information security engineer

Migros One

<div>
 
 
 Who are we?
 
 
 
 Our business is technology, food and retail. We are a young team that combines all resources with technology; Our goal is to provide an excellent e-commerce service to meet your needs. In short, you can call us Migros One. 😉
 
 
 
 
 
 Today, as a team that holds the
 
 &ldquo;Great Place To Work&rdquo;
 
 certificate with the contributions of our employees we produce, learn and develop together. We rediscover our passion for our business every day and build Migros One culture together.
 
 
 
 
 
 
 Our Culture
 
 
 
 We are #ONE to create a better tomorrow for our community. Our way of working includes four core values that we strive to act:
 
 
 1. Take accountability with passion
 
 
 2. Drive innovation with curiosity
 
 
 3. Make a difference for our customers
 
 
 4. Create open communication
 
 
 
 
 
 We live these values every day and create an environment where everyone enjoys working. Our business culture based on trust, openness and innovation has been recognized with our
 
 &ldquo;Great Place To Work&rdquo;
 
 certificate!
 
 
 
 
 
 
 What Do We Do?
 
 
 
 As Migros One; We spread happiness in being the pioneer of innovation in the field of food and retail technology with our brands
 
 Migros Sanal Market, Migros Hemen, Migros Extra, Migros Yemek, Macroonline, Tazedirekt, Mion and Petimo!
 
 
 
 
 
 
 Our determination to find fast and effective solutions always keeps us one step ahead. Our team's passion and energy make their jobs enjoyable.
 
 
 
 
 
 Thanks to our people-oriented approach, we aim to create a more comfortable and practical world for everyone by using them all. We constantly strive to provide the best experience to our consumers and employees!As Migros One team, we get excited with every member of our team creating his/her own career story!
 
 
 
 
 
 If you would like to be a part of this visionary and tech-savvy e-commerce team, don&rsquo;t wait! Make your application!
 
 
 
 
 
 We are looking for
 
 Information Security Engineer
 
 who will be on our team.
 
 
 
 
 
 
 What You'll Be Doing:
 
 
 <ul>
 <li>
 Develop, implement, and monitor Information Security policies, procedures, and best practices across the organization,
 </li>
 <li>
 Provide guidance and review for security plans, system categorization, security control selection, and security assessments,
 </li>
 <li>
 Identify, analyze, and mitigate security risks, acting as both advisor and auditor for information security compliance,
 </li>
 <li>
 Hands-on experience with firewalls, intrusion detection/prevention (IDS/IPS), anti-virus, WAF, VPN, NAC, and content filtering solutions,
 </li>
 <li>
 Perform continuous analysis of security technologies, identifying weaknesses and improvement areas,
 </li>
 <li>
 Lead incident management processes, including detection, response, containment, and reporting,
 </li>
 <li>
 Maintain and optimize security tools and technologies to ensure robust protection,
 </li>
 <li>
 Conduct regular audits, compliance checks, and policy reviews to ensure adherence to internal and external standards.
 </li>
 </ul>
 
 
 
 
 
 What You'll Bring:
 
 
 <ul>
 <li>
 5+ years of experience in information and network security, focusing on policy building, implementation, and operations,
 </li>
 <li>
 Strong expertise in network security technologies: Firewalls, IPS/IDS, WAF, VPN, NAC,
 </li>
 <li>
 Knowledge of security hardening techniques, secure development methodologies, and best practices,
 </li>
 <li>
 Solid understanding of network protocols (TCP/IP, UDP, HTTP/S, DNS) and related security controls,
 </li>
 <li>
 Experience with Cloud Security (Azure, AWS, GCP) and Container Security/DevSecOps practices,
 </li>
 <li>
 Familiarity with compliance standards (PCI-DSS, KVKK, ISO 27001) and audit processes,
 </li>
 <li>
 Experience with Palo Alto and Microsoft security solutions is a strong plus,
 </li>
 <li>
 Strong analytical, problem-solving, and communication skills.
 </li>
 </ul>
 
 
</div>

Information Security Engineer

Trendyol Group

<div>
 
 
 About the Team
 
 
 
 At Trendyol Tech, our mission is to create a positive impact in our ecosystem by enabling commerce through technology.
 
