senior red team engineer

automation engineer

cybersecurity soc analyst

offensive security engineer - vulnerability management Jobs in Ankara

offensive security engineer - vulnerability management

security software engineer Jobs in Ankara

security software engineer

security engineer

BEDI Partnerships

<div><div><h3 class="jobSectionHeader"><b>Join Udemy. Help </b><b>define</b><b><i> </i></b><b>the future of learning.</b></h3>
<p>
Udemy is an AI-powered skills acceleration platform built to help people and teams grow. It's personalized, practical, and focused on real-world impact.</p>
<p>
Our mission is simple: to transform lives through learning. Your work helps people around the world build skills they can use, whether they're picking up something new or leveling up to stay ahead.</p>
<p>
Over 80 million learners and 17,000 businesses already learn with Udemy. If you're excited by change, energized by learning, and ready to have a real impact, you'll feel right at home.</p>
<p>
Learn more about us on our company page.</p></div><p>
 <b>Where we work</b></p>
<p>
Udemy is a global company headquartered in San Francisco, with additional U.S. offices in Denver and Austin, and international hubs in Australia, India, Ireland, Mexico, and T&uuml;rkiye. <i>This is an in-office position, requiring three days a week in the office (Tuesday, Wednesday, Thursday) and flexibility on Mondays and Fridays</i>.</p>
<p><b>
About your skills</b></p>
<ul>
<li><p><b>High Performance:</b> You should have the ability to take on tasks and complete them to a high standard, As a Senior Security Engineer you will help shape the standard and pace for the rest of the team</p>
</li>
<li><p><b>Technical Expertise:</b> Your ability to understand, operate and learn current and new technologies is a vital part of your role in order to continuously improve our operational output</p>
</li>
<li><p><b>Team Player:</b><b> </b>Being a Team Player is core to how we operate, Understanding the importance of teamwork is one of the driving factors to our team's success.</p>
</li>
<li><p><b>Communication: </b>Working in a global team means that open communication is essential to moving forward as a function and as a team.</p><br>
</li>
</ul><p><b>About You</b></p>
<p>
We seek a skilled and enthusiastic Senior Security Engineer to join the Security Operations team to enhance the organization's security posture. You will play a hands-on role in maintaining and improving the security on the platform, business systems, data and infrastructure. Conducting risk assessments and implementing security measures to reduce vulnerabilities, you thrive in a fast-paced environment and excel at solving complex security challenges. Ability to work independently and collaboratively with the Global Customer Operations, IT and Engineering and more</p><br>
<p></p>
<p><b>
About this role</b></p>
<ul>
<li><p>Increase visibility of the security presence across multi-layer audiences and operate with teams across multiple departments.</p>
</li>
<li><p>Aligning security standards across our product development and systems by utilizing industry best practices and fostering a security culture throughout the organization</p><br>
</li>
</ul><p><b>What you'll be doing</b></p>
<ul>
<li><p>Investigate, analyze, and respond to security events and incidents, ensure timely remediation, conduct forensics analysis and clear documentation.</p>
</li>
<li><p>Participate in on-call rotation and BugBounty programmes to strengthen the business's security posture.</p>
</li>
<li><p>Working with vendors and internal tooling for continuous improvement</p>
</li>
<li><p>Collaborating with cross functional teams across all vulnerability assessments</p>
</li>
<li><p>Utilize AI to improve product security and hygiene.</p>
