offensive security engineer - red team & penetration testing Jobs in Ankara

offensive security engineer - red team & penetration testing

offensive security engineer - vulnerability management Jobs in Ankara

offensive security engineer - vulnerability management

penetration tester with security clearance Jobs in Ankara

penetration tester with security clearance

senior blue team engineer

senior devsecops engineer (est timezone) Jobs in Ankara

senior devsecops engineer (est timezone)

offensive security engineer red team penetration testing

Trendyol

<div><div><div><b>About the Team</b></div><div>
At Trendyol Tech, our mission is to create a positive impact in our ecosystem by enabling commerce through technology.</div><div>
We solve complex problems with data, creativity, and agility &mdash; always driven by real outcomes. With a culture built on learning, collaboration, and ownership, we grow together while building what&rsquo;s next.</div><div></div><div><b><br>
About The Role</b></div><div>
As an Offensive Security Engineer, you will strengthen our security posture by managing our Breach &amp; Attack Simulation ecosystem and performing targeted Red Team assessments. You will simulate real-world attack scenarios, validate the effectiveness of security controls, and uncover detection gaps across our infrastructure. Working closely with Security Operations and Blue Teams, you will analyze logs, refine detection rules, and translate technical findings into clear, actionable recommendations. This role is ideal for someone who enjoys hands-on offensive work, deep technical problem-solving, and continuously exploring advanced attacker techniques.</div></div>
<div><div><h3 class="jobSectionHeader"><b>Responsibilities</b></h3><ul><li><ul><li>
Collaborate with cross-functional teams to enhance security hardening, working closely with Security Operations to improve security maturity &amp; monitoring capabilities.</li><li>
Ensure the continuous availability and effectiveness of the Attack Simulation ecosystem across all networks. This includes architecting agent deployments, managing health checks, and troubleshooting complex connectivity issues in segmented environments.</li><li>
Assess the efficacy of security devices (Firewalls, WAFs, IPS/IDSs, EDRs, DLPs, Email Gateways, etc.) by simulating real-world attack vectors and analyzing their blocking/detection capabilities.</li><li>
Plan and conduct manual and semi-automated Red Team engagements, simulating an adversary starting from an internal compromise to test lateral movement, privilege escalation, and data exfiltration paths.</li><li>
Deep dive into OS (Windows/Linux) and Network layers to resolve agent-based issues, including debugging service failures, proxy authentication errors, SSL inspection conflicts, and GPO restrictions.</li><li>
Employ common testing frameworks in your projects, such as the MITRE ATT&amp;CK framework.</li><li>
Translate complex technical findings into actionable insights for both technical teams and executive stakeholders, documenting detection gaps and remediation strategies.</li><li>
Collaborate closely with the Blue Team to analyze logs generated by simulations, identify visibility gaps, and develop new detection rules (Sigma, SPL, etc.).</li><li>
Document and catalog assessment findings.</li><li>
Research and replicate novel tactics, techniques, and procedures (TTPs) used by advanced threat actors (APTs).</li><li>
Develop, extend, or modify exploits, shellcode, and custom tools to automate specific assessment portions or bypass security controls when necessary.</li><li>
Maintain daily communication regarding project status with appropriate team members.</li></ul></li></ul></div></div>
<div><div><h3 class="jobSectionHeader"><b>Expected Qualifications</b></h3><ul><li><ul><li><b>
Experience: </b>Minimum 4+ years of experience in Offensive Security, Penetration Testing, or Security Engineering roles.</li><li><b>
Penetration Testing:</b> Strong proficiency in manual penetration testing methodologies beyond automated scanners.</li><li><b>