 
 We solve complex problems with data, creativity, and agility &mdash; always driven by real outcomes. With a culture built on learning, collaboration, and ownership, we grow together while building what&rsquo;s next.
 
 
 
 
 
 
 About the Role
 
 
 
 As a Cybersecurity and Compliance Engineer, you'll be responsible for developing and implementing security policies to ensure compliance with banking regulations like BDDK and PCI-DSS. You will identify and manage security risks, conduct audits, and ensure new features are built securely. Your expertise in data security will be key to protecting sensitive information and maintaining a strong security posture across our infrastructure.
 
 
 
 
 
 
 Responsibilities
 
 
 <ul>
 <li>
 Develop, implement, and maintain security policies, standards, guidelines, and procedures.
 </li>
 <li>
 Identify and assess security risks, create action plans, and monitor their implementation.
 </li>
 <li>
 Ensure compliance with BDDK, TCMB, KVKK, GDPR, PCI-DSS, ISO 27001, and other relevant regulations.
 </li>
 <li>
 Participate in and support periodic audits, compliance assessments, and control activities.
 </li>
 <li>
 Contribute to security awareness programs.
 </li>
 <li>
 Monitor and manage third-party/vendor-related security risks.
 </li>
 <li>
 Conduct security assessments and technical reviews for new features.
 </li>
 <li>
 Apply strong expertise in data security, including DLP, DAM, data encryption, and data classification.
 </li>
 <li>
 Provide guidance on secure architecture design across IT infrastructure layers.
 </li>
 <li>
 Stay current with industry trends, security standards, and technology advancements.
 </li>
 </ul>
 
 
 
 
 
 Expected Qualifications
 
 
 <ul>
 <li>
 Proven experience in the banking/financial sector, with familiarity with BDDK regulatory requirements.
 </li>
 <li>
 Strong knowledge of security risk management, security architecture, and data security solutions.
 </li>
 <li>
 In-depth understanding of operating systems, network infrastructure, firewalls, and database security.
 </li>
 <li>
 Familiarity with international compliance and security frameworks (ISO 27001, NIST, PCI-DSS, GDPR, KVKK).
 </li>
 <li>
 Demonstrated ability to design security solutions to address business challenges in a regulated environment.
 </li>
 <li>
 Excellent analytical thinking, communication, and presentation skills.
 </li>
 <li>
 Strong problem-solving and consultative approach.
 </li>
 </ul>
 
 
 
 
 
 What We Offer
 
 
 
 - Hybrid working model with flexibility: a schedule that helps you find the right balance between flexibility and team bonding, including work-from-abroad opportunities and a summer working model.
 
 
 - Customisable FlexBenefits budget: Adjust your daily meal allowance, choose your health insurance package (and extend it to your spouse or children), and pick from additional benefits like fuel support or Trendyol shopping credits.
 
 
 - Well-being support: Access to location-based in-house doctors, as well as psychologist and dietitian support, and HPV vaccination provision.
 
 
 - Personalised training allowance and learning opportunities: Use your annual budget for any training or conference of your choice, explore our Learning Management System (LMS) anytime, and join in-person learning sessions offered throughout the year.
 
 
 - Responsibility from day one: Take full ownership from the start in a culture where every voice is heard and valued.
 
 
 - A diverse, international team: Collaborate with global peers across our offices in Berlin, Amsterdam, Dubai, and beyond, in a startup-spirited and collaborative environment.
 
 
 - Opportunities to grow with the best: Tackle meaningful challenges, develop through hands-on experience, and grow with the support of expert guidance and global mentoring.
 
 
 - Meaningful connections beyond tasks: Be part of team rituals, events, and social activities that help us stay connected and inspired.
 
 
 
 
 
 
 Take the Next Step
 
 
 
 If this role excites you, apply today, we look forward to taking the next step with you.
 
 
 Want to get to know the team better first? Explore our Career Website, LinkedIn, or YouTube to learn more about #LifeatTrendyol and how we work.
 
