Senior Application Security Architect

Turk Telekom Grubu

• We are looking for an Application Security Architect who will be mainly responsible for developing and enhancing secure SDLC for Turk Telekom Group. He/She will create check lists and develop tools for secure architecture principles/templates, design reviews and threat analysis. He/She will conduct secure design and coding trainings for IT-Architects and developers, perform web and mobile application penetration tests and support during vulnerability fixing processes. He/She is expected to be involved in security research as well and be active within Ethical Hacking conferences as a speaker. Candidates with OSCP certificate are preferred.

İŞ TANIMI

• Graduated from Computer/Electrical/Electronics Engineering or related fields,
• Minimum 5 years of experience in application security area,
• Advanced knowledge of Secure SDLC methodologies (e.g. OpenSAMM, BSIMM, Microsoft SDL),
• Advanced knowledge of application security, application hacking and vulnerability fixing,
• Advanced knowledge of OWASP methodologies and tools,
• Practical experience with threat analysis and secure design principles,
• Practical experience in penetration testing (OSCP certificate is a plus),
• Preferably development and programming experience in enterprise software
• Knowledge of Mobile Security is a plus,
• Experience as a Security Trainer is a plus,
• Fluency in English both written and spoken,
• Good technical writing, documentation and presentation skills,
• S/he should have the quality to build effective relationships with all levels of professionals in matrix organization structure of a corporate environment of the company, from partner companies, vendors and customers,
• No military obligation for male candidates,