</li>
<li><p>Familiar with the leading industry regulations and frameworks (e.g., GDPR, SOC2 , ISO-27001) to ensure we continuously meet compliance requirements across all domains in our function.</p><br>
</li>
</ul><p><b>What you'll have</b></p>
<ul>
<li><p>4+ years of industry experience in Information Security, specifically<br>
Incident Response, Threat Intelligence and Vulnerability Management, DLP and Phishing</p>
</li>
<li><p>Proficient in security technologies such as SIEM/SOAR, EDR, IDS/IPS</p>
</li>
<li><p>Hands-on experience with AWS Infrastructure,Terraform Automation and GitHub</p>
</li>
<li><p>Excellent verbal and written communication skills</p>
</li>
<li><p>Strong knowledge of security concepts for threat hunting, analysis, anomaly detection rules, risk-based threats and vulnerability analysis</p>
</li>
<li><p>Knowledge of modern authentication mechanisms (MFA, SSO, OAuth, Passwordless)</p>
</li>
</ul><div><h3 class="jobSectionHeader"><b>Why work here?</b></h3>
<p><b>
You'll grow here.</b><br>
Learning is part of the job. You'll get full access to Udemy courses, a monthly UDay to invest in yourself, and a budget to spend on whatever helps you improve. Many people are diving into AI lately, but what you focus on is up to you.</p>
<p><b>
AI is real here.</b><br>
We use it in the way we learn and the way we work. You'll have the space and tools to experiment, apply, and get better at using AI in practical ways.</p>
<p><b>
You'll own your work.</b><br>
We trust people to lead, make decisions, and follow through. You don't need to wait for permission or layers of approval to have an impact.</p>
<p><b>
You'll build with others.</b><br>
We collaborate openly and shape ideas together. Everyone has a voice, and good thinking is welcomed from any direction.</p>
<p><b>
You'll see your impact.</b><br>
What you build helps people grow their skills, change their careers, or find a path forward. You've got the experience, why not use it to help others gain theirs?</p>
<p><i>
Bring your curiosity. We'll bring the platform and the support. Let's </i><b><i>LEARN</i></b><i> together.</i></p>
<h3 class="jobSectionHeader"><b>
Our Benefits Start with U</b></h3>
<p>
Our benefits start with you and were built to provide you and your family with the protection and care you need, making it easy to access the right coverage when you need it most. Benefits vary by region, and we encourage applicants to review our Australia Benefits, India Benefits, Ireland Benefits, Mexico Benefits, Turkiye Benefits &amp; US Benefits, pages to get an understanding of some of the benefits we offer. For details on region-specific benefits, please refer to the information provided during the hiring process.</p>
<div>
<div><div><div><div><div><div><div><i>Benefits outlined are provided as a general overview and may vary depending on the location, role, and employment classification. All benefits are subject to change at the discretion of the organization and in accordance with applicable laws and policies.</i></div>
<div>
<p>At Udemy, we value diversity and inclusion and consider qualified applicants without regard to race, color, religion, sex, national origin, ancestry, age, genetic information, sexual orientation, gender identity, marital or family status, veteran status, medical condition, or disability. We understand that not everyone will match each of the qualifications. However, we also realize that everyone has unique experiences that can add value to our company. Even if you think your background might not perfectly align, we'd love to hear from you!</p>
</div>
</div></div></div></div></div></div></div><p><b><i>Information regarding data privacy is available within the</i></b><b><i> Udemy Careers Privacy Notice</i></b><b><i>.</i></b></p></div></div>