</div>

Trendyol

<div><div><div>About the Team</div><div>
At Trendyol Tech, our mission is to create a positive impact in our ecosystem by enabling commerce through technology.</div><div>
We solve complex problems with data, creativity, and agility &mdash; always driven by real outcomes. With a culture built on learning, collaboration, and ownership, we grow together while building what&rsquo;s next.</div></div>
<div><div><h3 class="jobSectionHeader">About the Role</h3><ul><li><ul><li>
As a Cybersecurity and Compliance Engineer, you'll be responsible for developing and implementing security policies to ensure compliance with banking regulations like BDDK and PCI-DSS. You will identify and manage security risks, conduct audits, and ensure new features are built securely. Your expertise in data security will be key to protecting sensitive information and maintaining a strong security posture across our infrastructure.</li></ul></li></ul></div></div>
<div><div><h3 class="jobSectionHeader">Expected Qualifications</h3><ul><li><ul><li>
Proven experience in the banking/financial sector, with familiarity with BDDK regulatory requirements.</li><li>
Strong knowledge of security risk management, security architecture, and data security solutions.</li><li>
In-depth understanding of operating systems, network infrastructure, firewalls, and database security.</li><li>
Familiarity with international compliance and security frameworks (ISO 27001, NIST, PCI-DSS, GDPR, KVKK).</li><li>
Demonstrated ability to design security solutions to address business challenges in a regulated environment.</li><li>
Excellent analytical thinking, communication, and presentation skills.</li><li>
Strong problem-solving and consultative approach.</li></ul></li></ul></div></div>
<div><div><h3 class="jobSectionHeader">Responsibilities</h3><ul><li><ul><li>
Develop, implement, and maintain security policies, standards, guidelines, and procedures.</li><li>
Identify and assess security risks, create action plans, and monitor their implementation.</li><li>
Ensure compliance with BDDK, TCMB, KVKK, GDPR, PCI-DSS, ISO 27001, and other relevant regulations.</li><li>
Participate in and support periodic audits, compliance assessments, and control activities.</li><li>
Contribute to security awareness programs.</li><li>
Monitor and manage third-party/vendor-related security risks.</li><li>
Conduct security assessments and technical reviews for new features.</li><li>
Apply strong expertise in data security, including DLP, DAM, data encryption, and data classification.</li><li>
Provide guidance on secure architecture design across IT infrastructure layers.</li><li>
Stay current with industry trends, security standards, and technology advancements.</li></ul></li></ul></div></div>
<div><div>What We Offer</div><ul><li>Hybrid working model with flexibility: a schedule that helps you find the right balance between flexibility and team bonding, including work-from-abroad opportunities and a summer working model.</li><li>Customisable FlexBenefits budget: Adjust your daily meal allowance, choose your health insurance package (and extend it to your spouse or children), and pick from additional benefits like fuel support or Trendyol shopping credits.</li><li>Well-being support: Access to location-based in-house doctors, as well as psychologist and dietitian support, and HPV vaccination provision.</li><li>Personalised training allowance and learning opportunities: Use your annual budget for any training or conference of your choice, explore our Learning Management System (LMS) anytime, and join in-person learning sessions offered throughout the year.</li><li>Responsibility from day one: Take full ownership from the start in a culture where every voice is heard and valued.</li><li>A diverse, international team: Collaborate with global peers across our offices in Berlin, Amsterdam, Dubai, and beyond, in a startup-spirited and collaborative environment.</li><li>Opportunities to grow with the best: Tackle meaningful challenges, develop through hands-on experience, and grow with the support of expert guidance and global mentoring.</li><li>Meaningful connections beyond tasks: Be part of team rituals, events, and social activities that help us stay connected and inspired.</li></ul><div></div><div> 
Take the Next Step</div><div>
If this role excites you, apply today, we look forward to taking the next step with you.</div><div>
Want to get to know the team better first? Explore our Career Website, LinkedIn, or YouTube to learn more about #LifeatTrendyol and how we work.</div></div></div>

