Cyber Security Specialist

Proven; Fatih; On-site; TRY 350,000 - 600,000; Full time

Benefits offered by this job

Growth path to Security Lead

Exposure to client environments

Job summary

PROVEN, based in Şişli, Turkey, is seeking a Security Operations professional to run day-to-day security for company and client environments. The role focuses on firewall and network security, identity and endpoint protection on MS 365 and Google Workspace, vulnerability management, and incident response.

You will grow into Security Lead within 1–2 years, with emphasis on coordination, process building, and vendor management.

Qualifications

• 5+ years in cybersecurity (SOC/security engineering)
• Experience with Fortinet and Sophos firewalls
• Strong Microsoft 365 security knowledge
• Google Workspace security controls
• Endpoint protection, EDR/XDR, and SIEM
• Incident response and vulnerability management experience
• Networking fundamentals including VPN and VLANs
• Familiarity with ISO 27001, CIS Controls, KVKK
• Client-facing experience and calm incident handling
• Willingness to coordinate and plan over time

Responsibilities

• Own daily security operations across client environments and incidents
• Design and review firewall policies for Fortinet and Sophos
• Harden identity and endpoint security on MS 365 and Google Workspace
• Run vulnerability management: scanning, prioritization, patch follow-up
• Apply and maintain security baselines: MFA, email security, backups
• Lead incident response: containment, root cause analysis, lessons learned
• Carry out security assessments and produce improvement plans
• Write security documentation, runbooks, and policies
• Mentor junior team members and raise security awareness
• Coordinate with vendors on incidents, renewals, and deliveries

Skills

Cybersecurity

Security operations

Firewall config

Fortinet

Sophos

M365 security

Google Workspace security

EDR/XDR

SIEM

Incident response

Vulnerability management

Documentation

Team coordination

Vendor management

Education

Bachelor’s degree or equivalent

Tools

Fortinet

Sophos

Entra ID

Defender

Intune

VPN

SIEM

Job description

At PROVEN, we deliver IT solutions that help businesses run reliably and grow with confidence. Our work spans software development, cloud technologies, cybersecurity, IT consulting, and digital transformation. We combine solid technical practice with a customer-focused approach.

Role Description

This is a full-time, on-site role based in our Şişli office. You will run the day-to-day security operations of our own and our clients’ environments: firewall and network security, identity and endpoint protection on Microsoft 365 and Google Workspace, vulnerability management, and incident response. You will also act as the technical escalation point for security-related issues.

You will not be alone: architecture decisions and security standards are set together with our senior technical leadership. What we expect from you is to own the security posture of the environments we manage, improve how they are monitored and protected, and gradually take on more responsibility. We are looking for someone who can grow into the Security Lead role within the next one to two years, so an interest in team coordination, process building, and vendor management matters as much as technical depth.

Key Responsibilities

• Own the daily security operations across our own and client environments: monitoring alerts, investigating suspicious activity, and following incidents through to closure.
• Manage firewall and network security on Fortinet and Sophos devices: policy design and review, VPN, network segmentation, IPS and web filtering.
• Harden and maintain identity and endpoint security on Microsoft 365 (Entra ID, Conditional Access, Defender, Intune) and Google Workspace.
• Run vulnerability management: regular scanning, prioritization, patch follow-up, and verification of fixes.
• Apply and maintain security baselines: MFA, device compliance, email security (SPF, DKIM, DMARC), backup and recovery checks.
• Lead incident response: containment, root cause analysis, reporting, and lessons learned.
• Carry out security assessments for new and existing clients, and turn the findings into a clear improvement plan.
• Write and maintain security documentation, runbooks, and policies, and remove repetitive manual work.
• Support and mentor junior team members on security topics, and raise security awareness among users.
• Coordinate with vendors and service providers on incidents, renewals, and deliveries.

Qualifications and Requirements

• At least 5 years of hands‑on experience in cybersecurity (security operations, network security, or security engineering).
• Strong experience configuring and troubleshooting next-generation firewalls (Fortinet, Sophos), including VPN, IPS, and segmentation.
• Solid working knowledge of Microsoft 365 security: Entra ID, Conditional Access, Defender, and Intune.
• Practical experience with Google Workspace security controls and organizational policies.
• Experience with endpoint protection (EDR/XDR), log analysis, and SIEM tools.
• Hands‑on experience in incident response and vulnerability management.
• Good networking fundamentals: routing and switching, VLANs, VPN, Wi‑Fi security.
• Familiarity with security frameworks and regulations such as ISO 27001, CIS Controls, and KVKK.
• Strong, methodical analysis skills and the discipline to document what you do.
• Experience working directly with clients, including handling security incidents calmly.
• Willingness to take on coordination and planning responsibility over time.
• A Bachelor’s degree in a related field is preferred; equivalent hands‑on experience is equally valued.
• Certifications such as Security+, CySA+, SC-200, SC-300, Fortinet NSE, Sophos Certified Engineer, CEH, or CISSP are a strong advantage.

What We Offer

• A clear growth path toward Security Lead, with mentoring from senior technical leadership.
• Exposure to a wide range of client environments and security technologies.