OS Expertise:</b> Expert-level knowledge of Windows (Registry, Services, GPO, ACLs, Event Logs) and Linux (Systemd, Bash, Kernel capabilities) to troubleshoot agent deployment and persistence issues in hardened environments.</li><li><b>
BAS &amp; Red Teaming: </b>Proven experience in both managing Breach &amp; Attack Simulation (BAS) platforms (maintaining infrastructure, agents, and policies) and executing manual Red Teaming operations.</li><li><b>
Network Knowledge:</b> Solid understanding of stateful network operations. Ability to diagnose connectivity issues involving Proxies (Auth/No-Auth), SSL/TLS Inspection (Man-in-the-Middle), Firewalls, and DNS using packet analysis tools (Wireshark, tcpdump).</li><li><b>
Evasion Techniques:</b> Deep understanding of how security controls (EDR, WAF, IPS) function and how to test/bypass them. Experience with evasion techniques (e.g., AMSI bypass, unhooking, obfuscation) is critical.</li><li><b>
Post-Exploitation:</b> Strong capability in post-exploitation tradecraft, including Active Directory attacks (Kerberoasting, DCSync), Lateral Movement (Pass-the-Hash/Ticket), and C2 framework operations.</li><li><b>
Cloud &amp; Containers:</b> Experience with cloud environments (GCP, AWS) and container orchestration (Kubernetes) security assessments.</li><li><b>
Blue Team Perspective:</b> Ability to analyze SIEM logs and understand &quot;what the Blue Team sees&quot; during an attack.</li><li><b>
Agile Management: </b>Proficiency in Agile sprint cycles and management.</li><li><b>
AI Aptitude: </b>Aptitude for AI projects and workflows.</li><li><b>
Certifications: </b>Relevant certifications such as OSCP, OSEP, CRTO, CRTL, or vendor-specific attack simulation certifications are a big plus.</li><li><b>
Community Contribution: </b>Experience contributing to the security or privacy community (public research, blogging, presentations, bug bounties, CVEs, etc.) is highly valued.</li><li><b>
Soft Skills: </b>An Agile-minded team player with excellent communication skills. Ability to translate technical concepts into language understood by software engineers and executive stakeholders.</li><li><b>
Mindset: </b>Eagerness for self-improvement, open-mindedness, and a future-oriented approach.</li><li><b>
Language: </b>Good command of written and spoken English.</li></ul></li></ul></div></div>
<div><div><b>What We Offer</b></div><ul><li><b>Hybrid working model with flexibility:</b> a schedule that helps you find the right balance between flexibility and team bonding, including work-from-abroad opportunities and a summer working model.</li><li><b>Customisable FlexBenefits budget: </b>Adjust your daily meal allowance, choose your health insurance package (and extend it to your spouse or children), and pick from additional benefits like fuel support or Trendyol shopping credits.</li><li><b>Well-being support: </b>Access to location-based in-house doctors, as well as psychologist and dietitian support, and HPV vaccination provision.</li><li><b>Personalised training allowance and learning opportunities: </b>Use your annual budget for any training or conference of your choice, explore our Learning Management System (LMS) anytime, and join in-person learning sessions offered throughout the year.</li><li><b>Responsibility from day one: </b>Take full ownership from the start in a culture where every voice is heard and valued.</li><li><b>A diverse, international team: </b>Collaborate with global peers across our offices in Berlin, Amsterdam, Dubai, and beyond, in a startup-spirited and collaborative environment.</li><li><b>Opportunities to grow with the best: </b>Tackle meaningful challenges, develop through hands-on experience, and grow with the support of expert guidance and global mentoring.</li><li><b>Meaningful connections beyond tasks:</b> Be part of team rituals, events, and social activities that help us stay connected and inspired.</li></ul><div></div><div><b><br>
Take the Next Step</b></div><div>
If this role excites you, apply today, we look forward to taking the next step with you.</div><div>
Want to get to know the team better first? Explore our Career Website, LinkedIn, or YouTube to learn more about #LifeatTrendyol and how we work.</div></div></div>

