Senior Security Engineer 'Application Security'

Yapı Kredi Teknoloji; İzmit; Hybrid; TRY 350,000 - 520,000; Full time

Benefits offered by this job

Hybrid work

Koç Group offices

Career development path

BizClub and KoçAilem privileges

Retirement insurance

Birthday off

Job summary

Yapı Kredi Technology seeks a seasoned security engineer to conduct application security assessments across web, mobile, and API platforms. You will perform threat modeling, review Secure SDLC guidance, and provide remediation feedback to development teams.

The role involves vulnerability analysis and tuning security tooling in CI/CD pipelines.

Qualifications

• Minimum 4–10 years of experience in Security & Software Engineering fields.
• Bachelor’s degree in Computer, Electronics, Communication Engineering, Mathematics or related fields.
• Experience in application penetration testing (web, mobile, API, thick client) and source code security analysis.

Responsibilities

• Perform application security assessments including web, mobile, and API penetration tests.
• Perform threat modeling and design reviews within SDLC and provide security feedback to development teams.
• Analyze, review, and remediate detected vulnerabilities.
• Tune and set policies within SAST/DAST/IAST/Software Composition Analysis tools.
• Conduct network penetration tests and contribute to Red Team/Purple Team activities as needed.
• Automate security testing within DevSecOps and maintain CI/CD security tooling.

Skills

Application Penetration testing

Source code security analysis

Cyber security awareness

Education

Bachelor’s degree in Computer/Electronics/Communication Engineering or Mathematics

Job description

Yapı Kredi Technology is a technology company that produces innovative, high quality, and high value-added products and solutions in the finance sector. With more than 2,000 employees, it aims to create products that will shape the sector for Yapı Kredi Bank and to be the undisputed leader in the field of technology by using modern architectural systems and cloud technologies. It also contributes to the development of new and exemplary products for the sector by using natural language processing, machine learning, artificial intelligence, and data mining technologies with its R&D team.

Who We Are:

At Yapı Kredi Technology, we research with passion, wonder as we learn, and implement innovations that shape the future together. We take responsibility from the first day with our expert colleagues and work with all our strength for pioneering applications. We make quick decisions and take action. We quickly adapt to innovations and changes.

What Do We Offer:

• Opportunity to work in hybrid model
• Opportunity to work in Koç Group Community Companies' offices
• Career development opportunities in a structured technology career path
• Opportunity to benefit from BizClub and KoçAilem privileges exclusive to Yapı Kredi Technology employees
• Company-contributed individual retirement insurance
• Birthday off day.

Qualifications:

• Minimum 4 years between 10 years experienced in Security & Software Engineering related positions
• Bachelor’s degree in Computer, Electronics, Communication Engineering, Mathematics or relevant fields
• Experience in Application Penetration testing (web, mobile, API, thick client etc.) and source code security analysis
• Openness to the continuous acquisition of new skills and competencies
• Stays current with latest cyber security threats and vulnerabilities

Pluses:

• Master’s degree in Cyber Security of relevant field is a plus
• Holding an Offensive Security or Application Security related Certificate preferred
• Familiarity with web application frameworks, API technologies, and micro services preferred
• Experience with programming languages such as C, C#, Java, and Python preferred

Job Description:

• Perform application security assessments such as web application, mobile application and API penetration tests.
• Perform threat modeling and design reviews as part of the Secure software development lifecycle and provide feedback to development teams on matters of Cyber Security
• Performing comprehensive and technical analysis of detected vulnerabilities
• Performing analysis, reviewing findings, tune, and set policies within application security (SAST, DAST, IAST, SCA etc.) solutions
• Perform network penetration tests and execute Red Team/Purple Team activities as needed
• Automate security testing at scale (DevSecOps)
• Participate in setting up, configuring and maintaining security tools on CI/CD infrastructure (DevSecOps)
• Taking active role in internal process, procedure and standard development studies.

Our recruitment process for all positions typically encompasses technical interviews, director assessments, competency evaluations, and personality tests. We will extend our offer to candidates who have successfully completed a positive evaluation process.

If you would like to get to know more about Yapı Kredi Technology, you can follow us!