Cyber Security Architect

Aygaz AS; Fatih; On-site; TRY 400,000 - 700,000; Full time

Job summary

Aygaz AS is seeking a Cyber Security Architect to protect information assets and advance security architecture across design, compliance, and audit requirements.

You will lead efforts in DLP, PAM, IDM and SIEM processes, drive access governance, define log sources for SIEM, and oversee remediation actions with IT teams. Excellent English communications are required.

Qualifications

• Bachelor’s degree in computer engineering, information systems or related field preferred.
• Minimum 5+ years of experience in information security or cyber security.
• Strong Active Directory security expertise.
• Hands-on with core security tools: SIEM, firewall, remote access, IPS/IDS, DLP, WAF, PAM, container/API/security, cloud security, IDM, XDR and vulnerability management.

Responsibilities

• Manage and support DLP, PAM, IDM and SIEM processes.
• Define log sources and review SIEM correlations; track improvements.
• Oversee penetration testing and security hardening activities.
• Support audits including KVKK and ISO 27001 compliance.
• Guide IT teams on security requirements across infrastructure and development environments.
• Coordinate with internal and external audit activities and incident management.

Skills

Active Directory

SIEM

Firewall

Remote Access

IPS/IDS

DLP

PAM

Cloud Security

API Security

Container Security

Vulnerability Management

Network Fundamentals

TCP/IP

DNS

VPN

Penetration Testing

Windows Security

Linux Security

Web Technologies

Security Certifications

Education

Bachelor’s degree in Computer Engineering/Information Systems

Tools

Nessus

OpenVAS

Burp Suite

SIEM Platforms

Palo Alto/Checkpoint Fortinet

Job description

We are seeking a Cyber Security Architect who will protect our information assets, advance our security architecture, and take ownership of critical areas ranging from the design of cybersecurity processes to compliance and audit requirements.

Qualifications

• Bachelor’s degree (Computer Engineering, Information Systems, or related fields preferred)
• Minimum 5+ years of experience in Information Security and/or Cyber Security.
• Security expertise in Active Directory
• Hands‑on experience with core security tools such as SIEM, Firewall, Remote Access, IPS/IDS, DLP, Web Application Firewall, PAM, Container Security, API Security, Cloud Security, IDM, XDR and Vulnerability Management
• Strong understanding of network and system fundamentals including Proxy, Load Balancer, TCP/IP, DNS, Active Directory, and VPN
• Experience in performing health checks and optimization of security solutions
• Ability to guide IT teams on critical technical issues with strong problem‑solving and technical decision‑making skills
• Experience contributing to the security architecture and controls of enterprise‑level IT projects
• Knowledge of security standards and compliance frameworks such as SANS CIS, KVKK, and ISO 27001
• Strong written and spoken English for clear communication with all stakeholders
• Good understanding of penetration testing methods
• Practical experience in Windows, Linux, Network, and Application security hardening
• Knowledge of web applications and modern web technologies
• Preferably experience with penetration testing and security analysis tools (e.g., Nessus, OpenVAS, Burp Suite, etc.)
• Security certifications such as CISSP, CISA, CISM, CCSP, or ISO 27001 Lead Auditor are considered a valuable advantage.

Job Description

• Manage and support DLP, PAM, IDM and SIEM processes
• Perform access management, MFA/SSO governance, and periodic access review processes
• Define log sources to be forwarded to the SIEM platform and review correlation rules; create and track improvement actions
• Establish quality standards for penetration testing activities
• Monitor security requirements across systems, infrastructure, applications, and development environments
• Provide recommendations for the remediation of audit findings, take an active role in technical follow-up activities, and ensure quality control
• Work with IT and business teams to integrate security requirements into infrastructure and project designs
• Support internal and external audit activities, including KVKK, SPK and ISO 27001 compliance processes
• Handle incident management, track Darkweb and threat intelligence sources, and guide IT teams with clear technical recommendations
• Provide technical consultancy to IT teams on security hardening for servers, clients, network infrastructure, and software development environments
• Follow emerging cyber threats and security trends and take necessary actions to mitigate information security risks
• Perform periodic reviews using security tools and applications.
• Work closely with infrastructure, system administration, and software development teams to design and maintain a secure‑by‑design architecture.