Senior Security Engineer

Trendyol

<div><div><div><b>ABOUT THE TEAM</b></div><div></div><div><br>
We&rsquo;re shaping the future of financial technology at Trendyol.</div><div>
As Trendyol&rsquo;s technology teams, we&rsquo;re not only building for today we&rsquo;re designing the financial experiences of tomorrow. From payment infrastructure and digital wallets to smart credit systems and personalized financial services, we create solutions that empower millions of users across our ecosystem.</div><div>
With Trendyol Pay, we enable fast, secure, and seamless payment journeys. Through Trendyol Finance, we develop inclusive and accessible products that simplify financial decisions.</div><div></div><div><br>
We are united by a shared purpose:To create a positive impact in our ecosystem by enabling commerce through technology</div><div></div><div><b><br>
About the Role</b></div><div>
As a Security Engineer focused on Exposure Management, you will identify, analyze, and reduce the organization&rsquo;s attack surface across cloud, on-prem, and SaaS environments. You will detect exposures and misconfigurations using offensive-security techniques, prioritize them with attacker-driven context, and map likely attack paths. Working closely with Infra, SOC, Red Team, DevOps, and IT Ops, you will support accurate asset inventory, provide clear remediation guidance, and contribute to all phases of the CTEM lifecycle. The role includes hands-on validation, limited exploitation, automation, and continuous monitoring of global threat trends.</div></div>
<div><div><h3 class="jobSectionHeader"><b>Responsibilities</b></h3><ul><li><ul><li>
Enumerate, correlate and track the organization&rsquo;s attack surface across hybrid infrastructure (cloud, on-prem, multi-dc, saas, etc.).</li><li>
Detect exposures, misconfigurations, ownerless assets, and control gaps using tools and offensive mindset.</li><li>
Collaborate with infrastructure teams to ensure accurate asset inventory, tagging and zone health.</li><li>
Apply attacker-centric prioritization using EPSS, KEV, CVSS contextualization, TI feeds, exploit availability and real world threat actor TTPs.</li><li>
Utilize insights to map exposures and likely attack paths.</li><li>
Participate in the full Continuous Threat Exposure Management (CTEM) lifecycle (Scoping, Discovery, Prioritization, Validation, Mobilization) design and improve current processes according to organization&rsquo;s needs and global standards.</li><li>
Perform validation through PoC exploitation, manual verification, exploit research, and misconfiguration abuse.</li><li>
Support remediation teams by providing actionable, reproducible, business-aware remediation and mitigation guidance.</li><li>
Be aware of regulatory audit and compliances (e.g. ISO 27001, PCI-DSS, SOX, GDPR, KVKK, etc.) and knowledgeable about the requirements of these processes, supporting organizational needs when necessary within our scope of business.</li><li>
Develop automation scripts to enhance discovery, validation and reporting processes.</li><li>
Continuous monitoring of global security risks trends to proactively eliminate gaps in our organization.</li></ul></li></ul></div></div>
<div><div><h3 class="jobSectionHeader"><b>Expected Qualifications</b></h3><ul><li><ul><li>
Minimum 4 years hands on experience in offensive security, vulnerability management, or exposure management.</li><li>
Deep understanding of attacker mindset, how exposures translate into real attack paths.</li><li>
Solid experience with vulnerability scanners, attack surface tools, BAS platforms, cloud security, EDR/XDR and SIEM/SOAR.</li><li>
Strong grasp of networking, operating systems, identity systems, cloud primitives and security controls.</li><li>
Ability to validate and prioritize vulnerabilities manually and perform limited exploitation when needed.</li><li>
Experience building dashboards, reports and risk scoring.</li><li>
Experience contributing to CTEM framework design or exposure scoring models.</li><li>
Fluent in preferred coding language for automation &amp; integration purposes (e.g. python),</li><li>
Strong analytical and problem-solving skills.</li><li>
Eagerness on self-improvement, open-minded, future-oriented.</li><li>
Excellent communication skills - able to explain technical exposure in business-impact language.</li><li>
Highly collaborative with SOC, Threat Hunting, Red Team, DevOps and IT Ops.</li><li>
Good command of written and spoken English.</li><li>
Relevant certification(s) in the offensive security field (CEH, OSCP, eCPPT, OSWE, CRTO, etc.)</li></ul></li></ul></div></div>
<div><div>Follow Trendyol on LinkedIn; <b>Trendyol Tech</b> on Youtube and Medium!</div><div></div><div><b><br>
What We Offer</b></div><div><b>
A hybrid working model with flexibility &mdash;</b> a schedule that helps you find the right balance between flexibility and team bonding, including work-from-abroad opportunities and a summer working model.</div><div><b>
A customizable FlexBenefits budget &mdash;</b> Adjust your daily meal allowance, choose your health insurance package (and extend it to your spouse or children), and pick from additional benefits like fuel support or Trendyol shopping credits.</div><div><b>
Comprehensive wellbeing support &mdash; </b>Take advantage of our extended health package, which includes annual mini health screenings, access to location-based in-house doctors, psychologist and dietitian support, and HPV vaccination coverage.</div><div><b>
Personalized training allowance and learning opportunities &mdash;</b> Use your annual budget for any training or conference of your choice, explore our Learning Management System (LMS) anytime, and join in-person learning sessions offered throughout the year.</div><div><b>
Responsibility from day one &mdash; </b>Take full ownership from the start in a culture where every voice is heard and valued.</div><div><b>
A diverse, international team &mdash; </b>Collaborate with global peers across our offices in Berlin, Amsterdam, Dubai, and beyond, in a startup-spirited and collaborative environment.</div><div><b>
Opportunities to grow with the best &mdash;</b> Tackle meaningful challenges, develop through hands-on experience, and grow with the support of expert guidance and global mentoring.</div><div><b>
Meaningful connections beyond tasks &mdash;</b> Be part of team rituals, events, and social activities that help us stay connected and inspired.</div><div></div><div><b><br>
Take the Next Step</b></div><div>
If this role excites you, apply now and let&rsquo;s take the next step together.</div><div>
Want to get to know the team better first? Explore our Career Website, LinkedIn, or YouTube to learn more about #LifeatTrendyol and how we work.</div></div></div>