Offensive Security Engineer - Red team & Penetration Testing

<div><p><b>Would you like to join the leading international intergovernmental organization?</b></p><p><br>
The NCIA NATO Cyber Security Centre (NCSC) is responsible for planning and executing all lifecycle management activities for cybersecurity. In executing this responsibility, NCSC provides specialist cyber security-related services covering the spectrum of scientific, technical, acquisition, operations, maintenance, and sustainment support, throughout the lifecycle of NATO Information Communications and Technology (ICT). Within the NCSC, the Penetration Testing Section plays a critical offensive security role. They conduct tailored vulnerability assessments, penetration testing, and red teaming activities against NATO networks throughout their entire lifecycle.</p><p><b><br>
Responsibilities:</b></p><ul>
<li>
Providing Web, infrastructure and application level penetration testing, including but not limited to COTS software and NOTS/GOTS software (NATO/Government off the Shelf), following clearly defined methodologies.</li>
<li>Participating in kick-off meetings with stakeholders and technical points of contact in order to identify requirements for testing.</li>
<li>Following the documented procedures and workflows outlined by the technical leads.</li>
<li>Attending team meetings if required.</li>
<li>Writing technical reports in fluent English, following defined templates and Reporting Tools.</li>
<li>Briefing, at both executive and technical levels, on security reports and testing outcome, including at flag officer level.</li>
<li>In case of new vulnerabilities detected for COTS software, following the Responsible Disclosure Process and following-up with vendors and stakeholders.</li>
<li>Providing security design reviews to ensure compliance with NATO policies and directives.</li>
<li>In co-ordination with the Technical Lead of the Penetration testing team, ensuring proactive collaboration and coordination with internal and external stakeholders.</li>
<li>Staying abreast of technological developments relevant to the area of work.</li>
<li>Performing any other duties as may be required.</li>
</ul><p><b>
We are happy to hear from you if you have:</b></p><br>
<ul>
<li>
Bachelor of Science (BSc) degree at a nationally recognised/certified university in a technical subject with substantial Information Technology (IT) content and 3 years post-related experience.</li>
<li>Extensive knowledge and experience (at least 3 years) in the following areas:<ul>
<li>Web application penetration testing</li>
<li>IT infrastructure penetration testing</li>
<li>Network security architecture design</li>
<li>Assessing security vulnerabilities within OS, software, protocols &amp; networks</li>
<li>Researching and evaluating security products &amp; technologies</li>
<li>Knowledge in system and network administration of UNIX and Windows systems</li>
<li>Use of penetration testing tools, techniques, and recognized testing methodologies</li>
<li>Scripting skills in at least one of the following: Python, Go, PowerShell, shell (bash, ksh, csh)</li>
<li>Technical knowledge in system and network security, authentication and security protocols, cryptography, application security, as well as, malware infection techniques and protection technologies.</li>
<li>Ability to evaluate risks and formulate mitigation plans.</li>
<li>Proven ability to brief at executive level on security findings, reports and testing outcome.</li>
<li>Proven ability to write clear and structured technical reports, including executive summary, technical findings and remediation plan for several different audiences.</li>
</ul></li><li>Fluent English skills (verbal and written).</li>
<li>Desirable Experience and Education:<ul>
<li>Professional qualifications: OSCP, OSCE, OSWE, GPEN, CREST Certified Web Application Tester, GXPN, GWAPT or equivalent</li>
<li>Familiarity with risk analysis methodologies.</li>
<li>Prior experience of working in an international environment comprising both military and civilian elements.</li>
<li>Knowledge of NATO organization, internal structure and resultant relationships.</li>
</ul></li>
</ul><p>If you've read the description and feel this role is a great match, we'd love to hear from you! Click &quot;Apply for this job&quot; to be directed to a brief questionnaire. It should only take a few moments to complete, and we'll be in touch promptly if your experience aligns with our needs.</p></div>

