Cyber Security Architect

Aygaz; Fatih; Presencial; TRY 600.000 - 900.000; Tempo integral

Resumo da vaga

Aygaz AS is seeking a Cyber Security Architect to protect information assets and advance our security architecture. You will lead critical areas from cybersecurity process design to compliance and audit requirements, shaping enterprise security controls and incident response.

You will guide IT teams, collaborate with stakeholders, and ensure secure-by-design principles across infrastructure, applications, and development environments. Strong English and hands-on security expertise are essential.

Qualificações

• Bachelor's degree in a relevant field.
• Minimum 5+ years of information security experience.
• Security expertise in Active Directory.
• Hands-on experience with core security tools and architectures.
• Strong understanding of network and system fundamentals.

Responsabilidades

• Manage and support DLP, PAM, IDM and SIEM processes.
• Perform access management, MFA/SSO governance, and periodic access reviews.
• Define log sources for SIEM, review correlations, and track improvements.
• Establish quality standards for penetration testing activities.
• Monitor security requirements across systems and environments.
• Remediate audit findings and ensure quality control.
• Work with IT and business teams to embed security in infrastructure and projects.
• Support KVKK, SPK and ISO 27001 compliance processes.
• Handle incident management and threat intelligence.
• Provide security hardening guidance for servers, clients, network, and development environments.
• Follow emerging cyber threats and mitigation actions.
• Periodic reviews using security tools across teams.

Conhecimentos

Security architecture

Active Directory

SIEM

Firewall

Remote Access

IPS/IDS

DLP

Web Application Firewall

PAM

Container Security

API Security

Cloud Security

IDM

XDR

Vulnerability Management

Penetration testing

Windows security

Linux security

Web security

Security hardening

English communication

Security standards (SANS CIS, KVKK,ISO

Formação

Bachelor's degree in Computer Engineering, Information Systems or related field

Ferramentas

Nessus

OpenVAS

Burp Suite

Kali Linux

Palo Alto / Cisco ASA

Splunk/Similar SIEM

Windows / Linux hardening tools

Descrição da vaga

We are seeking a Cyber Security Architect who will protect our information assets, advance our security architecture, and take ownership of critical areas ranging from the design of cybersecurity processes to compliance and audit requirements.

Qualifications

• Bachelor's degree (Computer Engineering, Information Systems, or related fields preferred)
• Minimum 5+ years of experience in Information Security and/or Cyber Security.
• Security expertise in Active Directory
• Hands-on experience with core security tools such as SIEM, Firewall, Remote Access, IPS/IDS, DLP, Web Application Firewall, PAM, Container Security, API Security, Cloud Security, IDM, XDR and Vulnerability Management
• Strong understanding of network and system fundamentals including Proxy, Load Balancer, TCP/IP, DNS, Active Directory, and VPN
• Experience in performing health checks and optimization of security solutions
• Ability to guide IT teams on critical technical issues with strong problem-solving and technical decision-making skills
• Experience contributing to the security architecture and controls of enterprise-level IT projects
• Knowledge of security standards and compliance frameworks such as SANS CIS, KVKK, and ISO 27001
• Strong written and spoken English for clear communication with all stakeholders
• Good understanding of penetration testing methods
• Practical experience in Windows, Linux, Network, and Application security hardening
• Knowledge of web applications and modern web technologies
• Preferably experience with penetration testing and security analysis tools (e.g., Nessus, OpenVAS, Burp Suite, etc.)
• Security certifications such as CISSP, CISA, CISM, CCSP, or ISO 27001 Lead Auditor are considered a valuable advantage.

Job Description

• Manage and support DLP, PAM, IDM and SIEM processes
• Perform access management, MFA/SSO governance, and periodic access review processes
• Define log sources to be forwarded to the SIEM platform and review correlation rules; create and track improvement actions
• Establish quality standards for penetration testing activities
• Monitor security requirements across systems, infrastructure, applications, and development environments
• Provide recommendations for the remediation of audit findings, take an active role in technical follow-up activities, and ensure quality control
• Work with IT and business teams to integrate security requirements into infrastructure and project designs
• Support internal and external audit activities, including KVKK, SPK and ISO 27001 compliance processes
• Handle incident management, track Darkweb and threat intelligence sources, and guide IT teams with clear technical recommendations
• Provide technical consultancy to IT teams on security hardening for servers, clients, network infrastructure, and software development environments
• Follow emerging cyber threats and security trends and take necessary actions to mitigate information security risks
• Perform periodic reviews using security tools and applications.
• Work closely with infrastructure, system administration, and software development teams to design and maintain a secure-by-design architecture.