TekBoox

Tekboox US base IT company urgently looking to hire experienced Application/ Information Security Engineer Key Responsibilities<ul><li>Perform penetration testing across web, mobile, APIs, networks, cloud, and Active Directory environments.</li><li>Identify, exploit, and document vulnerabilities, misconfigurations, and insecure coding practices.</li><li>Proactively design and implement new security processes, tools, and best practices to improve organizational security maturity.</li><li>Prepare detailed technical reports and executive-level summaries with clear remediation steps.</li><li>Ensure all offensive security activities comply with HIPAA Security Rules and ISO 27001 ISMS standards.</li><li>Support security audits, risk assessments, and compliance reporting by providing accurate technical evidence.</li><li>Conduct security awareness training sessions, including phishing simulations and policy reinforcement.</li><li>Collaborate with Development, DevOps, and Compliance teams to integrate security into SDLC and deployment pipelines.</li></ul>Required Skills &amp; Qualifications<ul><li>Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or a related discipline.</li><li>Minimum 3+ years of experience in offensive security, penetration testing, or red teaming.</li><li>Ability to work independently with strong ownership of security initiatives.</li><li>Proficiency with tools such as Burp Suite, Metasploit, Nmap, BloodHound, Wireshark, and custom scripting.</li><li>Strong understanding of HIPAA Security &amp; Privacy Rules and ISO 27001 controls.</li><li>Hands-on experience with scripting/programming (Python, Bash, or PowerShell).</li><li>Strong analytical and problem-solving skills with the ability to deliver high-quality reports.</li><li>Excellent communication and presentation skills to engage technical and non-technical audiences.</li></ul>Preferred Certifications (any one or more of the following)<ul><li>Offensive Security: OSCP, CPTS, CRTP, GPEN, or equivalent.</li><li>Compliance &amp; Governance: HIPAA Security/Privacy Training Certificate.</li><li>ISO Standards: ISO 27001 Lead Auditor / Lead Implementer.</li></ul>Job Timing &amp; Location Timing:1pm to 10PM (Onsite 5days a week) Location:College Road, Township, LahoreInterested share resume saddam.hussain@tekboox.comJob Type: Full-timePay: Rs200,000.00 - Rs250,000.00 per monthWork Location: In person

Application/ Information Security Engineer

Finastra

<div><h1 class="jobSectionHeader">Who are we? 
</h1> 
At Finastra, we are a dynamic global provider of open finance software solutions, dedicated to expanding access to financial services. Our innovative applications span Lending, Payments, Treasury and Capital Markets, and Universal Banking. Proudly serving over 8,000 customers, including 45 of the world's top 50 banks, we aim to boost financial inclusion for all. Join us and be part of a vibrant company that embraces diverse perspectives, and is committed to doing well by doing good.
with What will you contribute?
 
 
We are seeking a highly motivated and skilled Security Engineer specializing in Data Loss Prevention (DLP) and Data Exfiltration controls within cloud and hybrid environments. The ideal candidate will possess demonstrated expertise in Microsoft Azure security solutions, with a proven track record of delivering automated and integrated security solutions. Scripting capabilities in Python and PowerShell, along with practical knowledge of generative AI and Large Language Models (LLMs), are essential.
Key Responsibilities
- Design, implement, and manage DLP and data exfiltration controls across cloud and hybrid infrastructures.
- Develop automation scripts and integrations using Python and PowerShell to streamline security operations.
- Collaborate with cross-functional teams to ensure security solutions meet organizational and compliance standards.
- Leverage generative AI/LLMs to enhance threat detection, prevention, and response workflows.
- Monitor, analyze, and respond to security incidents involving data leakage or unauthorized data access.
- Continuously improve security posture through proactive risk assessments and process enhancements.
Required Qualifications
Bachelor&rsquo;s degree or equivalent in Computer Science, Cybersecurity, or a related field.
- 3&ndash;5 years of experience in cloud security, with a focus on DLP and data exfiltration .
- Hands-on experience with Microsoft Azure security services and architecture.
- Strong scripting skills in Python and PowerShell for automation and integration tasks.
- Must have experience in security tools such as Microsoft Purview, Defender for Cloud, Sentinel.
- Practical knowledge of generative AI and LLMs in security contexts.
- Proven problem-solving abilities and the capacity to work independently.
Experience with Industry leading DLP Tools
Preferred Skills
Certifications such as AZ-500, CISSP, or GIAC or Similar.
- Experience with other cloud platforms like AWS or GCP is a plus.
- Excellent communication, documentation, and collaborative skills.
Timings : Mon-Friday:11am till 8.30PM
We are proud to offer a range of incentives to our employees worldwide. These benefits are available to everyone, regardless of grade, and reflect the values we uphold: 
 