Penetration tester with security clearance

<div><div><div><b>ABOUT THE TEAM</b></div><div></div><div><br>
We&rsquo;re shaping the future of financial technology at Trendyol.</div><div>
As Trendyol&rsquo;s technology teams, we&rsquo;re not only building for today we&rsquo;re designing the financial experiences of tomorrow. From payment infrastructure and digital wallets to smart credit systems and personalized financial services, we create solutions that empower millions of users across our ecosystem.</div><div>
With Trendyol Pay, we enable fast, secure, and seamless payment journeys. Through Trendyol Finance, we develop inclusive and accessible products that simplify financial decisions.</div><div></div><div><br>
We are united by a shared purpose:To create a positive impact in our ecosystem by enabling commerce through technology</div><div></div><div><b><br>
About the Role</b></div><div>
As a Security Engineer focused on Exposure Management, you will identify, analyze, and reduce the organization&rsquo;s attack surface across cloud, on-prem, and SaaS environments. You will detect exposures and misconfigurations using offensive-security techniques, prioritize them with attacker-driven context, and map likely attack paths. Working closely with Infra, SOC, Red Team, DevOps, and IT Ops, you will support accurate asset inventory, provide clear remediation guidance, and contribute to all phases of the CTEM lifecycle. The role includes hands-on validation, limited exploitation, automation, and continuous monitoring of global threat trends.</div></div>
<div><div><h3 class="jobSectionHeader"><b>Responsibilities</b></h3><ul><li><ul><li>
Enumerate, correlate and track the organization&rsquo;s attack surface across hybrid infrastructure (cloud, on-prem, multi-dc, saas, etc.).</li><li>
Detect exposures, misconfigurations, ownerless assets, and control gaps using tools and offensive mindset.</li><li>
Collaborate with infrastructure teams to ensure accurate asset inventory, tagging and zone health.</li><li>
Apply attacker-centric prioritization using EPSS, KEV, CVSS contextualization, TI feeds, exploit availability and real world threat actor TTPs.</li><li>
Utilize insights to map exposures and likely attack paths.</li><li>
Participate in the full Continuous Threat Exposure Management (CTEM) lifecycle (Scoping, Discovery, Prioritization, Validation, Mobilization) design and improve current processes according to organization&rsquo;s needs and global standards.</li><li>
Perform validation through PoC exploitation, manual verification, exploit research, and misconfiguration abuse.</li><li>
Support remediation teams by providing actionable, reproducible, business-aware remediation and mitigation guidance.</li><li>
Be aware of regulatory audit and compliances (e.g. ISO 27001, PCI-DSS, SOX, GDPR, KVKK, etc.) and knowledgeable about the requirements of these processes, supporting organizational needs when necessary within our scope of business.</li><li>
Develop automation scripts to enhance discovery, validation and reporting processes.</li><li>
Continuous monitoring of global security risks trends to proactively eliminate gaps in our organization.</li></ul></li></ul></div></div>
<div><div><h3 class="jobSectionHeader"><b>Expected Qualifications</b></h3><ul><li><ul><li>
Minimum 4 years hands on experience in offensive security, vulnerability management, or exposure management.</li><li>
Deep understanding of attacker mindset, how exposures translate into real attack paths.</li><li>
Solid experience with vulnerability scanners, attack surface tools, BAS platforms, cloud security, EDR/XDR and SIEM/SOAR.</li><li>
Strong grasp of networking, operating systems, identity systems, cloud primitives and security controls.</li><li>
Ability to validate and prioritize vulnerabilities manually and perform limited exploitation when needed.</li><li>
Experience building dashboards, reports and risk scoring.</li><li>
Experience contributing to CTEM framework design or exposure scoring models.</li><li>
Fluent in preferred coding language for automation &amp; integration purposes (e.g. python),</li><li>
Strong analytical and problem-solving skills.</li><li>
Eagerness on self-improvement, open-minded, future-oriented.</li><li>
Excellent communication skills - able to explain technical exposure in business-impact language.</li><li>
Highly collaborative with SOC, Threat Hunting, Red Team, DevOps and IT Ops.</li><li>
Good command of written and spoken English.</li><li>
Relevant certification(s) in the offensive security field (CEH, OSCP, eCPPT, OSWE, CRTO, etc.)</li></ul></li></ul></div></div>
<div><div>Follow Trendyol on LinkedIn; <b>Trendyol Tech</b> on Youtube and Medium!</div><div></div><div><b><br>
What We Offer</b></div><div><b>
A hybrid working model with flexibility &mdash;</b> a schedule that helps you find the right balance between flexibility and team bonding, including work-from-abroad opportunities and a summer working model.</div><div><b>
A customizable FlexBenefits budget &mdash;</b> Adjust your daily meal allowance, choose your health insurance package (and extend it to your spouse or children), and pick from additional benefits like fuel support or Trendyol shopping credits.</div><div><b>
Comprehensive wellbeing support &mdash; </b>Take advantage of our extended health package, which includes annual mini health screenings, access to location-based in-house doctors, psychologist and dietitian support, and HPV vaccination coverage.</div><div><b>
Personalized training allowance and learning opportunities &mdash;</b> Use your annual budget for any training or conference of your choice, explore our Learning Management System (LMS) anytime, and join in-person learning sessions offered throughout the year.</div><div><b>
Responsibility from day one &mdash; </b>Take full ownership from the start in a culture where every voice is heard and valued.</div><div><b>
A diverse, international team &mdash; </b>Collaborate with global peers across our offices in Berlin, Amsterdam, Dubai, and beyond, in a startup-spirited and collaborative environment.</div><div><b>
Opportunities to grow with the best &mdash;</b> Tackle meaningful challenges, develop through hands-on experience, and grow with the support of expert guidance and global mentoring.</div><div><b>
Meaningful connections beyond tasks &mdash;</b> Be part of team rituals, events, and social activities that help us stay connected and inspired.</div><div></div><div><b><br>
Take the Next Step</b></div><div>
If this role excites you, apply now and let&rsquo;s take the next step together.</div><div>
Want to get to know the team better first? Explore our Career Website, LinkedIn, or YouTube to learn more about #LifeatTrendyol and how we work.</div></div></div>

