Cyber Security Specialist

Tüpraş

Tüpraş is looking for a Cyber Security Specialist for Cyber Security and Risk Department located in Head Office, Körfez/Kocaeli 

QUALIFICATIONS 

• Bachelor degree or above in the field of information systems and technologies, engineering, MIS, other technical departments

• Strong understanding of information security principles, practices and frameworks 

• Good verbal and written English communication skills 

• Being an Agile minded team player, having good communication skills 

• Passionate for cyber security technology and trends 

• Motivated for strong problem solving, proactive and analytical skills 

• Minimum 5 years of experience in relevant positions 

• Strong understanding of Cyber Security areas and IT/OT system/network security architecture 

• Knowledge and experience in cyber-attack intervention 

• Familiarity with NIST, SANS and other related security frameworks 

• Strong understanding of application and infrastructure vulnerabilities, automated/manual testing and remediation techniques 

• Experience with vulnerability assessment tools such as Nessus, Qualys and IBM Appscan etc. 

• Experienced in building, deploying, and administering security tools and products, including SIEM, URL Filtering, Firewall, IPS/IDS, Vulnerability Scanners, EDR, Sandbox etc. 

• Knowledge of new security trends (security analytics, SOAR, AI, Elastic search, UEBA, Cyber intelligence service etc.) 

• Knowledge and experience in system, network and database log formats, log management & correlation, and use cases 

• Knowledge of Security Incident Response, Offensive Security, database security • Preferably having related certifications (CISSP, GICSP, GPEN, OSCP, CEH etc.) 

• Preferably knowledge of scripting (python, PowerShell etc.) 

• Preferably knowledge of SAP security 

• For male candidates, military service must be completed or postponed for at least two years 

JOB DESCRIPTION 

• Responsible for the operation and management of network and system security products 

• Responsible for periodically scans regarding system and network vulnerabilities and following up results 

• Design and implement IT/OT security systems and tools with referenced to required security architecture and industrial standards 

• Work closely with other internal and/or external teams/vendors to provide security consultancy and to define security architectures/designs for their initiatives and projects 

• Research and follow new security technologies 

• Perform POC works to determine change opportunity and innovation 

• Develop value-added recommendations for the identified cyber risks and threats 

• Monitor cyber security alarms, take actions and if needed escalate the data security breaches to the related department (IPS/IDS, Proxy, DLP, database activity monitor, EDR etc.) 

• Establish cyber security related standards, track compliance status of them 

• Responsible for recommendations involving the selection and deployment of 3rd party cyber security products 

• Plan and organize pen-test requirements, identify the scope of pen-tests and participate in fieldwork of pen-tests • Create and manage cyber security incident response and SOC processes 

• Develop UBA based smart correlation rules, dashboards 

• Monitor data, active channels, trends, and use cases on SIEM tools to identify threats and security events