Senior Application Security Engineer - Hybrid, Growth Path

Yapı Kredi Teknoloji; İzmit; Hybrid; TRY 350,000 - 550,000; Full time

Benefits offered by this job

Hybrid model

Koç Group offices

Tech career path

BizClub privileges

Retirement insurance

Birthday off

Job summary

Yapı Kredi Technology in Turkey is seeking a security-focused engineer to perform application security assessments across web, mobile, and API layers within a modern DevSecOps environment.

You will lead threat modeling, design reviews, and vulnerability analysis, and help tune SAST/DAST/IAST/SCA tooling integrated with CI/CD pipelines, while staying current with cyber security threats and industry best practices.

Qualifications

• Perform application security assessments such as web, mobile, and API penetration tests.
• Perform threat modeling and design reviews as part of the Secure software development lifecycle and provide feedback to development teams on Cyber Security matters.
• Performing comprehensive and technical analysis of detected vulnerabilities
• Performing analysis, reviewing findings, tuning, and setting policies within application security (SAST, DAST, IAST, SCA) solutions
• Take part in network penetration tests and Red Team/Purple Team activities as needed
• Automate security testing at scale (DevSecOps)
• Participate in setting up, configuring and maintaining security tools on CI/CD infrastructure (DevSecOps)
• Taking active role in internal process, procedure and standard development studies.

Responsibilities

• Perform application security assessments such as web, mobile, and API penetration tests.
• Perform threat modeling and design reviews as part of the Secure software development lifecycle and provide feedback to development teams on matters of Cyber Security.
• Perform comprehensive and technical analysis of detected vulnerabilities.
• Perform analysis, reviewing findings, tuning, and setting policies within application security solutions (SAST/DAST/IAST/SCA).
• Conduct network penetration tests and Red/Purple Team activities as needed.
• Automate security testing at scale (DevSecOps) and maintain security tooling in CI/CD pipelines.
• Support internal process and standard development related to security.

Skills

Security engineering

Penetration testing

Threat modeling

Vulnerability analysis

DevSecOps

CI/CD security tooling

Education

Bachelor's degree in CS/EE/CE/Math

Tools

SAST tools

DAST tools

IAST tools

SCA tools

CI/CD security tooling

Job description

Yapı Kredi Technology in Turkey is seeking a security-focused engineer to perform application security assessments across web, mobile, and API layers within a modern DevSecOps environment.

You will lead threat modeling, design reviews, and vulnerability analysis, and help tune SAST/DAST/IAST/SCA tooling integrated with CI/CD pipelines, while staying current with cyber security threats and industry best practices.