Offensive Security Engineer - Vulnerability Management

Vodafone

<div><div><div><div><h2 class="jobSectionHeader"><b>Join Us</b></h2>
</div><div><p>
At Vodafone, we&rsquo;re not just shaping the future of connectivity for our customers &ndash; we&rsquo;re shaping the future for everyone who joins our team. When you work with us, you&rsquo;re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
What you&rsquo;ll do</b></h2>
</div><div><ul><li>Collecting security threat and exposure information by Cyber Threat Intelligent (CTI) services,</li></ul>
Vulnerability Management Services<br>
<ul><li>Evaluate credibility, validity and relevance of collected data/information/intelligence</li><li>Consume and analysis CTI such as indicators of compromise, tactics, techniques and procedures</li><li>Management of daily Information Security operations and maintenance of Security Products</li></ul>
(SIEM , SOAR , Incident Response ,Vulnerability Management and other Information Security Products),<br>
<ul><li>Analytical and investigative abilities with hands-on experience on cyber security incident response</li></ul>
and response automation strategies, and ability to work to tight guidelines and under high pressure<br>
in the context of cyber incidents,<br>
<ul><li>Examining alarms escalated by Level-1, analyzing attack vectors, Performing vulnerability scanning,</li></ul>
analysis and reporting at regular intervals and when requested, with the customer's continuous<br>
vulnerability scanning and analysis solutions,<br>
<ul><li>Creating event investigation steps for alarms</li><li>Preparing weekly reports, Escalating the necessary alarms to Level-3 personnel in accordance with</li></ul>
the processes<br>
<ul><li>Following up/reporting patches and updates, to ensure that the necessary documents for SOC are</li></ul>
prepared and kept up to date<br>
<ul><li>Project Management Document, Specification, Contract, etc. of the customer to whom service is</li></ul>
provided. To have full knowledge of all the documents related to the project and to carry out the<br>
project activities within the framework of these documents<br>
<ul><li>Making assessments on Information Security processes and taking responsability of implementing</li></ul>
improvements on related systems,<br>
<ul><li>Following latest cyber threats and security trends and taking proper actions to mitigate the related</li></ul>
Information security risks,</div></div><div><div><h2 class="jobSectionHeader"><b>
Who you are</b></h2>
</div><div><ul><li>Bachelor&rsquo;s Degree in engineering departments (preferably Electronics or Computer Engineering),</li><li>3+ years of experience in performing hands-on security engineering, consulting, team management,</li></ul>
penetration testing, and/or adversary simulation, red teaming exercises, vulnerability assessments<br>
in complex operational ICT environments,<br>
<ul><li>Familiarity with industry standards like OWASP TOP10, CVSS, CIS, NIST etc.</li><li>Excellent understanding of attacker tools, tactics and techniques and referencing on MITRE ATT&amp;CK,</li></ul>
strong knowledge of MITRE Shield.<br>
<ul><li>CISSP, CISM, OSCP, CEH or equivalent would be a plus,</li><li>Experience developing detection logic for enterprise SIEM systems and with exploitation techniques</li></ul>
and use case development,<br>
<ul><li>Experience in the detection and response to malicious activity using log data and alerts from</li></ul>
cybersecurity solutions, systems, and cyber threat intelligence sources<br>
<ul><li>Experience extracting and analizing forensic artifacts across Windows, Mac, and Linux operating</li></ul>
systems,<br>
<ul><li>Experience supporting an Incident Response Program through the development of procedural</li></ul>
documentation,<br>
<ul><li>Experienced in SIEM products and SOAR products in Use Case and Playbook Development perspective</li><li>Experience working in an industry standard Security Operations Center or similar environment</li></ul>
providing incident handling and response, intrusion detection, analysis, cyber threat intelligence,<br>
threat determination, and mitigations processing and tracking, working with several network and<br>
system security technologies to include Elasticsearch, data analytics platforms, endpoint tools,<br>
network technologies, and SIEMs<br>
<ul><li>Experience of incident response processes, and threat intelligence cycles, including understanding</li></ul>
of IP network traffic, security vulnerabilities, different exploitation techniques, and malware<br>
behaviors (including communications protocols),<br>
<ul><li>Experience in Penetration testing and red teaming activies is a plus.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Not a perfect fit?</b></h2>
</div><div><p>
Worried that you don&rsquo;t meet all the desired criteria exactly? At Vodafone we are passionate about empowering people and creating a workplace where everyone can thrive, whatever their personal or professional background. If you&rsquo;re excited about this role but your experience doesn&rsquo;t align exactly with every part of the job description, we encourage you to still apply as you may be the right candidate for this role or another opportunity.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
What's in it for you</b></h2>
</div><div><p>
We like to keep them flexible:</p><ul><li>Vflexy: Flexible Benefits Program</li><li>Hybrid working kit</li><li>Ergonomic kit allowance</li><li>Digital meal voucher</li><li>Flexible transportation allowance.</li><li>Employee assistance hotline &amp; counselling</li><li>Comprehensive and flexible private health insurance</li><li>Discounted price deals for wide range of products &amp; services</li></ul><p><br>
Plus, plenty more to enjoy!If you want to know more about us and what we do, then visit our website: www.vodafone.com.tr</p><p>
https://www.vodafone.com.tr/insan-kaynaklari</p><p>
Instagram: https://www.instagram.com/vodafonekariyer/</p><p>
Youtube: https://www.youtube.com/user/VFTurkiye</p><p><br>
Data Privacy<br>
By applying for this job, you accept the Vodafone Privacy Policy. Please visit Privacy Policy web page at https://careers.vodafone.com/privacy-policy/turkey/ for further details.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Who we are</b></h2>
</div><div><p>
We are a leading international Telco, serving millions of customers. At Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people's lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live and we protect the planet, whilst helping our customers do the same.</p><p>
Belonging at Vodafone isn't a concept; it's lived, breathed, and cultivated through everything we do. You'll be part of a global and diverse community, with many different minds, abilities, backgrounds and cultures. ;We're committed to increase diversity, ensure equal representation, and make Vodafone a place everyone feels safe, valued and included.</p><p>
If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, please refer to https://careers.vodafone.com/application-adjustments/ for guidance.</p><p>
Together we can.</p></div></div></div></div>