Offensive Security Engineer - Vulnerability Management

Canonical

<div>
 Canonical is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform, Ubuntu, is widely used in breakthrough enterprise initiatives such as public cloud, data science, AI, engineering innovation, and IoT. Our customers include the world's leading public cloud and silicon providers, and industry leaders in many sectors. The company is a pioneer of global distributed collaboration, with 1200+ colleagues in 75+ countries and very few office-based roles. Teams meet two to four times yearly in person, in interesting locations around the world, to align on strategy and execution.
 <br/>
 <br/>
 The company is founder-led, profitable, and growing.
 <br/>
 <br/>
 Canonical is looking for exceptional security-focused software engineers to be integrated across product teams. While they also contribute to the product as engineers, their primary focus is to challenge the entire team to think more deeply about security through state-of-the-art practices such as threat modeling, table-top exercises, architecture and design reviews, static analysis tools, and fuzzing, among others.
 <br/>
 <br/>
 These roles encompass all aspects of product security, including feature development, vulnerability response, proactive security, and open source community participation. Engineers in these roles collaborate closely with other Canonical teams, customers, and partners across the open source ecosystem.
 <br/>
 <br/>
 Each product engineering team at Canonical reserves one or two openings for security-oriented software engineers. We also develop a number of products driven entirely by security needs, such as our AppArmor kernel investments and the Ubuntu Security Guide (USG). As the publisher of Ubuntu, we also handle long-term security response for the entire operating system and open source ecosystem. Working with tens of thousands of upstreams means that we need to be fluent in every major programming language and design, build, and adopt sophisticated tools that enable us to work at scale and speed with confidence.
 <br/>
 <br/>
 Apply here if you are an exceptional security-focused software engineer, passionate about open source, and excited by Canonical's products and mission.
 <br/>
 <br/>
 This role requires the ability to be productive in a globally distributed team through strong self-discipline and motivation. It also involves mandatory international travel at least twice a year, typically for one week.
 <br/>
 <br/>
 Location: Worldwide, this is a globally remote role
 <br/>
 <br/>
 What you'll do
 <br/>
 <br/>
 Security roles might tackle any of the following:
 <br/>
 <br/>
 <ul>
  <li>
   Define, implement, and document new security features
  </li>
  <li>
   Lead security-focused initiatives within a product engineering team
  </li>
  <li>
   Analyze, fix, and test vulnerabilities in open source software
  </li>
  <li>
   Contribute to Ubuntu and upstream open source projects to benefit the community
  </li>
  <li>
   Audit and analyze source code for vulnerabilities
  </li>
  <li>
   Integrate new tools into our security infrastructure, pipelines, and processes
  </li>
  <li>
   Achieve and retain various security certifications
  </li>
  <li>
   Extend and enhance Linux cryptographic components to meet country-specific compliance requirements, such as FIPS and Common Criteria (CC) certifications
  </li>
  <li>
   Work with external partners to develop Center for Internet Security (CIS) benchmarks
  </li>
  <li>
   Design and develop hardening automation for Ubuntu
  </li>
  <li>
   Stay up to date with trends and developments in the security industry
  </li>
  <li>
   Develop, test, and maintain new software capabilities
  </li>
  <li>
   Provide guidance and support to other engineering teams on security best practices
   <br/>
   <br/>
  </li>
 </ul>
 What we are looking for in you
 <br/>
 <br/>
 <ul>
  <li>
   An exceptional academic track record from both high school and university
  </li>
  <li>
   Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
  </li>
  <li>
   A track record of going above and beyond expectations
  </li>
  <li>
   Thorough understanding of the common categories of security vulnerabilities and how to fix them
  </li>
  <li>
   Knowledge of modern software engineering techniques
  </li>
  <li>
   Familiarity with open source development tools and methodologies
  </li>
  <li>
   Skill in one or more of C, C++, Python, Go, Rust, Java, Ruby, PHP, or JavaScript/Typescript
  </li>
  <li>
   Experience as a security champion
  </li>
  <li>
   Experience driving security within a wider SSDLC process
  </li>
  <li>
   Professional written and spoken English
  </li>
  <li>
   Experience with Linux (Debian or Ubuntu preferred)
  </li>
  <li>
   Excellent interpersonal skills, curiosity, flexibility, and accountability
  </li>
  <li>
   Passion, thoughtfulness, and self-motivation
  </li>
  <li>
   Excellent communication and presentation skills
  </li>
  <li>
   Results-oriented, with a personal drive to meet commitments
   <br/>
   <br/>
  </li>
 </ul>
 Optional skills we also value
 <br/>
 <br/>
 <ul>
  <li>
   Clear and effective communication with both the team and Ubuntu community members
  </li>
  <li>
   Experience working with the Linux kernel
  </li>
  <li>
   Experience with security certifications and knowledge of FIPS and/or Common Criteria (CC)
  </li>
  <li>
   Experience with OVAL (Open Vulnerability Assessment Language)
  </li>
  <li>
   Knowledge of cryptographic modules such as OpenSSL and Libgcrypt
  </li>
  <li>
   Knowledge of low-level Linux cryptography APIs
  </li>
  <li>
   Demonstrated ability to learn quickly
  </li>
  <li>
   Performance engineering experience
   <br/>
   <br/>
  </li>
 </ul>
 What we offer you
 <br/>
 <br/>
 We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognize outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
 <br/>
 <br/>
 <ul>
  <li>
   Distributed work environment with twice-yearly team sprints in person
  </li>
  <li>
   Personal learning and development budget of USD 2,000 per year
  </li>
  <li>
   Annual compensation review
  </li>
  <li>
   Recognition rewards
  </li>
  <li>
   Annual holiday leave
  </li>
  <li>
   Maternity and paternity leave
  </li>
  <li>
   Employee Assistance Programme
  </li>
  <li>
   Opportunity to travel to new locations to meet colleagues
  </li>
  <li>
   Priority Pass, and travel upgrades for long haul company events
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  About Canonical
  <br/>
  <br/>
 </strong>
 Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
 <br/>
 <br/>
 Canonical is an equal opportunity employer
 <br/>
 <br/>
 We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration.
 <br/>
 <br/>
</div>


