Senior Cyber Security Specialist

About the role

HangiKredi is seeking a Senior Cyber Security Specialist to protect its information systems, network infrastructure, and cloud environments. You will lead threat detection, incident response, and security automation initiatives in a fast‑growing fintech environment.

Key responsibilities

• Proactively safeguard company assets against cyber threats across on‑premise, network, and cloud layers.
• Monitor SIEM and log management platforms, perform anomaly detection using threat intelligence and correlation rules.
• Conduct atomic ATT&CK technique tests, develop custom detection rules, and design large‑scale attack emulation scenarios.
• Lead incident response processes, including analysis, containment, root‑cause investigation, and forensic analysis.
• Plan and interpret penetration tests, run vulnerability scans, and coordinate remediation with IT teams.
• Define security requirements for new projects, perform architectural reviews, and carry out risk analyses.
• Support ISO 27001, KVKK, and other compliance initiatives.
• Create and maintain automation/orchestration scripts to streamline security operations.
• Contribute to user awareness training and organize social engineering simulations.

Required profile

• Bachelor’s degree in Computer Engineering, Electronics Engineering, Mathematical Engineering, or a related field.
• Minimum 5 years of professional experience in cybersecurity.
• Strong command of written and spoken English.
• Relevant certifications (e.g., OSCP, OSCP+, GCIH, GCIA, CCD, BTL 1/2) are a plus.

Required skills

• SIEM, EDR, and SOAR technologies.
• Vulnerability management processes.
• MITRE ATT&CK framework for detection and response.
• Incident response, forensic analysis, and log correlation.
• Automation/orchestration scripting with Python, PowerShell, or Bash.
• Penetration testing and vulnerability scanning.
• Security architecture review and risk assessment.

What we offer

• Young, dynamic, agile work environment.
• Access to cutting‑edge security tools and technologies.
• Data‑centric and customer‑focused culture.
• Continuous learning through internal and external training sessions.
• Comprehensive onboarding program.
• Lunch card, optional remote work, private medical and accident insurance.
• Special occasion gifts (marriage, birth, etc.).