer Science & Cyber Security) or equivalent information security experience is desired.
• At least 6 years hands‑on experience in information security.

Responsibilities

• Detect, identify and respond to cyber events with threat-based playbooks.
• Conduct continuous log reviews for assets and systems per standards (PCI-DSS, ISO27001, KVKK, GDPR, SOX).
• Contribute to SIEM and SOAR content development and incident response capabilities.
• Support audits and provide evidence of security controls.

Skills

Security mindset

MITRE ATT&CK

Threat hunting

EDR / NDR / SOAR

SIEM / UEBA / forensics

Python / Go / Bash

Cybersecurity concepts

English proficiency

Education

BSc in Computer Engineering / Industrial / EE

Master’s in CS or Cyber Security

Tools

SIEM

Firewalls

Job description

Join Us

At Vodafone, we’re not just shaping the future of connectivity for our customers – we’re shaping the future for everyone who joins our team. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.

What you’ll do

• Having a strong security analyst mindset and using best practice knowledge from an attacker’s point of view to detect, identify and respond to cyber events, known and unknown threats, security risks and vulnerabilities with effective management of response plans, across the security platform lifecycle in line with cyber security policies and procedures,
• Continuous log review for several types of assets and actions (active directory, database, applications, network, OS, user behavior etc.) in accordance with requirements defined by the governance team and required standards / regulations like PCI-DSS, ISO27001, KVKK, GDPR, SOX etc.
• Strong hands‑on experience and technical knowledge on at least one of these tools / activities; EDR, NDR, SOAR, UEBA, SIEM, sandboxes, malware / forensic analysis, threat hunting and vulnerability scanning,
• Becoming an active contributor to SIEM and SOAR systems’ content development, security orchestration and playbook implementation processes to improve overall cyber defence centre detection and incident response capability,
• Strong understanding skills & technical abilities regarding MITRE attack framework ATT&CK®,
• Integration of threat intelligence sources with SIEM and evaluation of alerts,
• Continuous attack simulation studies and defining new rules /correlations related with the output,
• Attending internal and external audits and preparing evidence when required,
• Effective reporting of log review and incident management activities on both executive and technical level.
• Having at least one of these certifications will be a plus; Security+, ECIH, GCIH, GCIA, GCTI, GCFA, CCNA, CCNP, CISSP.

Who you are

• BSc. in Computer / Industrial / Electrical & Electronics Engineering is desired,
• Master’s degree (preferably in Computer Science & Cyber Security) or equivalent information security experience is desired,
• At least 6 years hands‑on experience in information security, network administration,
• Experience working in complex operational ICT environments,Solid knowledge of security principles and practices,
• Proven experience in the following topics is desired:

• Firewall and intrusion detection/prevention protocols,
• DLP, anti-virus, anti-malware EDR solutions,
• Sandboxing and Malware analysis
• DFIR concepts
• TCP/IP, computer networking, routing and switching,Windows, UNIX and Linux operating systems,Network protocols and packet analysis,Python, Go, Bash or any other programming/scripting language knowledgeCloud computing,SaaS models,Security Information and Event Management (SIEM)

• Excellent problem‑solving and analytical skills
• Critical thinking with strong attention to details and follow up
• Technically competent to contribute towards the preparation and implementation of control processes, procedures and guidelines
• Advanced in English

Not a perfect fit?

Worried that you don’t meet all the desired criteria exactly? At Vodafone we are passionate about empowering people and creating a workplace where everyone can thrive, whatever their personal or professional background. If you’re excited about this role but your experience doesn’t align exactly with every part of the job description, we encourage you to still apply as you may be the right candidate for this role or another opportunity.

What's in it for you

We like to keep them flexible:

• Vflexy: Flexible Benefits Program
• Hybrid working kit
• Ergonomic kit allowance
• Digital meal voucher
• Flexible transportation allowance.
• Employee assistance hotline & counselling
• Comprehensive and flexible private health insurance
• Discounted price deals for wide range of products & services

Plus, plenty more to enjoy!If you want to know more about us and what we do, then visit our website: www.vodafone.com.tr

https://www.vodafone.com.tr/insan-kaynaklari

Instagram: https://www.instagram.com/vodafonekariyer/

Youtube: https://www.youtube.com/user/VFTurkiye

Data Privacy

By applying for this job, you accept the Vodafone Privacy Policy. Please visit Privacy Policy web page at https://careers.vodafone.com/privacy-policy/turkey/ for further details.

Who we are

We are a leading international Telco, serving millions of customers. At Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people's lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live and we protect the planet, whilst helping our customers do the same.

Belonging at Vodafone isn't a concept; it's lived, breathed, and cultivated through everything we do. You'll be part of a global and diverse community, with many different minds, abilities, backgrounds and cultures. ;We're committed to increase diversity, ensure equal representation, and make Vodafone a place everyone feels safe, valued and included.

If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, please refer to https://careers.vodafone.com/application-adjustments/ for guidance.

Together we can.