Security Software Engineer

<div><p><b>Would you like to join the leading international intergovernmental organization?</b><br>
<br>
Allied Command Transformation (ACT) is NATO&rsquo;s leading agent for change: driving, facilitating, and advocating the continuous improvement of Alliance capabilities to maintain and enhance the military relevance and effectiveness of the Alliance.</p><p>
We are looking for a passionate DevSecOps engineer who will provide remote support to ACT's digital modernization initiatives, with a focus on building resilient, secure, and scalable applications across our client's hybrid and cloud environments. Responsibilities include deploying and operating containerized applications, automating infrastructure through Infrastructure as Code, and implementing observability practices to ensure reliability and performance. The role requires close adherence to cybersecurity and zero-<br>
trust principles, as well as integration of compliance automation and modern service mesh technologies. The engineer will deliver incremental capabilities in agile environments and collaborate with stakeholders to ensure that outputs meet the requirements for security, scalability, and operational readiness.</p><p><b><br>
Responsibilities:</b></p><ul>
<li>
Deploy and operate containerized services using orchestration frameworks to ensure scalability and resilience.</li>
<li>Automate infrastructure through Infrastructure as Code (IaC) to provide consistent and repeatable environments.</li>
<li>Deploy and monitor workloads in cloud environments (AWS, Azure, Google Cloud, VMware, OpenStack).</li>
<li>Implement site reliability engineering (SRE) and observability practices to ensure resilience, monitoring, logging, metrics, and distributed tracing.</li>
<li>Support high-throughput and service-oriented architectures, ensuring resilient and scalable deployments.</li>
<li>Deliver incremental capabilities in Agile and DevSecOps environments following frameworks such as Scrum, SAFe, or Kanban.</li>
<li>Design and manage secure networking and service meshes (TLS, Istio, Linkerd, API gateways) to ensure encrypted and reliable service-to-service communication.</li>
<li>Apply zero-trust principles and compliance automation to enforce security policies and validate system compliance.</li>
<li>Manage identity and access using secure methods for secrets, tokens, certificates, and least-privilege access control.</li>
</ul><p><b>
We are happy to hear from you if you have:</b></p><br>
<ul>
<li>
Minimum 4 years of experience with containerization and orchestration (Docker, Kubernetes, OpenShift).</li>
<li>Minimum 4 years of experience in designing and maintaining CI/CD pipelines with automated testing and security validation.</li>
<li>Experience with Infrastructure as Code (Terraform, Ansible, Helm, Pulumi).</li>
<li>Experience deploying and securing workloads in hybrid/public cloud environments (AWS, Azure, Google Cloud, VMware, OpenStack).</li>
<li>Experience implementing site reliability engineering and observability practices (Prometheus, Grafana, ELK/Loki, OpenTelemetry).</li>
<li>Experience implementing scalable, resilient, high-throughput systems and service-oriented architectures.</li>
<li>Experience delivering capabilities in Agile/DevSecOps environments (Scrum, SAFe, Kanban).</li>
<li>Experience designing and managing secure networking and service mesh (TLS, Istio, Linkerd, API gateways).</li>
<li>Experience applying zero-trust principles and compliance automation (OPA, Kyverno, SBOM, CIS benchmarks).</li>
<li>Experience managing secrets and access policies using modern IAM solutions (Vault, AWS KMS, Azure Key Vault, RBAC/ABAC).</li>
<li>Fluent English skills (verbal and written).</li>
<li>Bachelor&rsquo;s degree in Computer Science, Engineering, or a related field (or equivalent professional experience).</li>
<li><b>Willingness to work in EST time zone</b></li>
</ul><p>
If you've read the description and feel this role is a great match, we'd love to hear from you! Click &quot;Apply for this job&quot; to be directed to a brief questionnaire. It should only take a few moments to complete, and we'll be in touch promptly if your experience aligns with our needs.</p></div>

Senior DevSecOps engineer (EST timezone)

