Senior Cyber Security Engineer

This is a fully remote position, open to applicants in Turkey.

📋 Description

• Contribute to the design, execution, and ongoing enhancement of the cybersecurity architecture.

• Oversee and enhance the integration of network security and protective infrastructures.

• Execute L2/L3-level incident response for critical security events.

• Analyze cyber attacks, identify and extract IOCs and TTPs, and implement containment and remediation measures.

• Continually enhance security controls and adapt the security architecture to address emerging threats and vulnerabilities.

• Assist in hardening both Linux and Windows systems.

• Support vulnerability management, remediation efforts, and security enhancement initiatives.

• Participate in information security processes and ISO 27001 compliance efforts.

• Facilitate security automation initiatives and pinpoint opportunities to enhance security operations through automation.

• Develop and maintain technical documentation, incident reports, and security-related assessments.

• Collaborate closely with Cyber Security, Infrastructure, IT, and Technology teams to safeguard systems and services from evolving cyber threats.

⛳️ Requirements

• At least 5 years of experience in Cyber Security or a related field.

• Bachelor’s degree, preferably in Engineering, Computer Science, Information Technology, or a related discipline.

• Strong knowledge and practical experience in Network Security and Cyber Security.

• Familiarity with IAM and PAM concepts, including privileged account governance, credential vaulting, session monitoring, and least-privilege access controls.

• In-depth expertise in WAF systems, proxy management, and Layer 7 (L7) DDoS protection.

• Experience in managing DDoS protection appliances.

• Proficiency with SIEM solutions, encompassing log analysis, event correlation, alert investigation, and incident tracking.

• Familiarity with EDR/XDR solutions, such as SentinelOne, CrowdStrike, or Microsoft Defender.

• Experience in triage, investigation, and incident response for cybersecurity incidents.

• Solid understanding of IOCs, TTPs, and the MITRE ATT&CK framework.

• Extensive experience with firewall technologies, including firewall policy management, routing, and security policies.

• Proven experience in designing, deploying, and maintaining firewalls, VPNs, and intrusion detection/prevention systems (IDS/IPS).

• Capability to perform basic to intermediate-level security analysis and auditing on Windows and Linux systems.

• Experience with vulnerability assessment, system hardening, and remediation, including the ability to generate technical reports.

• Proficient with vulnerability management tools and processes.

• Ability to contribute to Red Team activities and security assessments.

• Experience in supporting and implementing security controls in alignment with PCI DSS, SOC 2, and other relevant compliance standards.

• Skill in documenting cybersecurity incidents and producing clear, detailed technical reports.

• Knowledge of ISO 27001 and information security practices.

• Familiarity with security automation processes.

• Experience with scripting and automation using PowerShell, Python, APIs, or similar tools.

• Exceptional analytical, problem-solving, and troubleshooting capabilities.

• Proficient command of English.

🏝️ Benefits

• Comprehensive onboarding processes.

• Opportunities for internal and external training.

• Access to technical and personal development resources through team.blue Academy.

• Training partnerships with expert instructors and leading institutions.

• Commitment to diversity and inclusion.

• Engagement in ESG and sustainability initiatives.