Senior Information Security Specialist

About the role

We are seeking a hands‑on Senior Security Specialist to act as the primary internal liaison with our MSSP/SOC, driving cybersecurity incidents from detection through to resolution. The role works closely with Group IT, Türkiye IT, US IT and external security providers to validate alerts, coordinate containment and remediation, and ensure incidents are properly documented and closed.

Key responsibilities

• Serve as the main point of contact for MSSP/SOC escalations and validate security alerts and investigations.
• Coordinate response to incidents such as phishing, malware, ransomware, account compromise, data leakage, insider risk and third‑party events.
• Drive containment actions including endpoint isolation, account disablement, MFA review, email purge and access revocation.
• Use LogRhythm SIEM for alarm review, log searches, evidence validation, case support, correlation rule tuning and reporting.
• Work with EDR, Microsoft 365/Entra ID, email security, identity, endpoint and network security tools.
• Maintain audit‑ready incident records in 4me/Xurrent with timelines, evidence, actions and post‑incident reviews.
• Support improvement of SOC performance, detection use cases, SIEM tuning and incident response processes.
• Lead or participate in incident calls across regions and time zones.

Required profile

• Calm and structured under pressure with strong analytical skills.
• Clear ownership, hands‑on problem‑solving and confidence to challenge suppliers and internal teams.
• Excellent professional English, both written and spoken.
• Experience working across international teams and multiple time zones.

Required skills

• LogRhythm SIEM.
• EDR tools such as SentinelOne, Microsoft Defender for Endpoint, CrowdStrike.
• Microsoft 365 security, Entra ID, MFA, conditional access and sign‑in log analysis.
• Email security platforms like Proofpoint, Defender for Office 365, Mimecast.
• Windows endpoints, Active Directory, PowerShell basics.
• Firewall, VPN, DNS and proxy log analysis.
• ITSM tools such as 4me/Xurrent, ServiceNow, Jira Service Management.