business analyst

data analyst

strategy analyst

cyber security consultant Jobs in Istanbul

cyber security consultant

cyber security engineer pam/iam / cloud security Jobs in Istanbul

cyber security engineer pam/iam / cloud security

security analyst

Turk Telekom

<div>
 
 Turk Telekom Group, the leading communication technology group in Turkey, provides integrated telecommunication services from PSTN and GSM to broadband internet with group companies have a modern network infrastructure covering the whole country and offer a wide variety of services to residential and commercial customers all over Turkey. We are looking for a Cyber Security Solution Analyst for our organization especially experienced in telecommunication or finance sector.
 
 
 
 
 
 
 
 
 
 
 
 
 Job Responsibilities:
 
 
 
 
 
 <ul>
 <li>
 Designing the security topology of the IT and Network projects,
 </li>
 <li>
 Evaluating service architectures and solutions created for new enterprise customers in terms of network, server, database and application security, suggesting improvement actions, providing security solutions in projects,
 </li>
 <li>
 Leading the projects on security tests, managing the process end-to-end with the relevant security test teams and service owners, ensuring that improvement actions are implemented in a timely and effective manner,
 </li>
 <li>
 To take an active role in determining the Information Security risks related to IT services through processes, to evaluate the consistency of the risks determined by the security teams in a timely manner, and to follow up the actions systematically,
 </li>
 <li>
 Developing, implementing and monitoring the effectiveness of security standards of network and infrastructure services,
 </li>
 <li>
 To guide the business units and other IT teams of the company about system security,
 </li>
 <li>
 Updates job knowledge by tracking and understanding emerging security practices and standards, participating in educational opportunities, reading professional publications, and participating in professional organizations.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 
 
 
 Qualifications and Skills:
 
 
 
 
 
 <ul>
 <li>
 Graduating from Computer, Electric-Electronics etc. engineering departments,
 </li>
 <li>
 At least 5 years of experience in a similar position,
 </li>
 <li>
 Experienced in DevSevOps and SDLC processes,
 </li>
 <li>
 Having analyst experience in cyber security processes,
 </li>
 <li>
 Having knowledge, experience, preferably certificate (CEH, CISSP, CISM, CISA, ISO27001 LA etc.) on Cyber &ZeroWidthSpace;Security, Information Technology Regulations and International Information Security Standards,
 </li>
 <li>
 Knowledge and experience in basic security solutions such as Firewall, Load Balancer, IPS, URL Filtering, DLP, SIEM, EDR, Antivirus etc,
 </li>
 <li>
 Knowledge and experience of security processes and technologies (Network Security, Penetration, Vulnerability Scanning, Log Management, Certificate Management, Encryption, Zero Day, Exploit, etc.),
 </li>
 <li>
 Having knowledge and experience in System and Network Architecture, having knowledge of Security Standards and recommending Secure Architecture structures,
 </li>
 <li>
 Cloud security and ZTNA knowledge is a plus,
 </li>
 <li>
 Very good level of English,
 </li>
 <li>
 Having high analytical, abstract and quantitative thinking skills, capable of executive summary and management reporting,
 </li>
 <li>
 High organizational awareness and self-control skills; developed himself in leadership, teamwork, conflict management and relationship management,
 </li>
 <li>
 Able to work effectively with different teams in a tight agenda with effective time management.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 For our employee candidate information text:
 
 
 
