Senior Cyber Security Engineer

team.blue; Turkey; On-site; TRY 420,000 - 660,000; Full time

Job summary

team.blue in Türkiye seeks a Senior Cyber Security Engineer to strengthen our security infrastructure. You will lead network security, security operations, incident response, vulnerability management, and architectural improvements in collaboration with Cyber Security, Infrastructure, IT and Technology teams.

The role emphasizes hardening Linux/Windows, IAM/PAM governance, and implementing security controls aligned with PCI DSS and SOC 2, while driving automation and clear security documentation.

Qualifications

• Minimum 5 years of experience in Cyber Security or a similar role.
• Strong knowledge of Network Security and Cyber Security.
• Experience with IAM and PAM concepts, including privileged account governance and least-privilege access.
• Deep expertise in WAF systems, proxy management, and Layer 7 DDoS protection.

Responsibilities

• Design, implement, and continuously improve the cybersecurity architecture.
• Manage and improve network security and protection infrastructures.
• Perform L2/L3 incident response for critical security incidents.
• Analyze cyber attacks, extract IOCs and TTPs, and carry out containment/remediation actions.
• Continuously improve security controls and evolve architecture against threats.
• Contribute to hardening of Linux and Windows systems.
• Support vulnerability management and security improvement activities.
• Assist ISO 27001 compliance and information security processes.
• Contribute to security automation initiatives and documentation.

Skills

Cyber Security

Network Security

Security Operations

Incident Response

Vulnerability Management

Security Architecture

L7 DDoS Protection

SIEM

EDR/XDR

Firewall Technologies

PCI DSS / SOC 2

Security Automation

PowerShell / Python

Education

Bachelor’s degree in Engineering / CS / IT or related field

Tools

SentinelOne

CrowdStrike

Microsoft Defender

WAF systems

PAM / IAM concepts

Job description

About Team.blue

team.blue is one of Europe's leading digital service providers, empowering entrepreneurs, businesses, and developers with the tools they need to succeed online. With more than 60 SaaS and hosting brands, 4,000+ employees, operations across 23 European countries, and 3.5 million customers, team.blue combines local expertise with the strength of a global organization. As part of the team.blue ecosystem, we place European values—including privacy, transparency, innovation, and local customer support—at the heart of everything we do, delivering trusted digital solutions tailored to local market needs.

About Natro & Turhost

Natro and Turhost are proud members of the team.blue family and among Türkiye's leading providers of domain registration, hosting, cloud infrastructure, and digital services. Founded in 1999, Natro has been helping businesses establish and grow their online presence for over 25 years. Today, the company serves more than 200,000 customers, manages over 500,000 domain names, and hosts hundreds of thousands of websites through a comprehensive portfolio including domain registration, web hosting, cloud and dedicated servers, SSL certificates, trademark services, and security solutions. Following the acquisition of Turhost in 2022, the two brands continue to strengthen their market position by delivering reliable, high-performance hosting and cloud solutions to SMEs, entrepreneurs, developers, and enterprise customers across Türkiye. Together, Natro and Turhost combine strong local expertise with the global capabilities, innovation, and best practices of the team.blue ecosystem.

Role Summary

We are looking for a Senior Cyber Security Engineer to join our Cyber Security team and play a key role in strengthening and continuously improving our security infrastructure. The role will focus on network security, security operations, incident response, vulnerability management, and the continuous improvement of our security controls and architecture. The successful candidate will work closely with the Cyber Security, Infrastructure, IT and Technology teams to protect our systems and services against evolving cyber threats.

Key Responsibilities

• Contribute to the design, implementation, and continuous improvement of the cybersecurity architecture.
• Manage and improve the integration of network security and protection infrastructures.
• Perform L2/L3-level incident response for critical security incidents.
• Analyse cyber attacks, identify and extract IOCs and TTPs, and carry out the necessary containment and remediation actions.
• Continuously improve security controls and evolve the security architecture in response to emerging threats and vulnerabilities.
• Contribute to the hardening of Linux and Windows systems.
• Support vulnerability management, remediation, and security improvement activities.
• Contribute to information security processes and compliance activities.
• Support security automation initiatives and identify opportunities to improve security operations through automation.
• Prepare and maintain technical documentation, incident reports, and security-related assessments.Prepare technical documentation, incident reports and security-related assessments.
• Contribute to information security processes and ISO 27001 compliance activities.

Skills & Qualifications

• Minimum 5 years of experience in Cyber Security or a similar role.
• Bachelor’s degree, preferably in Engineering, Computer Science, Information Technology or a related field.
• Strong knowledge and hands-on experience in Network Security and Cyber Security.
• Experience with IAM and PAM concepts, including privileged account governance, credential vaulting, session monitoring, and least-privilege access controls.
• Deep expertise in WAF systems, proxy management, and Layer 7 (L7) DDoS protection.
• Experience managing DDoS protection appliances.
• Experience with SIEM solutions, including log analysis, event correlation, alert investigation, and incident tracking.
• Experience with EDR/XDR solutions, such as SentinelOne, CrowdStrike, or Microsoft Defender.
• Experience in triage, investigation, and incident response for cybersecurity incidents.
• Good knowledge of IOCs, TTPs, and the MITRE ATT&CK framework.
• Strong experience with firewall technologies, including firewall policy management, routing, and security policies.
• Experience designing, deploying, and maintaining firewalls, VPNs, and intrusion detection/prevention systems (IDS/IPS).
• Ability to perform basic to intermediate-level security analysis and auditing on Windows and Linux systems.
• Experience with vulnerability assessment, system hardening, and remediation, including the ability to produce technical reports.
• Proficiency with vulnerability management tools and processes.
• Ability to contribute to Red Team activities and security assessments.
• Experience supporting and implementing security controls aligned with PCI DSS, SOC 2, and other relevant compliance requirements.
• Ability to document cybersecurity incidents and produce clear and detailed technical reports.
• Knowledge of ISO 27001 and information security practices.
• Experience with security automation processes.
• Experience with scripting and automation using PowerShell, Python, APIs, or similar tools.
• Strong analytical, problem-solving, and troubleshooting skills.
• Good command of English.

“Come as you are”

Everyone is welcome here. Diversity & Inclusion are at our core. Far above any technical competence, we value respect, openness, and trusted collaboration. We do not tolerate intolerance.

ESG

At team.blue, our commitment to caring for the environment and each other is at the heart of everything we do. Our latest impact report showcases our ongoing ESG efforts and ambitious sustainability goals. Interested in learning more about our dedication to making a positive impact?