Cyber Security Detection Engineering Manager

Yapı Kredi Teknoloji; İzmit; Hybrid; TRY 800,000 - 1,200,000; Full time

Benefits offered by this job

Hybrid work model

BizClub privileges

KoçAilem privileges

Company retirement insurance

Job summary

Yapı Kredi Technology is seeking a visionary Cyber Security Detection Engineering Manager to lead our enterprise-wide detection ecosystem. You will oversee SIEM, SOAR, UEBA platforms, ensure telemetry ingestion from diverse sources, and drive complex detection engineering initiatives.

You will bridge technical execution with executive strategy, scale detection capabilities, and foster a culture of technical excellence while mentoring a high-performing engineering team in a hybrid work

Qualifications

• 9+ years in Cyber Security with at least 2 years in a leadership or managerial role overseeing engineering teams.
• Proven experience managing enterprise-scale SIEM architectures and SOAR platforms.
• Strong communication, analytical, judgement and consultancy skills.
• Ability to lead cross-functional teams and mentor engineers.

Responsibilities

• Lead design, deployment, scaling and maintenance of the enterprise SIEM infrastructure with high availability and DR readiness.
• Evaluate and integrate security platforms logs (AI-native tools, SSE) into central pipeline.
• Establish KPIs for log ingestion health, data parsing accuracy, and system uptime across cloud, on-prem and hybrid.
• Identify telemetry gaps, outages and indexing issues to balance depth and compliance.
• Collaborate with SOC to design and deploy high-fidelity correlation rules and MITRE ATT&CK mappings.
• Drive automation strategy using SOAR to streamline incident response and remediation.
• Standardize playbooks for automated containment and cross-platform integrations.
• Mentor and scale a high-performing engineering team.

Skills

Team Leadership

Project management

Communication skills

Analytical thinking

Independent work

Education

CISSP or CISM certification

Tools

SIEM

SOAR

UEBA

MITRE ATT&CK

Job description

Yapı Kredi Technology is a technology company that produces innovative, high quality, and high value-added products and solutions in the finance sector. With more than 2,000 employees, it aims to create products that will shape the sector for Yapı Kredi Bank and to be the undisputed leader in the field of technology by using modern architectural systems and cloud technologies. It also contributes to the development of new and exemplary products for the sector by using natural language processing, machine learning, artificial intelligence, and data mining technologies with its R&D team.

Who We Are:

At Yapı Kredi Technology, we research with passion, wonder as we learn, and implement innovations that shape the future together. We take responsibility from the first day with our expert colleagues and work with all our strength for pioneering applications. We make quick decisions and take action. We quickly adapt to innovations and changes.

What Do We Offer:

• Opportunity to work in hybrid model
• Opportunity to work in Koç Group Community Companies' offices
• Career development opportunities in a structured technology career path
• Opportunity to benefit from BizClub and KoçAilem privileges exclusive to Yapı Kredi Technology employees
• Company-contributed individual retirement insurance
• Birthday off day.

Job Description:

We are seeking a visionary, highly technical and strategic Cyber Security Detection Engineering Manager to lead our specialized team responsible for the design, implementation and continuous optimization of our enterprise-wide detection ecosystem. In this hands-on leadership role, you will oversee the critical infrastructure that powers our defense capabilities - including enterprise SIEM, SOAR and UEBA platforms. You will ensure the healthy ingestion and high availability of telemetry from diverse log sources, lead complex detection engineering initiatives, and architect robust automation workflows. As a leader, this role will bridge the gap between technical execution and executive strategy, scaling our detection capabilities to counter sophisticated, modern cyber threats while fostering a culture of continuous technical excellence.

Responsibilities:

• Lead the architectural design, deployment, scaling and maintenance of the enterprise SIEM infrastructure while ensuring high availability and disaster recovery readiness.
• Evaluate and integrate Security platforms logs such as next-generation, AI-native defense tools, Security Service Edge platforms etc. into the central logging and detection pipeline.
• Establish strict KPIs and monitoring frameworks for log ingestion health, data parsing accuracy, and overall system uptime across cloud, on-premises, and hybrid environments.
• Proactively identify, troubleshoot, and resolve telemetry gaps, collection outages, and indexing inefficiencies to balance operational depth with compliance.
• Collaborate closely with SOC team to design, test, and deploy high-fidelity correlation rules, behavioral models, and custom parsers mapped to the MITRE ATT&CK framework.
• Drive the automation strategy using SOAR platforms to streamline incident response, orchestrate repetitive tasks, and accelerate overall detection and response times.
• Standardize playbooks for automated containment, enrichments, and cross-platform integrations to maximize operational efficiency.
• Manage, mentor, and scale a high-performing engineering team, providing technical guidance and driving career development pathways.

Qualifications:

• Minimum of 9 years of dedicated experience in Cyber Security, with at least 2 years in a leadership, team-lead, or managerial capacity overseeing engineering teams.
• Team Leadership experience, taking initiative; providing and following through on solutions across various skillsets.
• Proven team player will be working primarily with other staff members, on both long-term projects and rapid response under tight deadlines.
• Effective and excellent oral and written communication, analytical, judgement and consultation skills.
• Ability to work independently and possess strong project management skills.
• Proven track record of managing enterprise-scale SIEM architectures and SOAR platforms.
• Deep understanding of the MITRE ATT&CK framework, Cyber Kill Chain, and modern enterprise threat landscapes.
• Solid understanding of behavioral analytics, machine learning applications in security telemetry, and UEBA platforms.
• Exceptional leadership, communication, and stakeholder management skills with the ability to articulate complex technical risks to executive leadership.
• CISSP, CISM or equivalent security management certifications and vendor-specific certifications for enterprise SIEM or SOAR platforms are an asset.

Our recruitment process for all positions typically encompasses technical interviews, director assessments, competency evaluations, and personality tests. We will extend our offer to candidates who have successfully completed a positive evaluation process.

If you would like to get to know more about Yapı Kredi Technology, you can follow us!