 
 h
 
 ttps://www.turktelekomkariyer.com/aydinlatma-metni.aspx
 
</div>

Siber Güvenlik Çözüm Kıdemli Uzmanı

Nets-international Communication

Overview The Cybersecurity Engineer will be responsible for identifying, analyzing, and mitigating security vulnerabilities across systems, applications, and networks. This role includes conducting Vulnerability Assessments, Penetration Testing (VAPT), Digital Forensics &amp; Incident Response (DFIR), Red Team exercises, and Security Posture Assessments. The ideal candidate will have a deep understanding of frameworks such as MITRE ATT&amp;CK and OWASP, and will work to strengthen the organization&rsquo;s security defenses against evolving threats.Key ResponsibilitiesVulnerability Assessment &amp; Penetration Testing (VAPT)<ul><li>Conduct web, network, mobile, and API penetration tests using tools and manual testing methods.</li><li>Identify and exploit vulnerabilities, simulate attacks, and provide detailed remediation reports.</li><li>Perform security configuration reviews for systems, firewalls, and cloud infrastructure.</li><li>Develop automated scanning scripts and processes for continuous assessment.</li></ul>Red Teaming &amp; Threat Simulation<ul><li>Execute Red Team / Adversary Simulation exercises to evaluate real-world attack scenarios.</li><li>Map attack chains and techniques using the MITRE ATT&amp;CK framework.</li><li>Collaborate with Blue Teams to test detection, response, and containment capabilities.</li><li>Document findings and improve overall organizational cyber resilience.</li></ul>Digital Forensics &amp; Incident Response (DFIR)<ul><li>Investigate and respond to security incidents, breaches, and malware attacks.</li><li>Collect, preserve, and analyze digital evidence in line with forensic best practices.</li><li>Prepare detailed incident reports with timelines, root cause analysis, and corrective actions.</li><li>Support SOC and threat-hunting teams in real-time investigations.</li></ul>Security Posture &amp; Risk Assessment<ul><li>Conduct security posture reviews for IT assets, networks, and cloud environments.</li><li>Evaluate security controls and recommend strategies to reduce attack surface.</li><li>Perform gap analysis against industry standards (ISO 27001, NIST, CIS).</li><li>Support compliance and audit readiness initiatives.</li></ul>Security Research &amp; Development<ul><li>Stay current with emerging threats, exploits, and vulnerability disclosures.</li><li>Develop custom tools or scripts for exploit testing or automation.</li><li>Participate in bug bounty programs, CTFs, or security community contributions.</li></ul>Technical Skills &amp; ToolsVAPT Tools: Burp Suite, Metasploit, Nessus, Nmap, OWASP ZAP, Nikto, SQLMap Forensics Tools: Autopsy, FTK, EnCase, Volatility, Wireshark Red Team Tools: Cobalt Strike, Empire, BloodHound, Mimikatz, Metasploit Frameworks &amp; Methodologies: MITRE ATT&amp;CK, OWASP Top 10, NIST 800-53, CIS Controls Scripting: Python, Bash, PowerShell Cloud Security: Azure, AWS, GCP (optional but preferred) Other: SIEM (Splunk, ELK, QRadar), EDR tools, Threat Intel platformsQualifications &amp; Experience<ul><li>Bachelor&rsquo;s or Master&rsquo;s in Computer Science, Cybersecurity, or a related field.</li><li>3&ndash;6 years of hands-on experience in penetration testing, incident response, or red teaming.</li><li>Strong knowledge of network protocols, system internals, and web technologies.</li><li>Familiarity with MITRE ATT&amp;CK, OWASP, and Kill Chain models.</li></ul>Job Type: Full-timeAbility to commute/relocate:<ul><li>&#305;stanbul: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>what is your monthly current salary?</li><li>what is your monthly expected salary?</li><li>what is your notice period?</li></ul>Education:<ul><li>Bachelor's (Preferred)</li></ul>Experience:<ul><li>Cybersecurity Engineer / Analyst (VAPT | DFIR | Red Team: 4 years (Required)</li></ul>

Cybersecurity Engineer / Analyst (VAPT | DFIR | Red Team | Posture Assessment)

