Senior Information Security Specialist

Pazarama; Kartal; Hybrid; TRY 420,000 - 700,000; Full time

Job summary

Pazarama is looking for a Senior Information Security Specialist to lead day-to-day security operations across hybrid environments. You will drive threat detection, incident response, and endpoint protection while advancing perimeter security and Zero Trust initiatives.

Qualifications include 5+ years in information security, strong cloud security knowledge (Azure/GCP), SIEM/EDR experience, and CISSP/CCSP or equivalent credentials are desirable.

Qualifications

• 5+ years of professional information security experience in security and cloud-native environments.
• Degree in Computer Science, Computer Engineering, Cyber Security or related field is a plus, but equivalent practical experience is valued.
• Strong knowledge of Azure and Google Cloud Platform security services; Prisma Cloud preferred.
• Experience with enterprise SIEM/EDR/XDR platforms and threat hunting.
• Understanding of Docker, Kubernetes security; CI/CD security integrations (IaC, SCA, DAST/SAST).
• Familiarity with Zero Trust, NIST CSF, ISO 27001, SOC2, PCI DSS, KVKK/GDPR.

Responsibilities

• Lead day-to-day security operations across hybrid environments.
• Drive threat detection, incident response and endpoint protection.
• Oversee perimeter security and advance Zero Trust initiatives.
• Manage IAM strategies including passwordless and PAM.
• Oversee firewall policies and network segmentation.

Skills

Security

Cloud security

SIEM & EDR

IAM

Incident response

Threat hunting

Zero Trust

Docker & Kubernetes security

CI/CD security

MITRE ATT&CK

XDR/SOAR

Vulnerability management

Penetration testing

AI security

OWASP Top 10 for LLM

Education

Computer Science/Engineering degree

Tools

Prisma Cloud

Azure

GCP

SIEM tools

EDR/XDR platforms

Docker

Kubernetes

IaC scanning

SCA

DAST/SAST

Job description

Hi, I've got something to share with you!

My name is Pazarama.

Who am I?

I’m an e-commerce platform that makes life easier for my customers and business partners—a place where you can find everything you need. My name is a blend of the words "Bazaar" and "Panorama." I'm here to offer a panoramic view of the e-commerce world, creating a marketplace where everyone can find what they’re looking for. Plus, with the strength of being a subsidiary of İş Bank and my broad perspective, I aim to create a sustainable shopping ecosystem.

I’m everywhere, making it easy for you to reach me: Pazarama mobile, the Pazarama website, İşCep, Maximum Mobile and physical stores.

From hotel and flight bookings to car rentals, online shopping to transportation card top-ups, even fuel payments without leaving your car, and exciting sweepstakes—I provide an all-in-one platform to meet all your needs.

But that's not all... I aim to please those who choose me by offering payment options packed with discounts, instalment plans, and rewards. I don't just make shopping easier; I make it more rewarding with everything I’ve mentioned. I’m constantly evolving, enhancing myself and my technologies for my users and business partners.

So, what can I do for you?

This is a journey, and we’re in it together. We’ll enhance your skills with career-supporting training and create opportunities to achieve your dreams together. Every step of the way, we’ll make this journey more vibrant with your ideas, enthusiasm, and talents. In this adventure, where you won’t be afraid of making mistakes, we can turn your dreams into reality together.

If you want to join me on this journey, apply for the position below and become part of our team!

Pazarama is with you on your career journey

We are looking for a Senior Information Security Specialist to lead our day-to-day security operations. In this role, you will drive threat detection, incident response, and endpoint protection across our hybrid environment, while overseeing perimeter security and advancing Zero Trust initiatives.

Qualifications

• Experience: Minimum 5+ years of professional experience in information security, with a proven track record in security and cloud-native environments.
• Education: Degree in Computer Science, Computer Engineer, Cyber Security, or related engineering fields is a plus, but equivalent practical experience is highly valued.
• Cloud Expertise: Deep technical knowledge of Azure and Google Cloud Platform (GCP) security services. Hands-on experience or familiarity with Prisma Cloud (CNAPP) is strongly preferred.
• SIEM & EDR Operations: Hands-on experience with enterprise SIEM and EDR/XDR platforms for continuous log monitoring, threat hunting, and incident response.
• Cloud-Native & DevOps: Strong understanding of Docker, Kubernetes (K8s) security, and integrating security tools (IaC scanning, SCA, DAST/SAST) into CI/CD pipelines.
• Modern Frameworks: Expert understanding of Zero Trust Architecture (ZTA), SASE, and common frameworks such as NIST CSF, ISO 27001, SOC2, PCI DSS, and KVKK/GDPR compliance.
• Threat Management: Technical proficiency in MITRE ATT&CK framework and experience implementing/managing XDR/SOAR solutions.
• Offensive & Defensive Security: Experience in vulnerability management, penetration testing orchestration, and Security Hardening for hybrid-cloud infrastructures.
• AI Security: Familiarity with the OWASP Top 10 for LLM, MITRE ATLAS and best practices for securing AI-driven applications and data pipelines.
• Certifications: Professional certifications such as CISSP, CCSP, AZ-500, or Google Professional Cloud Security Engineer are highly desirable.

Responsibilities

• Cloud & Infrastructure Security: Lead POC studies for emerging technologies and evaluate the security impact of migrating workloads to Azure/GCP/Amazon Cloud environments.
• Identity & Access Management: Oversee modern IAM strategies, including Passwordless authentication, Privileged Access Management (PAM), and Conditional Access.
• Incident Response & Forensics: Act as a technical lead during high-severity security incidents; perform root cause analysis and implement long-term architectural remediations.
• Firewall & Network Security: Evaluate and maintain enterprise firewall policies, network micro-segmentation, and perimeter controls to ensure secure network architecture and threat prevention.
• Vulnerability Management: Orchestrate continuous vulnerability assessment programs and guide engineering teams through complex patch management and remediation workflows.
• MDM & Endpoint Security: Technical proficiency with Mobile Device Management (MDM/UEM) solutions to ensure endpoint security baselines, device compliance and access policies.
• AI & Data Security: Establish security guidelines for Large Language Models (LLMs) and AI tools, ensuring data privacy and integrity.
• Awareness & Culture: Design and deliver modern, role-based security awareness programs to foster a security-first mindset across the organization.
• Policy & Governance: Develop and automate the enforcement of information security policies and standards in high-velocity development environments.