Senior Cyber Security Specialist

GİZLİ; Fatih; On-site; TRY 350,000 - 650,000; Full time

Job summary

GİZLİ is seeking an experienced Senior Cyber Security Specialist to join its Information Security team. You will manage enterprise security technologies, improve configurations, lead vulnerability management, and strengthen controls to protect critical information assets.

You will work across data, web app, endpoint, database, identity security, and security operations, supporting compliance, cyber resilience, and audits while delivering technical reports and executive summaries.

Qualifications

• Bachelor's degree in a relevant field.
• Minimum 5 years in Information/Cyber Security.
• Hands-on experience with enterprise security technologies.
• Experience with DLP, WAF, EDR/XDR, DAM, SIEM, and vulnerability management.
• Strong Windows Server, Active Directory, and Group Policy knowledge.
• Familiar with Linux, networks, and PKI/certificate management.
• Experience with CIS Benchmarks and ISO/IEC 27001, NIST.
• Certifications such as CISSP/CISM or equivalent preferred.

Responsibilities

• Manage and maintain DLP solutions and data protection initiatives.
• Develop and monitor DLP policies and investigate data leakage incidents.
• Manage WAF solutions and improve protection against OWASP Top 10 threats.
• Perform WAF rule tuning and support security assessments.
• Administer EDR/XDR platforms and investigate incidents.
• Develop detection use cases and contribute to threat hunting.
• Monitor DAM solutions and critical database activities.
• Develop controls to detect unauthorized data access.
• Strengthen Active Directory security configurations and Group Policy standards.
• Support IAM processes and privileged account controls.
• Lead vulnerability management including risk assessment and remediation coordination.
• Prepare technical reports and executive summaries.

Skills

Analytical thinking

Problem-solving

Incident analysis

Stakeholder management

Teamwork

Communication

Education

Bachelor's degree in Computer Science, Computer Engineering, Cyber Security, Information Systems

Tools

DLP

WAF

EDR/XDR

DAM

SIEM

Vulnerability Management

Security Hardening

Windows Server

Active Directory

Group Policy

Linux

PKI

Certificate Management

Job description

We are seeking an experienced Senior Cyber Security Specialist to join our Information Security team. In this role, you will be responsible for managing enterprise security technologies, improving security configurations, leading vulnerability management processes, and continuously enhancing security controls designed to protect the organization’s critical information assets.

You will work across multiple security domains including data security, web application security, endpoint security, database security, identity security, and security operations. The position also plays an important role in supporting compliance requirements and strengthening the organization’s cyber resilience.

Job Description

• Manage and maintain Data Loss Prevention (DLP) solutions, data classification, and data protection initiatives.
• Develop, optimize, and monitor DLP policies and investigate data leakage incidents.
• Manage Web Application Firewall (WAF) solutions and improve protection against OWASP Top 10 threats.
• Perform WAF rule tuning, false positive/negative analysis, and support web application security assessments.
• Administer and maintain Endpoint Detection and Response (EDR/XDR) platforms.
• Investigate security incidents, develop detection use cases, and contribute to threat hunting activities.
• Manage Database Activity Monitoring (DAM) solutions and monitor critical database activities.
• Develop controls to detect unauthorized access and protect sensitive data assets.
• Assess and improve Active Directory security configurations and Group Policy security standards.
• Support Identity and Access Management (IAM) processes and privileged account security controls.
• Lead vulnerability management processes, including risk assessment, prioritization, tracking, and remediation coordination.
• Perform security assessments and report remediation progress to stakeholders.
• Develop and maintain secure configurations for servers, endpoints, and infrastructure systems.
• Implement and monitor Microsoft Security Baselines and CIS Benchmark compliance.
• Execute system hardening activities and continuously improve security configuration management processes.
• Analyze critical security events and support incident response activities.
• Conduct root cause analysis and coordinate corrective actions with relevant teams.
• Evaluate and improve email security controls, including SPF, DKIM, and DMARC technologies.
• Support anti-phishing and data leakage prevention initiatives.
• Provide technical support during internal and external audits.
• Contribute to compliance initiatives related to information security, personal data protection, and financial sector requirements.
• Prepare technical reports, risk assessments, and executive-level summaries.
• Research emerging cybersecurity technologies, threat trends, and industry best practices.
• Recommend and implement improvements to the organization’s security architecture, processes, and controls.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cyber Security, Information Systems, or a related field.
• Minimum 5 years of experience in Information Security or Cyber Security roles.
• Hands-on experience managing enterprise security technologies.
• Experience with DLP, WAF, EDR/XDR, DAM, SIEM, Vulnerability Management, and Security Hardening solutions.
• Strong knowledge of Windows Server environments, Active Directory, and Group Policy administration.
• Knowledge of Linux systems, network technologies, and security architectures.
• Understanding of DNS, DHCP, PKI, and certificate management.
• Experience with CIS Benchmarks, Microsoft Security Baselines, and OWASP Top 10.
• Familiarity with NIST Cybersecurity Framework and ISO/IEC 27001 standards.
• Knowledge of personal data protection requirements and cybersecurity regulations.
• Strong analytical thinking, problem-solving, and incident analysis capabilities.
• Experience preparing technical documentation, reports, and executive summaries.
• Knowledge of Python, PowerShell, or Go is considered an advantage.
• Experience with security automation, SOAR platforms, and API integrations is a plus.
• Experience with cloud security technologies (Azure, AWS, or GCP) is preferred.
• Experience in banking, financial services, fintech, or other regulated industries is considered an advantage.
• Relevant certifications such as CISSP, CISM, CompTIA Security+, Microsoft Security Certifications, or GIAC Certifications are preferred.
• Strong communication, stakeholder management, and teamwork skills.
• Passion for continuous learning and improving the organization’s security posture.