&middot; Flexibility: Enjoy unlimited vacation, based on your location and business priorities. Hybrid working arrangements, and inclusive policies such as paid time off for voting, bereavement, and sick leave.
&middot; Well-being: Access confidential one-on-one therapy through our Employee Assistance Program, unlimited personalized coaching via our coaching app, and access to our Gather Groups for emotional and mental support.
&middot; Medical, life &amp; disability insurance, retirement plan, lifestyle and other benefits*
&middot; ESG: Benefit from paid time off for volunteering and donation matching.
&middot; DEI: Participate in multiple DE&amp;I groups for open involvement (e.g., Count Me In, Culture@Finastra, Proud@Finastra, Disabilities@Finastra, Women@Finastra).
&middot; Career Development: Access online learning and accredited courses through our Skills &amp; Career Navigator tool.
&middot; Recognition : Be part of our global recognition program, Finastra Celebrates, and contribute to regular employee surveys to help shape Finastra and foster a culture where everyone is engaged and empowered to perform at their best. 
<div> 
<ul><li>Specific benefits may vary by location.
</li></ul></div>At Finastra, each individual is unique, bringing their own ideas, thoughts, cultural beliefs, backgrounds, and experiences together. We learn from one another, embrace and celebrate our differences, and create an environment where everyone feels safe to be themselves.
Be unique, be exceptional, and help us make a difference at Finastra!</div>

Expert Information Security Engineer

<div>
 
 
 About the Team
 
 
 
 At Trendyol Tech, our mission is to create a positive impact in our ecosystem by enabling commerce through technology.
 
 
 We solve complex problems with data, creativity, and agility &mdash; always driven by real outcomes. With a culture built on learning, collaboration, and ownership, we grow together while building what&rsquo;s next.
 
 
 
 
 
 
 About the Role
 
 
 
 As an Information Security Specialist, you'll be a key part of our team, responsible for developing and implementing security policies and procedures. This role involves more than just risk management; you'll also ensure our systems and products meet critical compliance standards like KVKK, GDPR, and PCI-DSS. You'll use your expertise to conduct technical reviews, manage security incidents, and collaborate with engineering, product, and legal teams to mitigate risks and maintain a robust security posture.
 
 
 
 
 
 
 Responsibilities
 
 
 <ul>
 <li>
 Development and implementation of security policy, standards, guidelines and procedures to ensure ongoing maintenance of security, risk, and compliance.
 </li>
 <li>
 Good knowledge of operating systems, network infrastructure, firewalls, and database security.
 </li>
 <li>
 Identifying security risks, creating and monitoring an action plan to eliminate risks.
 </li>
 <li>
 Maintaining KVKK, GDPR, PCI-DSS, ISO 27001, BDDK, TCMB and ETK compliance and periodic audits and controls within this scope. Also, help the Technology team in the phase of implementation of these regulations.
 </li>
 <li>
 Taking part in periodic and effective user awareness programs.
 </li>
 <li>
 Helping to reduce information security risks generated inside Trendyol .
 </li>
 <li>
 Monitor and manage the security risks coming from third parties.
 </li>
 <li>
 Conduct technical reviews for new features and identify security, privacy, and compliance risks. Work closely with technical and non-technical teams, including Engineering, Product and Legal in order to mitigate security, privacy and compliance risks.
 </li>
 <li>
 Fluency in English.
 </li>
 </ul>
 
 
 
 
 
 Expected Qualifications
 
 
 <ul>
 <li>
 5+ years of experience in security.
 </li>
 <li>
 Proficiency in developing information security policies and procedures.
 </li>
 <li>
 Proven records of executing programs that meet the objectives of excellence in a dynamic environment.
 </li>
 <li>
 Play a key role in driving large cross-company security, privacy, and compliance reviews of products and features.
 </li>
 <li>
 Being a critical thinker, with strong problem-solving skills and also having project management skills.
 </li>
 <li>
 Manage information security related incidents.
 </li>
 <li>
 Knowledge and understanding of relevant legal and regulatory requirements, such as PCI-DSS, KVKK, GDPR, TCMB, and BDDK regulations.
 </li>
 <li>
 Having CISSP certification.
 </li>
 <li>
 2+ years of experience with Security Risk Management and Banking regulations.
 </li>
 <li>
 Having experience with coding and system design review.
 </li>
 </ul>
 
 
 
 
 
 What We Offer
 
 
 
 - Hybrid working model with flexibility: a schedule that helps you find the right balance between flexibility and team bonding, including work-from-abroad opportunities and a summer working model.
 
