Senior Security Engineer 'Information Security Architecture'

Yapı Kredi Teknoloji; İzmit; Hybrid; TRY 300,000 - 540,000; Full time

Benefits offered by this job

Hybrid çalışma modeli

Koç Group ofisi erişimi

KoçAilem ayrıcalıkları

Doğum Günü tatili

Bireysel emeklilik sigortası

Job summary

Yapı Kredi Technology’de Güvenlik Mimarisi ve Risk Değerlendirme alanında deneyimli bir pozisyon arıyoruz. Ekibinizle birlikte SDLC ve IDLC süreçlerinde güvenlik gereksinimlerini belirleyecek, tehdit modellerini uygulayacak ve güvenlik güvence süreçlerini yöneteceksiniz.

Sorumluluklar arasında güvenlik risklerini proaktif olarak ele almak, proje dokümanlarına güvenlik kararlarını yansıtmak ve ekiplerle etkili iletişim kurmak yer alır. Banka güvenliği ve mevzuata hakimiyet beklenir.

Qualifications

• BDDK, PCI DSS, PCI PIN, Swift Security Framework, KVKK, OWASP, OWASP SAMM gibi güvenlik standartlarını bilen.
• ISO/CIS, NIST gibi güvenlik uygulamalarında bilgi sahibi ve sertifikalar tercih sebebidir.
• Bankacılık ve Bilgi Güvenliği alanlarında deneyim aranmaktadır.

Responsibilities

• SDLC ve IDLC projelerinde güvenlik uyumunu sağlamak.
• Projelerde güvenlik gereksinimlerini ve riskleri değerlendirmek.
• Sızma ve tehdit değerlendirme süreçlerini yürütmek.
• Güvenlik kararlarını proje dokümanlarına ve yönetim iletişimine aktarmak.
• Tedarik zinciri ve yazılım güvenlik güvence süreçlerini tesis etmek.

Skills

Threat modelling

DevSecOps

Project management

Agile methods

Information security

Regulatory knowledge

English fluency

Communication

Teamwork

Cryptography awareness

Education

Bachelor’s degree in Computer, Electronics, Communication Engineering or relevant fields

Tools

Threat modelling tools

Job description

About:

Yapı Kredi Technology is a technology company that produces innovative, high quality, and high value-added products and solutions in the finance sector. With more than 2,000 employees, it aims to create products that will shape the sector for Yapı Kredi Bank and to be the undisputed leader in the field of technology by using modern architectural systems and cloud technologies. It also contributes to the development of new and exemplary products for the sector by using natural language processing, machine learning, artificial intelligence, and data mining technologies with its R&D team.

Who We Are:

At Yapı Kredi Technology, we research with passion, wonder as we learn, and implement innovations that shape the future together. We take responsibility from the first day with our expert colleagues and work with all our strength for pioneering applications. We make quick decisions and take action. We quickly adapt to innovations and changes.

What Do We Offer:

• Opportunity to work in hybrid model
• Opportunity to work in Koç Group Community Companies' offices
• Chance to discover the natural wonders and amenities offered at Koç Toplululuğu Spor Kulübü (KTSK)
• Career development opportunities in a structured technology career path
• Opportunity to benefit from BizClub and KoçAilem privileges exclusive to Yapı Kredi Technology employees
• Company-contributed individual retirement insurance
• Birthday off day.

Qualifications:

• Bachelor’s degree in Computer, Electronics, Communication Engineering or relevant fields
• Experience in Banking and Information Security Domains
• Minimum 3 years of experience on related areas ( Project management, Agile approaches, DevSecOps), 9+ years of IT experience in total
• Solid knowledge of threat modelling process & tools
• Knowledge of crypto, blockchain, AI fields is preferred.
• Solid knowledge of the regulations (BDDK, PCI DSS, PCI PIN, Swift Security Framework, KVKK, OWASP, OWASP SAMM ) and best security practices (NIST, ISO,CIS)
• Certification(s) including but not limited to (CISA, CISM , CISSP) is preferred.
• Good command of English both written and spoken
• Openness to the continuous acquisition of new skills and competencies
• Team player who takes pride in, and facilitates the sharing of knowledge
• Ability to work creatively and analytically in a problem-solving environment
• Excellent communication (written and oral) and interpersonal skills
• Builds relationships and communicates effectively in order to positively influence peers and other stakeholders

Job Description:

• Ensure security compliance requirements, laws and regulations (BDDK, PCI DSS, PCI PIN, Swift, KVKK, CIS) in SDLC and IDLC Projects
• Evaluate security requirements and risks, to determine preventive and detective security measures to be taken within the scope of the project
• Perform threat assessment (TA) practice to identify project-level security risks
• Perform proactive security guidance into the software and infrastructure design process
• Facilitation of informed security leads decision making through comprehensive risk management in a timely manner before production
• Documentation of important security decisions made during development, ensuring management that security was fully considered during all phases
• Define major activities and milestones
• Initiate Security Activity Planning and key security milestones including time frames
• Ensuring all key leads have a common understanding, including security implications, considerations, and requirements
• Develop Security part for project documents
• Ensuring supply chain and software security assurance

Candidate Selection Process:

Our recruitment process for all positions typically encompasses technical interviews, director assessments, competency evaluations, and personality tests. We will extend our offer to candidates who have successfully completed a positive evaluation process.

6698 sayılı Kişisel Verilerin Korunması Kanunu kapsamında kişisel verilerinizin işlenmesinden doğan haklarınıza ve bu konudaki detaylı bilgiye https://kariyerim.yapikredi.com.tr/Account/StaticKvkk adresinde yer alan aydınlatma metnimizden ulaşabilirsiniz.