Picus

<div><div>Are you passionate about technology and enjoy explaining complex solutions in a way that everybody gets excited? If so, read on!</div><div></div><div><b><br>
About Picus</b></div><div>
Picus Security, the leading security validation company, gives organizations a clear picture of their cyber risk based on business context. Picus transforms security practices by correlating, prioritizing, and validating exposures across siloed findings so teams can focus on critical gaps and high-impact fixes. With Picus, security teams can quickly take action with one-click mitigations to stop more threats with less effort.</div><div></div><div><br>
The Picus Security Validation Platform easily reaches across on-prem environments, hybrid clouds and endpoints coupled with Numi AI to provide exposure validation.</div><div></div><div><br>
The pioneer of Breach and Attack Simulation, Picus delivers award-winning threat-centric technology that allows teams to pinpoint fixes worth pursuing, offering a 98% recommendation in Gartner Peer Review.</div><div></div><div><b><br>
About The Role</b></div><div>
If you&rsquo;re a results-driven person with an entrepreneurial mindset, who takes the initiative and thrives in a dynamic environment, then this is a great opportunity to play a pivotal role in a fast-growing cyber security company.</div><div></div><div><br>
As a Senior Red Team Engineer, you&rsquo;ll contribute to the development of automated penetration testing capabilities, focusing on real-world attack simulations, evasion techniques, and endpoint security challenges. This role requires strong technical expertise in offensive security and operating system internals.</div><div></div><div><br>
Picus is headquartered in Ankara, with a regional office in Istanbul, but our team is remote across T&uuml;rkiye. Please note that all CVs must be submitted in English.</div>
<h3 class="jobSectionHeader"><b>What You'll Do</b></h3><ul><li>
Design and implement automated penetration testing scenarios targeting operating systems and Domain Infrastructures,</li><li>
Develop and improve evasive offensive tools to simulate real-world adversarial tactics and techniques in users' environments,</li><li>
Conduct research on AI-powered automated attack simulation capabilities and create Proof of Concepts,</li><li>
Analyze and resolve complex technical challenges related to endpoint security products, including evasion, analysis, and compatibility issues.</li></ul><h3 class="jobSectionHeader"><b>
What You Have</b></h3><ul><li>
Proven experience in offensive tool development in low-level programming languages ,</li><li>
Strong hands-on expertise in evasion techniques,</li><li>
Deep understanding of OS Internals (Windows/Linux/MacOS) and Active Directory environments,</li><li>
Eagerness to grow in offensive tooling development and post-exploitation techniques,</li><li>
Contributions to the offensive security community, such as open-source projects or vulnerability advisories, will be a plus,</li><li>
Experience with exploit development and vulnerability research are strong plus,</li><li>
Strong debugging and reverse engineering skills are a strong plus,</li><li>
Proficiency in both written and spoken English.</li></ul><div><b>
Working at Picus</b></div><div>
Fascinating work - a chance to shape and lead an exciting, fast-growing cyber security segment. Security Validation is a concept that helps organizations evaluate their security posture in a continuous, automated, and repeatable way. This approach allows for the identification of imminent threats, provides recommended actions, and produces valuable metrics about cyber-risk levels.</div><div></div><div><br>
Unlimited opportunity! We are growing. At Picus, you'll be provided with as much responsibility as you can handle - new career development opportunities constantly arise given our rate of growth.</div><div></div><div><br>
Global exposure - Get a lot of experience working not only in a fast-growing startup but also interact with customers all around the world.</div><div></div><div><br>
Be part of a global remote team who is taking on Exposure Validation and a growing market segment.</div><div></div><div><br>
We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to age, sex, race, color, national origin, religious belief, gender or gender reassignment, sexual orientation, marriage or civil partnership, pregnancy and maternity, disability, protected veteran status, or any other characteristic protected by International law. Upon conditional offer of employment, candidates are required to complete reference and identity checks in line with local labor laws and as per the Company&rsquo;s employment policy.</div><div></div><p><br>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