 
 - Customisable FlexBenefits budget: Adjust your daily meal allowance, choose your health insurance package (and extend it to your spouse or children), and pick from additional benefits like fuel support or Trendyol shopping credits.
 
 
 - Well-being support: Access to location-based in-house doctors, as well as psychologist and dietitian support, and HPV vaccination provision.
 
 
 - Personalised training allowance and learning opportunities: Use your annual budget for any training or conference of your choice, explore our Learning Management System (LMS) anytime, and join in-person learning sessions offered throughout the year.
 
 
 - Responsibility from day one: Take full ownership from the start in a culture where every voice is heard and valued.
 
 
 - A diverse, international team: Collaborate with global peers across our offices in Berlin, Amsterdam, Dubai, and beyond, in a startup-spirited and collaborative environment.
 
 
 - Opportunities to grow with the best: Tackle meaningful challenges, develop through hands-on experience, and grow with the support of expert guidance and global mentoring.
 
 
 - Meaningful connections beyond tasks: Be part of team rituals, events, and social activities that help us stay connected and inspired.
 
 
 
 
 
 
 Take the Next Step
 
 
 
 If this role excites you, apply today, we look forward to taking the next step with you.
 
 
 Want to get to know the team better first? Explore our Career Website, LinkedIn, or YouTube to learn more about #LifeatTrendyol and how we work.
 
</div>

Information Security Engineer - Security and Risk Management

Oracle

<div>As a Federal Information Systems Security Engineer you will collaborate with internal and external stakeholders to analyze, define and validate functional and legal/regulatory system security controls and requirements. You will apply knowledge of security principles, policies and regulations to design and engineer system security solutions that meet federal security requirements and reduce the clients operational and security risks by applying risk management frameworks. This role will allow you to conduct security impact analysis and system risk assessments to identify potential security threats and recommend enhancements to improve deficiencies as well as create and execute plans for system security testing, assessment and authorization for deployment. In scope will be to implement system security solutions, perform ongoing performance audits and system maintenance and provide support for performance issues. In scope will be to develop the connection information for systems across cyber boundaries, and validate the encryption when the connection is established.</div>
 <div>Basic Qualifications:
<ul><li>At least 5 years of total related work experience including
</li><li>Information systems security work experience
</li><li>Bachelors degree or additional work experience directly related to the duties of the job
</li><li>Bachelor's degree in Information Security, Information Systems, Computer Science, Computer Engineering, Software Engineering, Mathematics preferred
</li><li>Receipt of the appropriate government security clearance card applicable for your position
</li>Due to the client contract you will be assigned, this position requires you to be a U.S. citizen 
<li>
</li></ul>Preferred Qualifications:
<ul><li>Certified Information Systems Security Professional (CISSP) - (ISC)&sup2;
</li><li>Certified Ethical Hacker (CEH) - EC-Council
</li><li>Certified Information Security Manager (CISM) - ISACA
</li><li>COMPTia Security +
</li><li>Cybersecurity Experience
</li><li>Federal government experience
</li>JIRA or other project tracking experience 
<li>
</li></ul>Expectations:
<ul><li>Must be willing to travel up to 20% as needed
</li><li>Willing to work additional or irregular hours as needed and allowed by local regulations
</li><li>Work in accordance with corporate and organizational security policies and procedures, understand personal role in safeguarding corporate and client assets, and take appropriate action to prevent and report any compromises of security within scope of position
</li><li>Perform other responsibilities as assigned</li></ul></div>

Senior Federal Information Systems Security Engineer

Search 10000+ Information security engineer jobs near you this October. New roles added regularly across leading industries. Apply today.

10000 information security engineer jobs NEAR_ME

Information Security Engineer

Information Security Engineer

Information Security Engineer

Application/ Information Security Engineer

Expert Information Security Engineer

Information Security Engineer - Security and Risk Management

Senior Federal Information Systems Security Engineer