Senior Security Engineer, Detection & Response

This is a fully remote position, open to applicants in Turkey.

📋 Description

• Develop, manage, and enhance SIEM/XDR functionalities, which include log ingestion, detection rule creation, alert optimization, and investigation processes.

• Create detection methodologies for identifying suspicious behavior and data exfiltration utilizing application and database telemetry.

• Broaden audit and attribution coverage across Kubernetes, databases, SSO, and access-path telemetry.

• Analyze and react to security incidents within cloud infrastructures and applications.

• Conduct root cause investigations and implement long-term solutions.

• Execute proactive threat hunting across cloud and identity domains.

• Establish repeatable, agentic workflows for threat hunting.

• Manage vulnerability assessments across infrastructure, platforms, and applications.

• Review and validate external security findings, including bug bounty submissions.

• Engage in threat modeling and security design evaluations.

• Utilize expertise in AWS and Kubernetes to secure systems and provide remediation guidance to teams.

• Support security controls that align with PCI DSS, SOC 2, and other compliance standards.

• Develop automation, including AI solutions, for security operations, detection, and response.

• Participate in the on-call rotation for detection and response as well as managed services.

• Report to the Director of Information Security and work collaboratively with security platform, network, and zero-trust engineers.

⛳️ Requirements

• Minimum of 6 years of experience in security, software development, or infrastructure engineering.

• Practical experience securing cloud-based production environments.

• Familiarity with SIEM platforms such as Wazuh, Splunk, or ELK.

• Experience in designing and refining detection rules, minimizing alert noise, and enhancing investigation workflows.

• Proven hands-on experience in vulnerability management, including scanning, triage, validation, remediation coordination, and verification.

• In-depth knowledge of AWS, Linux, and Kubernetes infrastructure.

• Capability to investigate issues using logs, cloud tools, and system-level data.

• Experience in evaluating detection and logging considerations during design reviews.

• Awareness of common security vulnerabilities and mitigation techniques, including OWASP and SANS frameworks.

• Familiarity with PCI DSS and SOC 2 compliance frameworks.

• Demonstrated current utilization of AI tools such as Claude Code, Codex, Cursor, or custom LLM integrations.

🏝️ Benefits

• Monthly gross compensation ranging from $5,000 to $9,500 USD, depending on experience.

• AI-assisted engineering processes.

• Involvement in the detection and response on-call rotation.

• Engineering environment focused on open-source contributions.