Cyber Security Detection Engineering Manager

Yapı Kredi Teknoloji; İzmit; Hybrid; TRY 900,000 - 1,200,000; Full time

Benefits offered by this job

Hybrid model

Koç Group offices access

Career development

BizClub privileges

Retirement insurance

Birthday off

Job summary

Yapı Kredi Teknoloji is seeking a visionary Cybersecurity Detection Engineering Manager to lead our enterprise detection ecosystem, overseeing SIEM, SOAR, and UEBA platforms, ensuring high telemetry quality and availability.

You will bridge technical execution and strategy, mentor a high‑performing team, and drive automation and standardized playbooks across hybrid environments to counter modern threats. This is a hands-on leadership role within Koç Group.

Qualifications

• Minimum 9 years in Cybersecurity with leadership experience
• Experience with enterprise SIEM and SOAR implementations
• Strong communication and project management skills
• Ability to lead across hybrid environments and diverse teams
• Familiarity with MITRE ATT&CK framework and cyber kill chain
• Knowledge of behavioral analytics and UEBA in security telemetry
• Certifications (CISSP, CISM) are a plus

Responsibilities

• Lead design, deployment, and maintenance of enterprise SIEM infrastructure
• Integrate logs from diverse sources into a central pipeline
• Set KPIs for log ingestion health, data parsing accuracy, and uptime
• Identify telemetry gaps and outages and optimize performance
• Collaborate with SOC to develop correlation rules and models
• Drive automation using SOAR to speed incident response
• Standardize playbooks for containment and cross-platform integrations
• Mentor and scale a high-performing engineering team

Skills

Cybersecurity

Leadership

SIEM

SOAR

UEBA

MITRE ATT&CK

Machine learning security

Communication

Tools

SIEM platforms

SOAR platforms

UEBA tools

Central logging pipelines

Job description

Who We Are:

At Yapı Kredi Technology, we research with passion, wonder as we learn, and implement innovations that shape the future together. We take responsibility from the first day with our expert colleagues and work with all our strength for pioneering applications. We make quick decisions and take action. We quickly adapt to innovations and changes.

What Do We Offer:

• Opportunity to work in hybrid model
• Opportunity to work in Koç Group Community Companies' offices
• Career development opportunities in a structured technology career path
• Opportunity to benefit from BizClub and KoçAilem privileges exclusive to Yapı Kredi Technology employees
• Company-contributed individual retirement insurance
• Birthday off day.

Job Description:

We are seeking a visionary, highly technical and strategic Cybersecurity Detection Engineering Manager to lead our specialized team responsible for the design, implementation and continuous optimization of our enterprise-wide detection ecosystem. In this hands‑on leadership role, you will oversee the critical infrastructure that powers our defense capabilities - including enterprise SIEM, SOAR and UEBA platforms. You will ensure the healthy ingestion and high availability of telemetry from diverse log sources, lead complex detection engineering initiatives, and architect robust automation workflows. As a leader, this role will bridge the gap between technical execution and executive strategy, scaling our detection capabilities to counter sophisticated, modern cyber threats while fostering a culture of continuous technical excellence.

Responsibilities:

• Lead the architectural design, deployment, scaling and maintenance of the enterprise SIEM infrastructure while ensuring high availability and disaster recovery readiness.
• Evaluate and integrate Security platforms logs such as next-generation, AI-native defense tools, Security Service Edge platforms etc. into the central logging and detection pipeline.
• Establish strict KPIs and monitoring frameworks for log ingestion health, data parsing accuracy, and overall system uptime across cloud, on-premises, and hybrid environments.
• Proactively identify, troubleshoot, and resolve telemetry gaps, collection outages, and indexing inefficiencies to balance operational depth with compliance.
• Collaborate closely with SOC team to design, test, and deploy high-fidelity correlation rules, behavioral models, and custom parsers mapped to the MITRE ATT&CK framework.
• Drive the automation strategy using SOAR platforms to streamline incident response, orchestrate repetitive tasks, and accelerate overall detection and response times.
• Standardize playbooks for automated containment, enrichments, and cross-platform integrations to maximize operational efficiency.
• Manage, mentor, and scale a high-performing engineering team, providing technical guidance and driving career development pathways.

Qualifications:

• Minimum of 9 years of dedicated experience in Cybersecurity, with at least 2 years in a leadership, team-lead, or managerial capacity overseeing engineering teams.
• Team Leadership experience, taking initiative; providing and following through on solutions across various skillsets.
• Proven team player will be working primarily with other staff members, on both long-term projects and rapid response under tight deadlines.
• Effective and excellent oral and written communication, analytical, judgment and consultation skills.
• Ability to work independently and possess strong project management skills.
• Proven track record of managing enterprise-scale SIEM architectures and SOAR platforms.
• Deep understanding of the MITRE ATT&CK framework, Cyber Kill Chain, and modern enterprise threat landscapes.
• Solid understanding of behavioral analytics, machine learning applications in security telemetry, and UEBA platforms.
• Exceptional leadership, communication, and stakeholder management skills with the ability to articulate complex technical risks to executive leadership.
• CISSP, CISM or equivalent security management certifications and vendor‑specific certifications for enterprise SIEM or SOAR platforms are an asset.

Our recruitment process for all positions typically encompasses technical interviews, director assessments, competency evaluations, and personality tests. We will extend our offer to candidates who have successfully completed a positive evaluation process.

If you would like to get to know more about Yapı Kredi Technology, you can follow us!