Senior Security Engineer 'Application Security'

Yapı Kredi Teknoloji; İzmit; Hybrid; TRY 100,000 - 140,000; Full time

Benefits offered by this job

Hybrid çalışma modeli

Koç Grup Topluluğu ofislerinde çalışma

Koç Topluluğu Spor Kulübü (KTSK) imkan

Kariyer gelişim yolu

BizClub ve KoçAilem ayrıcalıkları

Şirket tarafından bireysel emeklilik

Doğum günü tatili

Job summary

Yapı Kredi Teknoloji'de güvenlik mühendisliği pozisyonu için deneyimli adaylar aranmaktadır. Web, mobil ve API güvenlik testleri ile güvenlik ihtiyaçlarını karşılayacak çözümler geliştirilecek ve güvenlik süreçleri iyileştirilecektir.

Güçlü bir CI/CD altyapısında güvenlik otomasyonu ve tasarım incelemeleriyle güvenlik mimarisini güçlendireceksiniz. Takım çalışmasına yatkın, güncel tehditleri takip eden uzmanlar arıyoruz.

Qualifications

• Güvenlik ve yazılım mühendisliği alanlarında 4–10 yıl deneyim.
• Bilgisayar, Elektronik, Haberleşme Mühendisliği, Matematik veya ilgili alanlarda lisans.
• Uygulama güvenliği testleri (web, mobil, API, thick client vb.) deneyimi.
• Sürekli beceri kazanımına açık olma.
• Güncel siber güvenlik tehditleri ve güvenlik açığı izleme.

Responsibilities

• Web, mobil, API penetration testleri gibi uygulama güvenliği değerlendirmeleri yapmak.
• Güvenlik mimarisi ve tasarım incelemelerini Secure SDLC kapsamında gerçekleştirmek.
• Tespit edilen güvenlik açıklarının teknik analizini yapmak.
• SAST/DAST/IAST/SCA gibi çözümlerde politika ve tetkik ayarlamaları yapmak.
• Ağ penetrasyon testleri yürütmek ve gerekirse Red Team/Purple Team aktivitelerine katılmak.
• Güvenlik testlerini CI/CD altyapısında otomatikleştirmek (DevSecOps).
• İç süreç ve standart geliştirme çalışmalarında aktif rol almak.

Skills

Uygulama güvenliği

Penetration testing

Threat modeling

Security assessments

Cyber security

Education

Bachelor's degree in Computer/Electronics/Communication Engineering/Mathematics

Job description

About:

Yapı Kredi Technology is a technology company that produces innovative, high quality, and high value-added products and solutions in the finance sector. With more than 2,000 employees, it aims to create products that will shape the sector for Yapı Kredi Bank and to be the undisputed leader in the field of technology by using modern architectural systems and cloud technologies. It also contributes to the development of new and exemplary products for the sector by using natural language processing, machine learning, artificial intelligence, and data mining technologies with its R&D team.

Who We Are:

At Yapı Kredi Technology, we research with passion, wonder as we learn, and implement innovations that shape the future together. We take responsibility from the first day with our expert colleagues and work with all our strength for pioneering applications. We make quick decisions and take action. We quickly adapt to innovations and changes.

What Do We Offer:

• Opportunity to work in hybrid model
• Opportunity to work in Koç Group Community Companies' offices
• Chance to discover the natural wonders and amenities offered at Koç Toplululuğu Spor Kulübü (KTSK)
• Career development opportunities in a structured technology career path
• Opportunity to benefit from BizClub and KoçAilem privileges exclusive to Yapı Kredi Technology employees
• Company-contributed individual retirement insurance
• Birthday off day.

Qualifications:

• Minimum 4 years between 10 years experienced in Security & Software Engineering related positions
• Bachelor’s degree in Computer, Electronics, Communication Engineering, Mathematics or relevant fields
• Experience in Application Penetration testing (web, mobile, API, thick client etc.) and source code security analysis
• Openness to the continuous acquisition of new skills and competencies
• Stays current with latest cyber security threats and vulnerabilities

Pluses:

• Master’s degree in Cyber Security of relevant field is a plus
• Holding an Offensive Security or Application Security related Certificate preferred
• Familiarity with web application frameworks, API technologies, and micro services preferred
• Experience with programming languages such as C, C#, Java, and Python preferred

Job Description:

• Perform application security assessments such as web application, mobile application and API penetration tests.
• Perform threat modeling and design reviews as part of the Secure software development lifecycle and provide feedback to development teams on matters of Cyber Security
• Performing comprehensive and technical analysis of detected vulnerabilities
• Performing analysis, reviewing findings, tune, and set policies within application security (SAST, DAST, IAST, SCA etc.) solutions
• Perform network penetration tests and execute Red Team/Purple Team activities as needed
• Automate security testing at scale (DevSecOps)
• Participate in setting up, configuring and maintaining security tools on CI/CD infrastructure (DevSecOps)
• Taking active role in internal process, procedure and standard development studies.

Candidate Selection Process:

Our recruitment process for all positions typically encompasses technical interviews, director assessments, competency evaluations, and personality tests. We will extend our offer to candidates who have successfully completed a positive evaluation process.

If you would like to get to know more about Yapı Kredi Technology, you can follow us!

https://www.ykteknoloji.com.tr

https://medium.com/yapi-kredi-teknoloji

6698 sayılı Kişisel Verilerin Korunması Kanunu kapsamında kişisel verilerinizin işlenmesinden doğan haklarınıza ve bu konudaki detaylı bilgiye https://kariyerim.yapikredi.com.tr/Account/StaticKvkk adresinde yer alan aydınlatma metnimizden ulaşabilirsiniz.