Senior Infrastructure and Application Security Specialist

Gizli; Fatih; On-site; TRY 300,000 - 500,000; Full time

Job summary

Gizli is seeking an experienced IAM and cybersecurity professional to deploy and maintain security controls across the IT landscape. You will work with cross-functional teams to implement, monitor, and enhance access controls, authentication, and compliance measures.

As part of the role, you will collaborate with developers and SOC teams to test, remediate, and document security posture, ensuring alignment with CIS/STIG standards and industry best practices.

Qualifications

• Bachelor’s degree or higher in CS/IT/Engineering; master’s/MBA a plus.
• 3+ years of IAM-related experience.
• Deep knowledge of IAM frameworks, architectures.
• Hands-on with AD, LDAP, SSO, MFA, PAM.
• Familiar with RBAC, ABAC, PBAC; IAM audits & compliance.
• Certifications: CISSP, CISM, CIAM, MS SC-300, SailPoint, Okta.
• Detail-oriented with strong problem solving.
• Strong leadership and teamwork.
• Innovative and continuous learner.
• Excellent communication and cross-functional collaboration.
• Strong analytic thinking and process design.

Responsibilities

• Deploy, configure, update, and maintain security solutions.
• Ensure secure network segmentation and access control; monitor data traffic.
• Enforce cybersecurity controls across IT infrastructure.
• Identify and remediate configuration errors and weak encryption.
• Conduct security testing on web & enterprise apps; embed controls into CI/CD (DevSecOps).
• Collaborate with developers to remediate vulnerabilities.
• Plan and execute penetration tests, vulnerability scans, configuration audits.
• Analyze, prioritize, and follow up on remediation of discovered vulnerabilities.
• Ensure CIS/STIG compliance; document and manage changes.
• Support SOC by analyzing alerts and contributing to incident response.
• Maintain up-to-date security architecture diagrams, configurations, and checklists.
• Prepare security posture assessments and technical reports.
• Evaluate and test new security tools; propose applicable solutions.
• Develop automation and integration use cases to improve security visibility and response.

Skills

IAM expertise

Cybersecurity

Security testing

Remediation

DevSecOps

Communication

Leadership

Problem-solving

Documentation

Education

Bachelor's degree in CS/IT/Engineering/Management

Master’s or MBA is a plus

Tools

AD

LDAP

SSO

MFA

PAM

Job description

• Deploy, configure, update, and maintain security solutions (e.g., FW, IDS/IPS, WAF, NAC, VPN, PAM, EDR, DLP, Proxy, CASB, Email Security).
• Ensure secure network segmentation and access control practices; monitor end-to-end data traffic.
• Enforce cybersecurity controls across IT infrastructure in line with corporate policies.
• Identify and remediate configuration errors, open ports, and weak encryption protocols.
• Conduct security testing on web and enterprise applications; embed controls into CI/CD pipelines (DevSecOps).
• Collaborate with developers to resolve vulnerabilities in custom applications.
• Plan and execute penetration tests, vulnerability scans, and configuration audits.
• Analyze, prioritize, and follow up on remediation of discovered vulnerabilities.
• Ensure compliance with secure configuration benchmarks (e.g., CIS, STIG); document and manage changes.
• Support SOC teams by technically analyzing alerts and contributing to incident response.
• Maintain up-to-date security architecture diagrams, configurations, and checklists.
• Prepare security posture assessments and technical reports.
• Evaluate and test new security tools; propose applicable solutions.
• Develop automation and integration use cases to improve security visibility and response.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity, Engineering, or Management; Master’s or MBA is a plus.
• Minimum 3+ years of experience in IAM-related roles.
• Advanced knowledge of IAM solutions, frameworks, and architectures.
• Hands-on experience with AD, LDAP, SSO, MFA, and PAM systems.
• Familiarity with access control models (RBAC, ABAC, PBAC), IAM audit, and compliance requirements.
• Preferred certifications: CISSP, CISM, CIAM, Microsoft SC-300, SailPoint, Okta.
• Detail-oriented with strong problem-solving skills.
• Strong leadership and team coordination capabilities.
• Open to innovation and committed to continuous learning.
• Excellent communication and cross-functional collaboration skills.
• Strong analytic thinking, process design, and stakeholder management abilities.