Job SummaryThe SOC L1 Analyst is the first line of defense in cybersecurity operations. They are responsible for monitoring, detecting, and logging potential threats using security tools and alerting systems. The L1 Analyst performs initial triage and escalation of suspicious activity to higher levels.Key Responsibilities<ul><li>Monitor SIEM (Security Information &amp; Event Management) tools for alerts and anomalies.</li><li>Perform initial investigation and triage on security events.</li><li>Escalate confirmed or critical incidents to SOC L2.</li><li>Document incidents in ticketing systems (e.g., ServiceNow, JIRA).</li><li>Maintain logs and daily reports for incident trends.</li><li>Monitor firewalls, IDS/IPS, EDR, and antivirus systems for suspicious behavior.</li><li>Assist in phishing investigations and malware alert review.</li><li>Follow standard incident response playbooks.</li><li>Participate in shift-based 24/7 monitoring.</li></ul>Skills &amp; Knowledge<ul><li>Understanding of networking fundamentals (TCP/IP, DNS, ports, protocols).</li><li>Basic knowledge of Windows/Linux systems and security logs.</li><li>Familiarity with SIEM tools (e.g., Splunk, QRadar, Azure Sentinel).</li><li>Strong analytical and documentation skills.</li><li>Ability to work under pressure and escalate issues promptly.</li></ul>Education &amp; Certifications<ul><li>Diploma/Bachelor&rsquo;s in Cybersecurity, IT, or Computer Science.</li><li>Preferred: CompTIA Security+, EC-Council CSA, Microsoft SC-900 / SC-200, Cisco CyberOps Associate.</li><li>3 years of experience in cybersecurity or IT monitoring.</li></ul>Job Type: Full-timeAbility to commute/relocate:<ul><li>&#305;stanbul: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>what is your monthly current salary?</li><li>what is your monthly expected salary?</li><li>what is your notice period?</li></ul>Education:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Security Operation Centre L1: 3 years (Required)</li></ul>

Security Operation Centre L1

Job Summary We are seeking a skilled Network Security Engineer to join our dynamic team. The ideal candidate will be responsible for ensuring the security of our network infrastructure, implementing security measures, and responding to incidents. This role requires a deep understanding of network protocols, security standards, and the ability to analyze and mitigate vulnerabilities within our systems.Responsibilities<ul><li>Design, configure, and manage secure network architectures (LAN, WAN, and cloud) integrated with Cisco Umbrella Security solutions.</li><li>Implement and manage firewalls (Cisco ASA / FortiGate), IDS/IPS, and SIEM tools (Splunk, QRadar) for real-time threat detection and response.</li><li>Conduct regular security audits, penetration testing, and vulnerability assessments to identify and mitigate risks.</li><li>Develop and enforce network and cloud security policies in alignment with NIST and ISO 27001 frameworks.</li><li>Manage DNS-layer protection, secure web gateways, and threat intelligence through Cisco Umbrella.</li><li>Support incident response, investigation, and recovery to ensure minimal service disruption.</li><li>Collaborate with IT infrastructure teams to strengthen identity &amp; access management, patching, and endpoint protection.</li><li>Implement secure VPN, IPsec, and SSL/TLS encryption for data in transit.</li><li>Monitor network performance using SolarWinds, New Relic, or similar tools to maintain high availability and reliability.</li><li>Provide security guidance for cloud deployments (AWS, Azure, GCP) and virtualization environments (VMware, Hyper-V).</li><li>Stay current on emerging threats, Cisco Umbrella advancements, and global cybersecurity trends.</li></ul>Skills &amp; Qualifications:<ul><li>Strong understanding of computer networking concepts &ndash; routing (OSPF, BGP), TCP/IP, DNS, DHCP, and VPN technologies.</li><li>Hands-on experience with Cisco Umbrella, Cisco ASA, and Cisco Meraki for DNS-layer and network perimeter protection.</li><li>Familiarity with IDS/IPS, SIEM (Splunk, QRadar), and vulnerability management tools.</li><li>Knowledge of cloud-security principles, IAM, and secure integration across hybrid environments.</li><li>Proficiency with operating systems &ndash; Windows, Linux (Debian, CentOS, Ubuntu), and macOS.</li><li>Scripting knowledge (Python, Bash, PowerShell) for automation and configuration management.</li><li>Experience with DevSecOps tools such as Terraform, Ansible, or CI/CD pipelines for secure deployment workflows.</li><li>Understanding of compliance frameworks &ndash; PCI-DSS, COBIT, FedRAMP, and ISO 27001.</li><li>Strong analytical, problem-solving, and communication skills with attention to detail.</li></ul>Job Type: Full-timeAbility to commute/relocate:<ul><li>&#305;stanbul: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>what is your monthly current salary?</li><li>What is your monthly expected salary?</li><li>What is your notice period?</li></ul>Education:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Network Security Engineer (Cisco Umbrella): 3 years (Required)</li></ul>

Network Security Engineer (Cisco Umbrella)

Bybit TR

<div>
 
 
 Position Summary
 
 The Risk Analyst supports the Istanbul-based Risk Manager in identifying, analyzing, and mitigating risks across market, operational, and compliance domains.
 