SOC Cyber Threat Snr. Specialist

Picus

<div><div>Are you passionate about technology and enjoy explaining complex solutions in a way that everybody gets excited? If so, read on!</div><div></div><div><b><br>
About Picus</b></div><div>
Picus Security, the leading security validation company, gives organizations a clear picture of their cyber risk based on business context. Picus transforms security practices by correlating, prioritizing, and validating exposures across siloed findings so teams can focus on critical gaps and high-impact fixes. With Picus, security teams can quickly take action with one-click mitigations to stop more threats with less effort.</div><div></div><div><br>
The Picus Security Validation Platform easily reaches across on-prem environments, hybrid clouds and endpoints coupled with Numi AI to provide exposure validation.</div><div></div><div><br>
The pioneer of Breach and Attack Simulation, Picus delivers award-winning threat-centric technology that allows teams to pinpoint fixes worth pursuing, offering a 98% recommendation in Gartner Peer Review.</div><div></div><div><b><br>
About The Role</b></div><div></div><div><br>
If you&rsquo;re a results-driven person with an entrepreneurial mindset, who takes the initiative and thrives in a dynamic environment, then this is a great opportunity to play a pivotal role in a fast-growing cyber security company. We are looking for a smart and driven leader to have a direct impact on the future of our business by helping to influence global adoption of our award-winning Picus Security Validation Platform. Picus Labs is a place for Cyber Security Innovation&mdash; In Picus Labs, we elevate offensive and defensive cyber security technologies.</div><div></div><div><br>
We're looking to grow our team to support the high growth and global expansion plans of Picus with developing new technologies. With this role, you'll get a chance to work for innovation. You will be constantly challenged and you will get to develop your knowledge and skills in cyber security technologies. This is an amazing opportunity where you get to research for a fast-growing cyber security startup. As a Senior Blue Team Engineer in Picus Labs, you will manage internal SOC processes, analyze new adversarial techniques and attacks developed by Picus Labs Red Team and develop threat detection &amp; hunting scenarios. You will research new threat detection &amp; hunting methodologies and technologies, onboard and iterate.</div><div></div><div><br>
Picus is headquartered in Ankara, with a regional office in Istanbul, but our team is remote across T&uuml;rkiye. Please note that all CVs must be submitted in English.</div>
<h3 class="jobSectionHeader"><b>What You&rsquo;ll Do</b></h3><ul><li>
Analyze, understand, and leverage public research on emerging cyber threats, detection methods and tools,</li><li>
Research and apply Continuous Threat Exposure Management (CTEM) methodologies by conducting thorough studies on best practices, then implement and continuously refine them to proactively identify, expose, and mitigate vulnerabilities in response to evolving threats,</li><li>
Research and develop hardening methodologies for cybersecurity defenses by analyzing best practices and frameworks,</li><li>
Deploy, configure, and manage endpoint security technologies, including XDR, EDR, SIEM, and EPP solutions, to evaluate their response to Picus Attack Scenarios,</li><li>
Design and develop both open-source and vendor-based threat detection scenarios,</li><li>
Utilize AI and data analysis techniques to create innovative cybersecurity solutions that enhance threat detection and response capabilities,</li><li>
Optimize detection rules to improve the accuracy and efficiency of threat detection, reducing false positives while enhancing the ability to identify cyber threats,</li><li>
Develop and maintain tools to support the Detection Development Life Cycle,</li><li>
Conduct research on new threat hunting methodologies, tools, and technologies to stay ahead of evolving threats,</li><li>
Onboard, configure, and maintain detection and hunting products (e.g., SIEM, EDR) to enhance security operations,</li><li>
Optimize internal SOC technologies and processes to improve threat detection and response capabilities,</li><li>
Utilize threat intelligence services and malware sandboxes to effectively hunt for and analyze emerging malware threats,</li><li>
Collaborate with Picus Labs Red Team for purple teaming exercises to improve defenses,</li><li>
Partner with engineering teams to contribute to the development and refinement of new product features.</li></ul><h3 class="jobSectionHeader"><b>
What You Have</b></h3><ul><li>
Hands-on experience in hunting current adversarial techniques,</li><li>
Experience with security monitoring, incident detection, and response in enterprise environments,</li><li>
Proficiency in scripting languages (e.g., Python, Bash) for automating tasks and improving processes,</li><li>
Strong threat detection and hunting knowledge,</li><li>
Strong SIGMA and YARA rule development knowledge,</li><li>
Hands-on experience in administering and using network security, SIEM and EDR technologies,</li><li>
Knowledge of Mitre ATT&amp;CK framework and threat intelligence services,</li><li>
Community contribution to defensive knowledge will be a plus. (Open source projects, etc.),</li><li>
A proactive mindset with a continuous learning attitude towards new security technologies and threats,</li><li>
Excellent communication skills to effectively interact with technical and non-technical teams,</li><li>
Proficiency in written English.</li></ul><div><b>
Working at Picus</b></div><div>
Fascinating work - a chance to shape and lead an exciting, fast-growing cyber security segment. Security Validation is a concept that helps organizations evaluate their security posture in a continuous, automated, and repeatable way. This approach allows for the identification of imminent threats, provides recommended actions, and produces valuable metrics about cyber-risk levels.</div><div></div><div><br>
Unlimited opportunity! We are growing. At Picus, you'll be provided with as much responsibility as you can handle - new career development opportunities constantly arise given our rate of growth.</div><div></div><div><br>
Global exposure - Get a lot of experience working not only in a fast-growing startup but also interact with customers all around the world.</div><div></div><div><br>
Be part of a global remote team who is taking on Exposure Validation and a growing market segment.</div><div></div><div><br>
We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to age, sex, race, color, national origin, religious belief, gender or gender reassignment, sexual orientation, marriage or civil partnership, pregnancy and maternity, disability, protected veteran status, or any other characteristic protected by International law. Upon conditional offer of employment, candidates are required to complete reference and identity checks in line with local labor laws and as per the Company&rsquo;s employment policy.</div><div></div><p><br>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

