Senior Security Engineer – Red Team

This is a fully remote position, open to applicants in Turkey.

📋 Description

• Execute penetration testing for web and mobile applications, as well as internal environments.

• Carry out source-code evaluations, threat assessments, and social-engineering evaluations.

• Provide assistance to blue teams as required.

• Investigate new attack methods and keep up-to-date with the latest cybersecurity developments and trends.

• Educate Quality Assurance and Development teams on security testing methodologies and secure software development practices.

• Collaborate with developers in various business units during the Software Development Life Cycle (SDLC).

• Offer strategic advice on countermeasures for emerging threats.

• Analyze application source code using static application security testing tools.

• Conduct security research on vulnerabilities and testing tools.

• Produce comprehensive documentation and reports detailing vulnerabilities, mitigation techniques, and remediation processes.

• Perform white-, gray-, or black-box security posture assessments.

• Work closely with agile teams and other departments.

⛳️ Requirements

• A minimum of 4 years of experience in web application security.

• Practical experience in testing web applications, web services, mobile applications, and APIs.

• Proficient in securing REST APIs and web services.

• Familiarity with implementing and utilizing SAST/DAST tools such as Fortify, Veracode, or Checkmarx.

• Knowledge of penetration testing information systems using both commercial and open-source exploitation tools.

• Understanding of standard security vulnerabilities and remediation strategies based on OWASP, SANS, and similar frameworks.

• Experience with secure coding practices and their implementation within engineering teams.

• Capability to assist developers throughout the SDLC and provide guidance on mitigating emerging threats.

• Experience in reviewing application source code with static application security testing tools.

• Background in security research related to vulnerabilities and testing tools.

• Proficient in creating detailed reports on vulnerabilities, mitigation strategies, and remediation processes.

• Ability to manage multiple projects simultaneously.

• Excellent written and verbal communication skills in English.

• Programming experience in Python, JavaScript, or PHP is advantageous.

• Familiarity with scripting and automation for application security testing is a plus.

• Knowledge of cloud security, particularly AWS security concepts, is beneficial.

• Relevant certifications such as eWAPTx, OSCP, or OSWE are a plus.

• Ability to thrive in a team-oriented environment.

• Strong critical-thinking and analytical abilities.

• Experience conducting white-, gray-, or black-box security posture assessments and generating detailed reports.

🏝️ Benefits

• Monthly meal allowance.

• Comprehensive private health insurance.

• Access to educational platforms such as Spotify, LinkedIn Learning, Blinkist, MasterClass, Neoskola, and CloudGuru.

• Internal training covering AI fundamentals, coding, foreign languages, and personal development skills.

• A diverse global team environment.

• Eligibility-based Employee Stock Ownership Plan (ESOP) or share ownership.

• Referral bonuses.

• Opportunities for volunteering and participating in purpose-driven social impact projects.

• Global retreats and team-building activities.

• Tech & Dev Talks and industry events.

• Fully remote work from anywhere in Turkey.