Global Security Incident Response Lead

WE Soda; Çankaya; On-site; TRY 600,000 - 900,000; Full time

Job summary

WE Soda in Türkiye seeks a hands-on Senior Security Specialist to drive incidents from detection to resolution. You will coordinate with MSSP/SOC, Group IT, Türkiye IT, and external providers to validate alerts and document outcomes.

The role requires strong expertise in LogRhythm SIEM, EDR tools, and Windows security fundamentals, with experience across international teams and email security tooling.

Qualifications

• 5+ years in Security Operations, SOC, Incident Response, or Cybersecurity Operations.
• 3+ years hands-on experience investigating cybersecurity incidents.
• Direct MSSP/SOC experience.
• Hands-on with LogRhythm SIEM.
• Experience with EDR tools (e.g., SentinelOne, Defender for Endpoint, CrowdStrike).
• Solid understanding of Microsoft 365 security, Entra ID, MFA and sign-in log analysis.
• Experience with phishing and email security events (Proofpoint, Defender for Office 365, Mimecast).
• Knowledge of Windows endpoints, AD, PowerShell basics, logs and network security fundamentals.
• Familiarity with ITSM tools (4me/Xurrent, ServiceNow, Jira).
• Experience working across international teams and time zones.

Responsibilities

• Act as the main liaison for MSSP/SOC escalations.
• Review, validate, and challenge security alerts and investigations.
• Coordinate incident responses including phishing, malware, ransomware, and data leakage.
• Lead containment actions (isolation, MFA review, access revocation).
• Use LogRhythm SIEM for alarm review, evidence validation, and tuning.
• Work with EDR, MS 365/Entra ID, email security tools.
• Maintain audit-ready incident records in 4me/Xurrent.
• Support SOC improvement and incident response processes.
• Lead or participate in multi-region incident calls.

Skills

Security operations

Incident response

Stakeholder communication

Cross-region coordination

Analytical thinking

Tools

LogRhythm SIEM

SentinelOne

Microsoft Defender for Endpoint

Proofpoint

Defender for Office 365

Mimecast

Job description

WE Soda in Türkiye seeks a hands-on Senior Security Specialist to drive incidents from detection to resolution. You will coordinate with MSSP/SOC, Group IT, Türkiye IT, and external providers to validate alerts and document outcomes.

The role requires strong expertise in LogRhythm SIEM, EDR tools, and Windows security fundamentals, with experience across international teams and email security tooling.