Senior Red Team Engineer

Picus Security

<div>
 Are you passionate about technology and enjoy explaining complex solutions in a way that everybody gets excited? If so, read on!
 <br/>
 <br/>
 <strong>
  About Picus
  <br/>
 </strong>
 Picus Security, the leading security validation company, gives organizations a clear picture of their cyber risk based on business context. Picus transforms security practices by correlating, prioritizing, and validating exposures across siloed findings so teams can focus on critical gaps and high-impact fixes. With Picus, security teams can quickly take action with one-click mitigations to stop more threats with less effort.
 <br/>
 <br/>
 The Picus Security Validation Platform easily reaches across on-prem environments, hybrid clouds and endpoints coupled with Numi AI to provide exposure validation.
 <br/>
 <br/>
 The pioneer of Breach and Attack Simulation, Picus delivers award-winning threat-centric technology that allows teams to pinpoint fixes worth pursuing, offering a 98% recommendation in Gartner Peer Review.
 <br/>
 <br/>
 <strong>
  About The Role
  <br/>
 </strong>
 If you&rsquo;re a results-driven person with an entrepreneurial mindset, who takes the initiative and thrives in a dynamic environment, then this is a great opportunity to play a pivotal role in a fast-growing cyber security company.
 <br/>
 <br/>
 As a Senior Red Team Engineer, you&rsquo;ll contribute to the development of automated penetration testing capabilities, focusing on real-world attack simulations, evasion techniques, and endpoint security challenges. This role requires strong technical expertise in offensive security and operating system internals.
 <br/>
 <br/>
 Picus is headquartered in Ankara, with a regional office in Istanbul, but our team is remote across T&uuml;rkiye. Please note that all CVs must be submitted in English.
 <br/>
 <br/>
 <strong>
  What You'll Do
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Design and implement automated penetration testing scenarios targeting operating systems and Domain Infrastructures,
  </li>
  <li>
   Develop and improve evasive offensive tools to simulate real-world adversarial tactics and techniques in users' environments,
  </li>
  <li>
   Conduct research on AI-powered automated attack simulation capabilities and create Proof of Concepts,
  </li>
  <li>
   Analyze and resolve complex technical challenges related to endpoint security products, including evasion, analysis, and compatibility issues
   <br/>
   <br/>
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What You Have
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Proven experience in offensive tool development in low-level programming languages ,
  </li>
  <li>
   Strong hands-on expertise in evasion techniques,
  </li>
  <li>
   Deep understanding of OS Internals (Windows/Linux/MacOS) and Active Directory environments,
  </li>
  <li>
   Eagerness to grow in offensive tooling development and post-exploitation techniques,
  </li>
  <li>
   Contributions to the offensive security community, such as open-source projects or vulnerability advisories, will be a plus,
  </li>
  <li>
   Experience with exploit development and vulnerability research are strong plus,
  </li>
  <li>
   Strong debugging and reverse engineering skills are a strong plus,
  </li>
  <li>
   Proficiency in both written and spoken English
   <br/>
   <br/>
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Working at Picus
  <br/>
 </strong>
 Fascinating work - a chance to shape and lead an exciting, fast-growing cyber security segment. Security Validation is a concept that helps organizations evaluate their security posture in a continuous, automated, and repeatable way. This approach allows for the identification of imminent threats, provides recommended actions, and produces valuable metrics about cyber-risk levels.
 <br/>
 <br/>
 Unlimited opportunity! We are growing. At Picus, you'll be provided with as much responsibility as you can handle - new career development opportunities constantly arise given our rate of growth.
 <br/>
 <br/>
 Global exposure - Get a lot of experience working not only in a fast-growing startup but also interact with customers all around the world.
 <br/>
 <br/>
 Be part of a global remote team who is taking on Exposure Validation and a growing market segment.
 <br/>
 <br/>
 We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to age, sex, race, color, national origin, religious belief, gender or gender reassignment, sexual orientation, marriage or civil partnership, pregnancy and maternity, disability, protected veteran status, or any other characteristic protected by International law. Upon conditional offer of employment, candidates are required to complete reference and identity checks in line with local labor laws and as per the Company&rsquo;s employment policy.
 <br/>
 <br/>
 We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
</div>