 
 
 Based in Istanbul.
 
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Monitor risk indicators and prepare analysis reports.
 </li>
 <li>
 Conduct risk assessments for market, fraud, and operational risks.
 </li>
 <li>
 Assist in the operation and maintenance of risk monitoring systems.
 </li>
 <li>
 Support the preparation of reports for senior management.
 </li>
 <li>
 Contribute to risk awareness and training initiatives.
 </li>
 </ul>
 
 
 Requirements
 
 
 <ul>
 <li>
 2&ndash;4 years of experience in risk management, ideally within financial services or crypto.
 </li>
 <li>
 Strong analytical and problem-solving skills.
 </li>
 <li>
 Familiarity with risk monitoring systems or financial data tools.
 </li>
 <li>
 Strong communication and reporting ability (Turkish and English).
 </li>
 </ul>
 
 
</div>

Risk Analyst

Overview We are seeking a skilled Splunk Engineer with strong administration and operational experience to design, implement, and maintain Splunk infrastructure and analytics solutions. The ideal candidate will have hands-on expertise in Splunk Enterprise / Enterprise Security (ES), data onboarding, dashboard creation, alert tuning, and system administration. This role bridges engineering, operations, and security analytics, ensuring Splunk runs optimally while delivering actionable insights.Key Responsibilities<ul><li>Design, deploy, and maintain Splunk environments (indexers, search heads, forwarders, deployment servers, cluster masters).</li><li>Create and optimize SPL queries, dashboards, reports, and alerts for operational visibility and threat detection.</li><li>Develop and automate data onboarding pipelines from diverse sources (syslog, cloud, API, EDR tools).</li><li>Integrate Splunk with SIEM/SOAR platforms, cloud services (AWS, Azure, GCP), and endpoint security tools.</li><li>Support use case development for security monitoring and compliance (SOC, IT Ops, or DevOps).</li><li>Perform installation, configuration, and upgrade of Splunk components.</li><li>Manage user roles, authentication, and access control (RBAC).</li><li>Monitor system health, indexing performance, and data retention policies.</li><li>Handle license management, data optimization, and troubleshooting.</li><li>Conduct backup, recovery, and disaster recovery planning for Splunk infrastructure.</li></ul>Security &amp; Operations<ul><li>Collaborate with SOC Analysts to build and tune correlation searches.</li><li>Ensure data integrity, confidentiality, and compliance with security standards (SOC 2, ISO 27001, NIST).</li><li>Participate in incident response and threat analysis leveraging Splunk dashboards.</li><li>Automate repetitive tasks using scripts (Python, Bash, PowerShell) and APIs.</li></ul>Required Skills &amp; Qualifications<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field.</li><li>3+ years of experience in Splunk engineering or administration.</li><li>Proficiency in Splunk Enterprise / ES, SPL scripting, and data onboarding.</li><li>Experience managing Splunk clusters, indexing, and search head configurations.</li><li>Strong understanding of log parsing, data normalization, and regex extractions.</li><li>Familiarity with Linux/Windows administration and network security concepts.</li><li>Experience with security frameworks (NIST, MITRE ATT&amp;CK, SOC2, PCI-DSS).</li><li>Scripting skills in Python, Shell, or PowerShell.</li><li>Excellent problem-solving and analytical skills.</li></ul>Preferred Qualifications<ul><li>Splunk Certifications:</li><li>Splunk Core Certified Power User</li><li>Splunk Enterprise Certified Admin</li><li>Splunk Enterprise Security Certified Admin</li><li>Knowledge of cloud-based Splunk (Splunk Cloud, AWS, Azure integrations).</li><li>Experience working in a Security Operations Center (SOC) environment.</li></ul>Job Type: Full-timeAbility to commute/relocate:<ul><li>&#305;stanbul: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>what is your monthly current salary?</li><li>what is your monthly expected salary?</li><li>what is your notice period?</li></ul>Education:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Splunk Engineer: 4 years (Required)</li></ul>

Splunk Engineer

GlassHouse Türkiye

<div>
 
 
 
 About Us
 
 
 
 
 
 
 
 We support our customers in their digitalization journey with our deep technical expertise.
 