Senior Blue Team Engineer

Red Bull

<div>
 Red Bull Student Marketeer'lar d&uuml;nyan&inodot;n en dinamik ve g&uuml;&ccedil;l&uuml; marka ve &uuml;r&uuml;n el&ccedil;ili&gbreve;i program&inodot;n&inodot;n par&ccedil;as&inodot; olurlar. Red Bull'un hedef kitlesini g&ouml;z &ouml;n&uuml;nde bulundurarak, kendi kamp&uuml;slerinde ve b&ouml;lgelerinde marka imaj&inodot;n&inodot; geli&scedil;tirecek ve &uuml;r&uuml;n bilinirli&gbreve;ini artt&inodot;racak &ccedil;al&inodot;&scedil;malar yapmaktan sorumludurlar. Red Bull Student Marketeers program&inodot;n&inodot;n amac&inodot; yeni t&uuml;keticilere ula&scedil;mak, &uuml;niversite &ouml;&gbreve;rencilerinin hayat&inodot;na dokunmak, sat&inodot;&scedil;&inodot; artt&inodot;rmak ve Red Bull markas&inodot;n&inodot; kamp&uuml;slerde y&ouml;netmektir. Dolay&inodot;s&inodot;yla program, t&uuml;keticiler ve m&uuml;&scedil;terilerle ileti&scedil;im kurarak daha fazla ki&scedil;inin Red Bull'u denemesini sa&gbreve;lamay&inodot; ve Red Bull etkinliklerinde &ccedil;al&inodot;&scedil;arak t&uuml;keticilere unutulmaz bir marka deneyimi ya&scedil;atmay&inodot; i&ccedil;erir. Student Marketeers ekibimiz, sabah 9 ak&scedil;am 5 bir i&scedil;te &ccedil;al&inodot;&scedil;mak yerine esnekli&gbreve;i tercih eden ve yarat&inodot;c&inodot; bir i&scedil; ortam&inodot;nda &ccedil;al&inodot;&scedil;mak isteyen &ouml;&gbreve;rencilerden olu&scedil;ur.
 <br/>
 <br/>
 <strong>
  Sana g&uuml;venebilece&gbreve;imiz t&uuml;m sorumluluklar
  <br/>
  <br/>
 </strong>
 <strong>
  MARKA VE &Uuml;R&Uuml;N&Uuml;N EL&Ccedil;&Idot;S&Idot; OLMAK
  <br/>
  <br/>
 </strong>
 Marka kimli&gbreve;ini ve &scedil;irket de&gbreve;erlerini benimseyerek, t&uuml;keticiler ve m&uuml;&scedil;terilerle her g&uuml;n kuraca&gbreve;&inodot;n ili&scedil;kilerde markay&inodot; en iyi &scedil;ekilde temsil etmek. T&uuml;keticileri do&gbreve;ru yer ve do&gbreve;ru zamanda &uuml;r&uuml;nle bulu&scedil;turarak Red Bull'un t&uuml;ketici baz&inodot;n&inodot; b&uuml;y&uuml;t&uuml;p fark&inodot;ndal&inodot;&gbreve;&inodot;n&inodot; artt&inodot;rmak ve t&uuml;keticilerden gelen sorulara yetkinlikle cevap vermek. &Ouml;&gbreve;rencilerde merak uyand&inodot;ran ve markay&inodot; kamp&uuml;s ya&scedil;am&inodot;n&inodot;n bir par&ccedil;as&inodot; haline getiren, her kamp&uuml;s i&ccedil;in &ouml;zel olarak haz&inodot;rlanm&inodot;&scedil; yenilik&ccedil;i planlar yaratmak ve uygulamak. B&ouml;lgendeki ve kamp&uuml;s&uuml;ndeki &ouml;nemli kontaklarla tan&inodot;&scedil;&inodot;p a&gbreve;&inodot;n&inodot; geni&scedil;letmek ve korumak. Sosyal medyada payla&scedil;&inodot;lacak &ouml;zg&uuml;n i&ccedil;eriklerle marka ba&gbreve;l&inodot;l&inodot;&gbreve;&inodot;n&inodot; artt&inodot;rmak. Red Bull etkinliklerinde ve Red Bull'un destek verdi&gbreve;i etkinliklerde g&ouml;rev alarak, t&uuml;keticilere unutulmaz bir marka deneyimi ya&scedil;atmak.
 <br/>
 <br/>
 <strong>
  M&Uuml;KKEMMEL UYGULAMALARA &Idot;MZA ATMAK
  <br/>
  <br/>
 </strong>
 &Idot;&scedil;in her detay&inodot;na &ouml;nem vererek uygulamalar&inodot; m&uuml;kemmelle&scedil;tirmek. Ekiple d&uuml;zenli bir &scedil;ekilde y&uuml;z y&uuml;ze ve &ccedil;evrimi&ccedil;i g&ouml;r&uuml;&scedil;meler yaparak fikirleri payla&scedil;mak ve i&scedil; birli&gbreve;i i&ccedil;inde bulunmak. Yapaca&gbreve;&inodot;n i&scedil;leri sana &ouml;zel platform &uuml;zerinden zaman&inodot;nda ve eksiksiz &scedil;ekilde planlamak ve raporlamak B&ouml;lgenle ilgili &ouml;nemli bilgileri, son trendleri ve f&inodot;rsatlar&inodot; takip ederek Red Bull medya oda&gbreve;&inodot;m&inodot;z&inodot;n geli&scedil;mesine katk&inodot;da bulunmak
