Senior Cyber Security Specialist

Gizli Şirket; Fatih; On-site; TRY 600,000 - 800,000; Full time

Job summary

Gizli Şirket is seeking an experienced Senior Cyber Security Specialist to join the Information Security team. You will manage enterprise security technologies, drive vulnerability management, and enhance security controls protecting critical assets across data, web, endpoint, database, identity, and security operations domains.

You will support compliance, strengthen cyber resilience, and contribute to risk assessments, executive summaries, and security architecture improvements.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cyber Security, Information Systems, or a related field.
• 5+ years of experience in Information Security or Cyber Security roles.
• Hands-on experience managing enterprise security technologies.
• Experience with DLP, WAF, EDR/XDR, DAM, SIEM, Vulnerability Management, and Security Hardening solutions.
• Knowledge of Windows Server environments, Active Directory, and Group Policy administration.
• Knowledge of Linux systems, network technologies, and security architectures.
• Understanding of DNS, DHCP, PKI, and certificate management.
• Experience with CIS Benchmarks, Microsoft Security Baselines, and OWASP Top 10.
• Familiarity with NIST Cybersecurity Framework and ISO/IEC 27001 standards.
• Knowledge of personal data protection requirements and cybersecurity regulations.
• Strong analytical thinking, problem-solving, and incident analysis capabilities.
• Experience preparing technical documentation, reports, and executive summaries.
• Knowledge of Python, PowerShell, or Go is considered an advantage.
• Experience with security automation, SOAR platforms, and API integrations is a plus.
• Experience with cloud security technologies (Azure, AWS, or GCP) is preferred.
• Experience in banking, financial services, fintech, or other regulated industries is considered an advantage.
• Relevant certifications such as CISSP, CISM, CompTIA Security+, Microsoft Security Certifications, or GIAC Certifications are preferred.

Responsibilities

• Manage and maintain Data Loss Prevention (DLP) solutions, data classification, and data protection initiatives.
• Develop, optimize, and monitor DLP policies and investigate data leakage incidents.
• Manage Web Application Firewall (WAF) solutions and improve protection against OWASP Top 10 threats.
• Perform WAF rule tuning, false positive/negative analysis, and support web application security assessments.
• Administer and maintain Endpoint Detection and Response (EDR/XDR) platforms.
• Investigate security incidents, develop detection use cases, and contribute to threat hunting activities.
• Manage Database Activity Monitoring (DAM) solutions and monitor critical database activities.
• Develop controls to detect unauthorized access and protect sensitive data assets.
• Assess and improve Active Directory security configurations and Group Policy security standards.
• Support Identity and Access Management (IAM) processes and privileged account security controls.
• Lead vulnerability management processes, including risk assessment, prioritization, tracking, and remediation coordination.
• Perform security assessments and report remediation progress to stakeholders.
• Develop and maintain secure configurations for servers, endpoints, and infrastructure systems.
• Implement and monitor Microsoft Security Baselines and CIS Benchmark compliance.
• Execute system hardening activities and continuously improve security configuration management processes.
• Analyze critical security events and support incident response activities.
• Conduct root cause analysis and coordinate corrective actions with relevant teams.
• Evaluate and improve email security controls, including SPF, DKIM, and DMARC technologies.
• Support anti-phishing and data leakage prevention initiatives.
• Provide technical support during internal and external audits.
• Contribute to compliance initiatives related to information security, personal data protection, and financial sector requirements.
• Prepare technical reports, risk assessments, and executive-level summaries.
• Research emerging cybersecurity technologies, threat trends, and industry best practices.
• Recommend and implement improvements to the organization’s security architecture, processes, and controls.

Skills

DLP

WAF

EDR/XDR

DAM

SIEM

Vulnerability Mgmt

Security Hardening

Windows Server

AD/GP administration

Linux systems

Education

Bachelor's degree in Computer Science/Cyber Security/Information Systems

Tools

SOAR

Microsoft Baselines

Job description

We are seeking an experienced Senior Cyber Security Specialist to join our Information Security team. In this role, you will be responsible for managing enterprise security technologies, improving security configurations, leading vulnerability management processes, and continuously enhancing security controls designed to protect the organization’s critical information assets.

You will work across multiple security domains including data security, web application security, endpoint security, database security, identity security, and security operations. The position also plays an important role in supporting compliance requirements and strengthening the organization’s cyber resilience.

Job Description

• Manage and maintain Data Loss Prevention (DLP) solutions, data classification, and data protection initiatives.
• Develop, optimize, and monitor DLP policies and investigate data leakage incidents.
• Manage Web Application Firewall (WAF) solutions and improve protection against OWASP Top 10 threats.
• Perform WAF rule tuning, false positive/negative analysis, and support web application security assessments.
• Administer and maintain Endpoint Detection and Response (EDR/XDR) platforms.
• Investigate security incidents, develop detection use cases, and contribute to threat hunting activities.
• Manage Database Activity Monitoring (DAM) solutions and monitor critical database activities.
• Develop controls to detect unauthorized access and protect sensitive data assets.
• Assess and improve Active Directory security configurations and Group Policy security standards.
• Support Identity and Access Management (IAM) processes and privileged account security controls.
• Lead vulnerability management processes, including risk assessment, prioritization, tracking, and remediation coordination.
• Perform security assessments and report remediation progress to stakeholders.
• Develop and maintain secure configurations for servers, endpoints, and infrastructure systems.
• Implement and monitor Microsoft Security Baselines and CIS Benchmark compliance.
• Execute system hardening activities and continuously improve security configuration management processes.
• Analyze critical security events and support incident response activities.
• Conduct root cause analysis and coordinate corrective actions with relevant teams.
• Evaluate and improve email security controls, including SPF, DKIM, and DMARC technologies.
• Support anti-phishing and data leakage prevention initiatives.
• Provide technical support during internal and external audits.
• Contribute to compliance initiatives related to information security, personal data protection, and financial sector requirements.
• Prepare technical reports, risk assessments, and executive-level summaries.
• Research emerging cybersecurity technologies, threat trends, and industry best practices.
• Recommend and implement improvements to the organization’s security architecture, processes, and controls.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cyber Security, Information Systems, or a related field.
• Minimum 5 years of experience in Information Security or Cyber Security roles.
• Hands‑on experience managing enterprise security technologies.
• Experience with DLP, WAF, EDR/XDR, DAM, SIEM, Vulnerability Management, and Security Hardening solutions.
• Strong knowledge of Windows Server environments, Active Directory, and Group Policy administration.
• Knowledge of Linux systems, network technologies, and security architectures.
• Understanding of DNS, DHCP, PKI, and certificate management.
• Experience with CIS Benchmarks, Microsoft Security Baselines, and OWASP Top 10.
• Familiarity with NIST Cybersecurity Framework and ISO/IEC 27001 standards.
• Knowledge of personal data protection requirements and cybersecurity regulations.
• Strong analytical thinking, problem-solving, and incident analysis capabilities.
• Experience preparing technical documentation, reports, and executive summaries.
• Knowledge of Python, PowerShell, or Go is considered an advantage.
• Experience with security automation, SOAR platforms, and API integrations is a plus.
• Experience with cloud security technologies (Azure, AWS, or GCP) is preferred.
• Experience in banking, financial services, fintech, or other regulated industries is considered an advantage.
• Relevant certifications such as CISSP, CISM, CompTIA Security+, Microsoft Security Certifications, or GIAC Certifications are preferred.
• Strong communication, stakeholder management, and teamwork skills.
• Passion for continuous learning and improving the organization’s security posture.