 
 GlassHouse (and e&amp; Enterprise owned company) has a rapidly growing business, and it has many opportunities with its dynamic &amp; energetic environment. We have offices in &Idot;stanbul, Ankara, &Idot;zmir, South Africa and Qatar.
 
 
 Come to join us!
 
 
 We are looking for a &ldquo;Cyber Security Consultant&rdquo; to be assigned to the Operations Directorate.
 
 
 
 
 
 
 
 Responsibilities
 
 
 
 
 
 
 <ul>
 <li>
 Ensure Network &amp; Security products are current; proactively plan and roll out new technologies.
 </li>
 <li>
 Design, deploy, and operate
 
 L4&ndash;L7 Load Balancing
 
 (Citrix ADC/NetScaler, F5, NGINX): VIPs, health checks, persistence, content switching,
 
 GSLB, SSL offload/mTLS,
 
 rate limiting.
 </li>
 <li>
 
 Own the WAF lifecycle
 
 : positive/negative models, signatures &amp; learning, bot mitigation, API/JSON profiles, virtual patching, false-positive tuning &amp; exception management.
 </li>
 <li>
 Manage end-to-end installation, configuration, hardening, and maintenance of PAM, DLP, and SIEM solutions.
 </li>
 <li>
 Run vulnerability assessments, identify gaps, and drive remediation with clear owners and timelines.
 </li>
 <li>
 Translate customer requirements into tailored, standards-aligned solutions; support with HLD/LLD documentation.
 </li>
 <li>
 Ensure compliance with security
 
 policies and standards (ISO 27001, NIST, OWASP)
 
 across all implementations.
 </li>
 <li>
 Monitor security advisories and CVEs, plan and execute patch/upgrade actions (incl. HA/rollback planning) and stakeholder comms.
 </li>
 <li>
 Produce clear reports; maintain up-to-date topology diagrams, runbooks, dashboards and change logs.
 </li>
 <li>
 Integrate LB/WAF/PAM/DLP telemetry with SIEM, build dashboards/use-cases and support incident response.
 </li>
 </ul>
 
 
 
 
 
 
 Qualifications
 
 
 
 
 
 
 <ul>
 <li>
 7+ years in IT (preferably Network &amp; Cyber Security).
 </li>
 <li>
 3+ years hands-on with ADC/WAF in production (Citrix ADC/NetScaler, F5, NGINX; AppFirewall/ASM/ModSecurity/cloud WAF).
 </li>
 <li>
 Proven expertise in Load Balancers
 
 (Citrix ADC/NetScaler 13.1/14.1, F5, or NGINX)
 
 and L4&ndash;L7 operations.
 </li>
 <li>
 Hands-on experience with
 
 DLP, PAM, and SIEM
 
 platforms.
 </li>
 <li>
 Solid routing/switching project delivery (
 
 OSPF/BGP, STP/VLAN, QoS
 
 ).
 </li>
 <li>
 Design, deployment, and operations experience across
 
 LAN, WAN, WLAN, VXLAN, SDN
 
 .
 </li>
 <li>
 Strong analytical thinking; decisive, result-oriented; excellent communication, follow-up and reporting skills.
 </li>
 <li>
 Experience in log analysis and incident management;
 
 L4&ndash;L7 troubleshooting (TCP/IP, HTTP/1.1/2, TLS, headers/cookies)
 
 .
 </li>
 <li>
 Team-oriented with strong communication and collaboration abilities.
 </li>
 <li>
 
 Scripting/automation
 
 with
 
 PowerShell, Bash, or Python
 
 ;
 
 Ansible / REST (Nitro)
 
 experience is a plus.
 </li>
 <li>
 Familiarity with
 
 SSL/TLS/PKI
 
 and certificate lifecycle;
 
 AD/LDAP/RADIUS
 
 and
 
 SIEM integrations
 
 .
 </li>
 <li>
 Good command of English
 </li>
 </ul>
 
 
</div>

Cyber Security Consultant

Explore 223+ Security analyst in Istanbul this November. Find roles across top companies and apply now to boost your career.