Information Security Specialist

About the role

The Information Technology Directorate at Koç University is seeking an Information Security Specialist to strengthen its cyber‑defence posture. You will work closely with IT teams to identify risks, perform assessments, and ensure the security of the university’s digital assets.

Key responsibilities

• Identify security requirements for IT infrastructure designs and manage associated risks.
• Plan, execute, and coordinate internal and external penetration tests, analyse findings and track remediation.
• Run periodic vulnerability scans with tools such as Nessus or OpenVAS, prioritize issues and manage remediation with relevant teams.
• Monitor security logs via SIEM platforms, detect and classify events, and participate in incident response.
• Perform security hardening of servers, endpoints and network components.
• Contribute to IT risk analysis and maintain risk treatment plans.
• Develop and maintain information security policies, procedures and standards.

Required profile

• Bachelor’s degree in Computer Engineering, Software Engineering, Information Systems, Electrical‑Electronics Engineering or a related field.
• Minimum 2 years of experience in information security or cyber security.
• Familiarity with the CIS Controls framework (or willingness to learn).
• Strong command of English.
• Preferably holds Microsoft security certifications (SC‑200, SC‑300, AZ‑500, SC‑100) and/or a Linux administration certification.

Required skills

• Penetration testing methodologies (OWASP, PTES).
• Vulnerability management and scanning tools (Nessus, OpenVAS).
• SIEM / log management and security event analysis.
• Operating systems: Windows, Linux.
• Scripting languages: PowerShell, Python, Bash.
• Security tools: Burp Suite.
• Technical documentation and reporting.