Cyber Security Architect, İstanbul | Koç Kariyerim

About Job

We are seeking a Cyber Security Architect who will protect our information assets, advance our security architecture, and take ownership of critical areas ranging from the design of cybersecurity processes to compliance and audit requirements.

Qualifications

• Bachelor’s degree (Computer Engineering, Information Systems, or related fields preferred)
• Minimum 5+ years of experience in Information Security and/or Cyber Security.
• Security expertise in Active Directory
• Hands-on experience with core security tools such as SIEM, Firewall, Remote Access, IPS/IDS, DLP, Web Application Firewall, PAM, Container Security, API Security, Cloud Security, IDM, XDR and Vulnerability Management
• Strong understanding of network and system fundamentals including Proxy, Load Balancer, TCP/IP, DNS, Active Directory, and VPN
• Experience in performing health checks and optimization of security solutions
• Ability to guide IT teams on critical technical issues with strong problem-solving and technical decision-making skills
• Experience contributing to the security architecture and controls of enterprise-level IT projects
• Knowledge of security standards and compliance frameworks such as SANS CIS, KVKK, and ISO 27001
• Strong written and spoken English for clear communication with all stakeholders
• Good understanding of penetration testing methods
• Practical experience in Windows, Linux, Network, and Application security hardening
• Knowledge of web applications and modern web technologies
• Preferably experience with penetration testing and security analysis tools (e.g., Nessus, OpenVAS, Burp Suite, etc.)
• Security certifications such as CISSP, CISA, CISM, CCSP, or ISO 27001 Lead Auditor are considered a valuable advantage.

• Manage and support DLP, PAM, IDM and SIEM processes
• Perform access management, MFA/SSO governance, and periodic access review processes
• Define log sources to be forwarded to the SIEM platform and review correlation rules; create and track improvement actions
• Establish quality standards for penetration testing activities
• Monitor security requirements across systems, infrastructure, applications, and development environments
• Provide recommendations for the remediation of audit findings, take an active role in technical follow-up activities, and ensure quality control
• Work with IT and business teams to integrate security requirements into infrastructure and project designs
• Support internal and external audit activities, including KVKK, SPK and ISO 27001 compliance processes
• Handle incident management, track Darkweb and threat intelligence sources, and guide IT teams with clear technical recommendations
• Provide technical consultancy to IT teams on security hardening for servers, clients, network infrastructure, and software development environments
• Follow emerging cyber threats and security trends and take necessary actions to mitigate information security risks
• Perform periodic reviews using security tools and applications.
• Work closely with infrastructure, system administration, and software development teams to design and maintain a secure-by-design architecture.