 <br/>
 <br/>
 <strong>
  SATI&Scedil;TA UZMANLA&Scedil;MAK
  <br/>
  <br/>
 </strong>
 B&ouml;lgendeki sat&inodot;&scedil; y&ouml;neticileriyle geli&scedil;tirdi&gbreve;in iyi ili&scedil;kiler sayesinde sat&inodot;&scedil; noktalar&inodot;nda Red Bull'un bulunur ve g&ouml;r&uuml;n&uuml;r olmas&inodot;n&inodot; sa&gbreve;lamak. Sat&inodot;&scedil; ekibiyle i&scedil; birli&gbreve;i i&ccedil;inde &ccedil;al&inodot;&scedil;arak kamp&uuml;s&uuml;nde ve kamp&uuml;s&uuml;n&uuml;n &ccedil;evresinde Red Bull'un daha fazla sat&inodot;&scedil; noktas&inodot;nda bulunmas&inodot;n&inodot; sa&gbreve;lamak. Red Bull D&uuml;nyas&inodot;'ndaki de&gbreve;erleri kullanarak, Red Bull'un sat&inodot;&scedil; noktalar&inodot;nda akla gelen ilk &uuml;r&uuml;n olmas&inodot;n&inodot; sa&gbreve;lamak. Red Bull'un sat&inodot;&scedil; noktalar&inodot; i&ccedil;in istedi&gbreve;i standartlar&inodot;n kusursuz bir bi&ccedil;imde uygulanmas&inodot;n&inodot; sa&gbreve;lamak.
 <br/>
 <br/>
 <strong>
  Bilgi ve uzmanl&inodot;k alanlar&inodot;n bu pozisyon i&ccedil;in gereken en &ouml;nemli uzmanl&inodot;k:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   &Uuml;st&uuml;n ileti&scedil;im becerilerine sahip olmak
  </li>
  <li>
   Karizmatik, enerjik, pozitif ve d&inodot;&scedil;a d&ouml;n&uuml;k olmak
  </li>
  <li>
   Farkl&inodot; ortamlarda farkl&inodot; ki&scedil;ilerle ileti&scedil;ime ge&ccedil;me becerisine sahip, sosyal ve cana yak&inodot;n olmak
  </li>
  <li>
   &Uuml;niversitesinde ger&ccedil;ekle&scedil;en etkinliklerden haberdar olan, &ouml;&gbreve;renciler aras&inodot;ndaki pop&uuml;ler yerleri ve trendleri bilen, &uuml;niversitesini, &scedil;ehrini ve b&ouml;lgesini iyi tan&inodot;yan ve en &ouml;nemlisi &ouml;&gbreve;renci hayat&inodot;n&inodot; anlayan bir ki&scedil;i olmak
  </li>
  <li>
   Y&uuml;ksek bir sorumluluk ve insiyatif alma anlay&inodot;&scedil;&inodot;yla yarat&inodot;c&inodot; d&uuml;&scedil;&uuml;nce ve giri&scedil;imcilik ruhunu benimsemi&scedil; olmak
  </li>
  <li>
   Yar&inodot; zamanl&inodot; i&scedil; ve &ouml;&gbreve;renci hayat&inodot;n&inodot; birlikte idare edebilmek, zaman zaman ak&scedil;am ve hafta sonu &ccedil;al&inodot;&scedil;malar&inodot; i&ccedil;in uygun olmak
  </li>
  <li>
   &Ouml;zellikle pazarlama, m&uuml;zakere ve sat&inodot;&scedil; alanlar&inodot;nda yeni beceriler kazan&inodot;p uygulama konusunda bir e&gbreve;ilim ve arzuya sahip olmak
  </li>
  <li>
   Kamp&uuml;s hayat&inodot;ndaki trend'leri belirleyen &ouml;nemli topluluklar ve bireylerle ba&gbreve;lant&inodot;n&inodot;n olmas&inodot;, yoksa da ili&scedil;ki g&uuml;&ccedil;lendirmek
  </li>
  <li>
   Red Bull markas&inodot; ve &uuml;r&uuml;n&uuml;ne tutkuyla ba&gbreve;l&inodot; olmak
  </li>
 </ul>
</div>


Student Marketeer - Hacettepe Üniversitesi

Student Marketeer - TED Üniversitesi

Explore 168+ Offensive security engineer red team penetration testing in Ankara this December. Find roles across top companies and apply now to boost your career.