Senior Cyber Security Specialist

Executas HR and Business Solutions; Fatih; On-site; TRY 300,000 - 600,000; Full time

Job summary

Executas HR and Business Solutions is seeking an Expert/Security Architect to lead SIEM/SOAR implementations and design robust security architectures. You will assess risks, coordinate with CERT teams, and drive changes aligned with corporate security policies.

Ideal candidates have 5+ years in cyber security, hands-on AWS and programming experience, and strong knowledge of PCI-DSS and network security controls.

Qualifications

• At least 5 years of cyber security experience in enterprise environments.
• Proven ability to design and implement security architectures and risk controls.
• Experience with SIEM/SOAR platforms and incident response.

Responsibilities

• Lead SIEM/SOAR projects and security architecture design.
• Perform risk assessments and report cybersecurity findings.
• Collaborate with CERT teams and ensure policy-driven changes.

Skills

SIEM/SOAR

Security Architecture

Threat Modeling

AWS Services

Python

PCI-DSS

Network Security

SSL/TLS

Terraform

Job description

• To take on roles in at least 5 SIEM/SOAR projects as an Expert/Security Architect,
• Performing Big Data analysis and identifying security vulnerabilities,
• Ability to design Security/Cyber Security Architecture,
• Identifying weak points in the institution's information systems and developing improvement recommendations,
• Conducting and reporting Information/Cyber Security Risk Management studies,
• Participating in Project Kick-off activities,
• Providing updates and changes requested in the Project Plan and Program according to policies,
• Ensuring the scope and design of SOC reports,
• Creating a plan for change control management,
• Creating a plan for tracking/managing issues and risks,
• Providing support for protecting information related to systems used within the institution under operational technologies,
• Having advanced software knowledge,
• Ability to perform Reverse Engineering and use Debugger Programs,
• Conducting and reporting subcontractor evaluation surveys,
• Performing weekly Cyber Security vulnerability analysis,
• Conducting processes in accordance with Corporate Security Policies and Procedures,
• Working in coordination with CERT teams and tracking/implementing SIP notifications,
• Developing content for updates to the Cyber Security Services Catalog,
• Developing content for updates to the National Cyber Security Plan,
• Providing expert advice on all aspects of information security or network security to relevant parties (including information risk assessment, identity and access management, information protection in the local environment, threat management, and information security incident management),
• Experience in cyber security practices, including threat modeling, secure coding practices, encryption techniques, and network security principles,
• Determining procedures according to data processing needs, including the performance of policies and supporting procedures/processes,
• In-depth knowledge of AWS services (e.g., EC2, S3, IAM, RDS, Lambda) and experience with infrastructure as code tools (e.g., Terraform, CloudFormation),
• Experience with monitoring using CrowdStrike, Qualys, Microsoft Sentinel, and CloudAware, as well as Python and SQL,
• Familiarity with PCI-DSS compliance requirements and experience in implementing security controls according to industry standards,
• Developing and managing institution or customer structures against security attack vectors,
• Designing SIEM/SOAR architectures suitable for institution or customer structures,
• Ability to perform detailed analysis of Security Architecture designs and identify errors,
• Knowledge of machine learning and artificial intelligence concepts applied to cybersecurity,
• At least 5 years of experience in the field of cyber security,
• Proficiency in TCP/IP, encryption, SSL(TLS),
• Experience with one or more of the following technologies: Firewall, LAN, WAN, MPLS, Wireless, IPS/IDS, WAF, DLP, DDOS, L2 switching,
• Knowledge of VPN systems (IPSec, SSL, etc.) and NAC products.