Cyber Defence Engineer-Incident Response

Vodafone; Fatih; Hybrid; TRY 900,000 - 1,300,000; Full time

Benefits offered by this job

Flexible benefits program

Hybrid working kit

Ergonomic kit allowance

Digital meal voucher

Transportation allowance

Employee assistance hotline & counsel

Private health insurance

Discounted products & services

Job summary

Vodafone Turkey is seeking an experienced security analyst to detect and respond to cyber events across the organization. You will leverage SIEM, SOAR, and threat intelligence to strengthen the security operations center, while aligning with regulatory requirements and internal policies.

The role requires hands-on expertise in EDR/NDR/SIEM, strong log review capabilities, and the ability to contribute to playbooks and audits.

Qualifications

• At least 6 years hands-on information security experience.
• Experience with complex operational ICT environments.

Responsibilities

• Detect, identify and respond to cyber events and threats.
• Review logs across Active Directory, databases, networks and OS.
• Contribute to SIEM/SOAR content and playbooks.
• Support audits and provide evidence as needed.
• Report log review and incident management to executives and tech teams.
• Engage with threat intel sources and MITRE ATT&CK mappings.

Skills

Security mindset

Incident response

Threat hunting

EDR/NDR/SOAR/SIEM

MITRE ATT&CK

Threat intelligence

Logs analysis

Python/Go/Bash

Education

Bachelor's degree in Computer/Industrial/Electrical & Electronics Engineering

Master’s degree in Computer Science & Cyber Security

Tools

EDR

NDR

SOAR

UEBA

SIEM

Malware analysis

Job description

Join Us

At Vodafone, we’re not just shaping the future of connectivity for our customers – we’re shaping the future for everyone who joins our team. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.

What You’ll Do

• Having a strong security analyst mindset and using best practice knowledge from an attacker’s point of view to detect, identify and respond to cyber events, known and unknown threats, security risks and vulnerabilities with effective management of response plans, across the security platform lifecycle in line with cyber security policies and procedures,


• Continuous log review for several types of assets and actions (active directory, database, applications, network, OS, user behavior etc.) in accordance with requirements defined by the governance team and required standards / regulations like PCI-DSS, ISO27001, KVKK, GDPR, SOX etc


• Strong hands‑on experience and technical knowledge on at least one of these tools / activities; EDR, NDR, SOAR, UEBA, SIEM, sandboxes, malware / forensic analysis, threat hunting and vulnerability scanning,


• Becoming an active contributor to SIEM and SOAR systems’ content development, security orchestration and playbook implementation processes to improve overall cyber defence center detection and incident response capability,


• Strong understanding skills & technical abilities regarding MITRE attack framework ATT&CK®,


• Integration of threat intelligence sources with SIEM and evaluation of alerts,


• Continuous attack simulation studies and defining new rules /correlations related with the output,


• Attending internal and external audits and preparing evidence when required,


• Effective reporting of log review and incident management activities on both executive and technical level


• Having at least one of these certifications will be a plus; Security+, ECIH, GCIH, GCIA, GCTI, GCFA, CCNA, CCNP, CISSP

Who You Are

• BSc. in Computer / Industrial / Electrical & Electronics Engineering is desired,


• Master’s degree (preferably in Computer Science & Cyber Security) or equivalent information security experience is desired,


• At least 6 years hands on experience in information security, network administration,


• Experience working in complex operational ICT environments,


• Solid knowledge of security principles and practices,


• Proven experience in the following topics is desired:


• Firewall and intrusion detection/prevention protocols,


• DLP, anti-virus, anti-malware EDR solutions,


• Sandboxing and Malware analysis


• DFIR concepts


• TCP/IP, computer networking, routing and switching,


• Windows, UNIX and Linux operating systems,


• Network protocols and packet analysis,


• Python, Go, Bash or any other programming/scripting language knowledge


• Cloud computing,


• SaaS models,


• Security Information and Event Management (SIEM)


• Excellent problem-solving and analytical skills


• Critical thinking with strong attention to details and follow up


• Technically competent to contribute towards the preparation and implementation of control processes, procedures and guidelines


• Advanced in English

What's In It For You

• Vflexy: Flexible Benefits Program


• Hybrid working kit


• Ergonomic kit allowance


• Digital meal voucher


• Flexible transportation allowance


• Employee assistance hotline & counselling


• Comprehensive and flexible private health insurance


• Discounted price deals for wide range of products & services

Plus, plenty more to enjoy!If you want to know more about us and what we do, then visit our website: www.vodafone.com.tr

https://www.vodafone.com.tr/insan-kaynaklari

Instagram: https://www.instagram.com/vodafonekariyer/

Youtube: https://www.youtube.com/user/VFTurkiye

Data Privacy

By applying for this job, you accept the Vodafone Privacy Policy. Please visit Privacy Policy web page at https://careers.vodafone.com/privacy-policy/turkey/ for further details.

Who We Are

We are a leading international Telco, serving millions of customers. At Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people’s lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live and we protect the planet, whilst helping our customers do the same.

Belonging at Vodafone isn't a concept; it's lived, breathed, and cultivated through everything we do. You'll be part of a global and diverse community, with many different minds, abilities, backgrounds and cultures. ;We're committed to increase diversity, ensure equal representation, and make Vodafone a place everyone feels safe, valued and included.

If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, please refer to https://careers.vodafone.com/application-adjustments/ for guidance.

Together we can.