Information Security Specialist

Koç University; Fatih; On-site; TRY 200,000 - 280,000; Full time

Job summary

Koç University Information Technology Directorate seeks an Information Security Specialist to identify security requirements for IT designs, perform internal and coordinated external assessments, and manage remediation efforts.

Responsibilities include vulnerability scanning, SIEM log analysis, incident response participation, and security hardening of infrastructure. Strong English, documentation, and teamwork are essential for success in this role.

Qualifications

• Bachelor's degree in a relevant engineering or information field.
• Minimum 2 years in information/cyber security.
• Familiar with CIS Controls or willingness to learn.
• Hands-on in penetration testing and vulnerability management.
• Experience with SIEM/log management and security event analysis.
• English proficiency with strong reporting skills.

Responsibilities

• Identify security requirements for IT infrastructure designs and manage risks.
• Plan internal penetration tests and coordinate external assessments, report findings, track remediation.
• Perform periodic vulnerability scans (Nessus/OpenVAS) and manage remediation with teams.
• Monitor and analyze security logs through SIEM, classify events, and participate in IR.
• Hardening of servers, endpoints, and network components.
• Contribute to IT risk analysis and risk treatment plans.
• Develop and maintain information security policies, procedures, and standards.

Skills

CIS Controls knowledge

Penetration testing concepts

SIEM / log management

Windows & Linux basics

Scripting: PowerShell, Python, Bash

Technical documentation & reporting

Analytical thinking & teamwork

English fluency

Incident response experience

Security certifications preferred

Education

Bachelor's degree in Computer/Software/Information Systems or related

Tools

Nessus

Burp Suite

OpenVAS

Job description

Koç University Information Technology Directorate will be hiring an Information Security Specialist with the below-mentioned qualifications.

• Bachelor's degree, preferably in Computer Engineering, Software Engineering, Information Systems, Electrical-Electronics Engineering or related departments
• Minimum 2 years of experience in the information security / cyber security field
• Familiar with the CIS Controls framework or willing to learn it
• Knowledge and hands-on experience in penetration testing methodologies (OWASP, PTES, etc.) and vulnerability management processes
• Experienced in SIEM / log management and security event analysis
• Knowledge of Windows, Linux operating systems and basic network technologies
• Knowledge of scripting languages such as PowerShell, Python and Bash
• Experienced in creating technical documentation and reporting
• Analytical, with strong teamwork and communication skills
• Excellent command of English
• Preferably holding Microsoft security certifications (SC-200, SC-300, AZ-500, SC-100) and/or a Linux administration certification
• Preferably having hands‑on experience with security tools such as Nessus and Burp Suite
• Preferably having experience in incident response processes

Job Description

• Identifying security requirements for IT infrastructure designs and projects, and managing associated risks
• Planning and conducting internal penetration tests; coordinating assessments performed by external vendors, analyzing and reporting findings, and tracking remediation activities
• Performing periodic vulnerability scans using scanning tools (Nessus, OpenVAS, etc.), prioritizing findings and managing remediation processes with the relevant teams
• Monitoring and analyzing security logs through SIEM platforms, detecting and classifying security events, and participating in incident response activities
• Performing security hardening of servers, endpoints and network components
• Contributing to IT risk analysis and tracking risk treatment plans
• Developing and maintaining information security policies, procedures, and standards