Application Security Engineer

İKTİSAT KATILIM BANKASI

We are looking for an “Application Security Engineer” to join our Information Security Department.

At İktisat Participation Bank, we are committed to creating sustainable and fair value for our stakeholders while advancing our vision of being a pioneering and innovative participation bank.

If you are looking to make a meaningful impact, take the next step in your career, and become part of a dynamic and fast-growing organization, we would be delighted to receive your application.

We look forward to welcoming you to our team.

Responsibilities

• Bachelor’s or Master’s degree in Computer Engineering, Software Engineering, Industrial Engineering, Mathematics, Electrical and Electronics Engineering, or related fields from a university,
• At least 2 years of experience in the relevant field within the banking sector,
• Perform application security testing (SAST, DAST, SCA)
• Identify and remediate application vulnerabilities
• Integrate security into SDLC processes
• Conduct code reviews from a security perspective
• Support secure coding practices across development teams
• Work closely with developers to fix security issues
• Perform penetration testing on web and mobile applications
• Analyze findings and provide remediation guidance
• Perform threat modeling for applications

Qualifications

• Experience in application security or software security
• Knowledge of OWASP Top 10 vulnerabilities
• Experience with SAST/DAST tools (Checkmarx, Burp Suite etc.)
• Knowledge of secure coding principles
• Experience with web technologies (HTTP, REST APIs)
• Knowledge of at least one programming language (Java, .NET, Python etc.)
• Familiarity with CI/CD pipelines
• Understanding of authentication and authorization mechanisms