<div><div>Are you passionate about technology and enjoy explaining complex solutions in a way that everybody gets excited? If so, read on!</div><div></div><div><b><br>
About Picus</b></div><div>
Picus Security, the leading security validation company, gives organizations a clear picture of their cyber risk based on business context. Picus transforms security practices by correlating, prioritizing, and validating exposures across siloed findings so teams can focus on critical gaps and high-impact fixes. With Picus, security teams can quickly take action with one-click mitigations to stop more threats with less effort.</div><div></div><div><br>
The Picus Security Validation Platform easily reaches across on-prem environments, hybrid clouds and endpoints coupled with Numi AI to provide exposure validation.</div><div></div><div><br>
The pioneer of Breach and Attack Simulation, Picus delivers award-winning threat-centric technology that allows teams to pinpoint fixes worth pursuing, offering a 98% recommendation in Gartner Peer Review.</div><div></div><div><b><br>
About The Role</b></div><div></div><div><br>
If you&rsquo;re a results-driven person with an entrepreneurial mindset, who takes the initiative and thrives in a dynamic environment, then this is a great opportunity to play a pivotal role in a fast-growing cyber security company. We are looking for a smart and driven leader to have a direct impact on the future of our business by helping to influence global adoption of our award-winning Picus Security Validation Platform. Picus Labs is a place for Cyber Security Innovation&mdash; In Picus Labs, we elevate offensive and defensive cyber security technologies.</div><div></div><div><br>
We're looking to grow our team to support the high growth and global expansion plans of Picus with developing new technologies. With this role, you'll get a chance to work for innovation. You will be constantly challenged and you will get to develop your knowledge and skills in cyber security technologies. This is an amazing opportunity where you get to research for a fast-growing cyber security startup. As a Senior Blue Team Engineer in Picus Labs, you will manage internal SOC processes, analyze new adversarial techniques and attacks developed by Picus Labs Red Team and develop threat detection &amp; hunting scenarios. You will research new threat detection &amp; hunting methodologies and technologies, onboard and iterate.</div><div></div><div><br>
Picus is headquartered in Ankara, with a regional office in Istanbul, but our team is remote across T&uuml;rkiye. Please note that all CVs must be submitted in English.</div>
<h3 class="jobSectionHeader"><b>What You&rsquo;ll Do</b></h3><ul><li>
Analyze, understand, and leverage public research on emerging cyber threats, detection methods and tools,</li><li>
Research and apply Continuous Threat Exposure Management (CTEM) methodologies by conducting thorough studies on best practices, then implement and continuously refine them to proactively identify, expose, and mitigate vulnerabilities in response to evolving threats,</li><li>
Research and develop hardening methodologies for cybersecurity defenses by analyzing best practices and frameworks,</li><li>
Deploy, configure, and manage endpoint security technologies, including XDR, EDR, SIEM, and EPP solutions, to evaluate their response to Picus Attack Scenarios,</li><li>
Design and develop both open-source and vendor-based threat detection scenarios,</li><li>
Utilize AI and data analysis techniques to create innovative cybersecurity solutions that enhance threat detection and response capabilities,</li><li>
Optimize detection rules to improve the accuracy and efficiency of threat detection, reducing false positives while enhancing the ability to identify cyber threats,</li><li>
Develop and maintain tools to support the Detection Development Life Cycle,</li><li>
Conduct research on new threat hunting methodologies, tools, and technologies to stay ahead of evolving threats,</li><li>
Onboard, configure, and maintain detection and hunting products (e.g., SIEM, EDR) to enhance security operations,</li><li>
Optimize internal SOC technologies and processes to improve threat detection and response capabilities,</li><li>
Utilize threat intelligence services and malware sandboxes to effectively hunt for and analyze emerging malware threats,</li><li>
Collaborate with Picus Labs Red Team for purple teaming exercises to improve defenses,</li><li>
Partner with engineering teams to contribute to the development and refinement of new product features.</li></ul><h3 class="jobSectionHeader"><b>
What You Have</b></h3><ul><li>
Hands-on experience in hunting current adversarial techniques,</li><li>
Experience with security monitoring, incident detection, and response in enterprise environments,</li><li>
Proficiency in scripting languages (e.g., Python, Bash) for automating tasks and improving processes,</li><li>
Strong threat detection and hunting knowledge,</li><li>
Strong SIGMA and YARA rule development knowledge,</li><li>
Hands-on experience in administering and using network security, SIEM and EDR technologies,</li><li>
Knowledge of Mitre ATT&amp;CK framework and threat intelligence services,</li><li>
Community contribution to defensive knowledge will be a plus. (Open source projects, etc.),</li><li>
A proactive mindset with a continuous learning attitude towards new security technologies and threats,</li><li>
Excellent communication skills to effectively interact with technical and non-technical teams,</li><li>
Proficiency in written English.</li></ul><div><b>
Working at Picus</b></div><div>
Fascinating work - a chance to shape and lead an exciting, fast-growing cyber security segment. Security Validation is a concept that helps organizations evaluate their security posture in a continuous, automated, and repeatable way. This approach allows for the identification of imminent threats, provides recommended actions, and produces valuable metrics about cyber-risk levels.</div><div></div><div><br>
Unlimited opportunity! We are growing. At Picus, you'll be provided with as much responsibility as you can handle - new career development opportunities constantly arise given our rate of growth.</div><div></div><div><br>
Global exposure - Get a lot of experience working not only in a fast-growing startup but also interact with customers all around the world.</div><div></div><div><br>
Be part of a global remote team who is taking on Exposure Validation and a growing market segment.</div><div></div><div><br>
We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to age, sex, race, color, national origin, religious belief, gender or gender reassignment, sexual orientation, marriage or civil partnership, pregnancy and maternity, disability, protected veteran status, or any other characteristic protected by International law. Upon conditional offer of employment, candidates are required to complete reference and identity checks in line with local labor laws and as per the Company&rsquo;s employment policy.</div><div></div><p><br>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

Senior Blue Team Engineer

Explore 54+ Security engineer in Ankara this December. Find roles across top companies and apply now to boost your career.

54 security engineer jobs IN Ankara

Senior Security Engineer

Offensive Security Engineer - Vulnerability Management

Security Software Engineer

Senior DevSecOps engineer (EST timezone)

Senior Red Team Engineer

Senior Red Team Engineer

Senior Blue Team Engineer