Information Security Specialist

Koç University Information Technology Directorate will be hiring an Information Security Specialist with the below-mentioned qualifications.

• Bachelor's degree, preferably in Computer Engineering, Software Engineering, Information Systems, Electrical-Electronics Engineering or related departments

• Minimum 2 years of experience in the information security / cyber security field

• Familiar with the CIS Controls framework or willing to learn it

• Knowledge and hands-on experience in penetration testing methodologies (OWASP, PTES, etc.) and vulnerability management processes

• Experienced in SIEM / log management and security event analysis

• Knowledge of Windows, Linux operating systems and basic network technologies

• Knowledge of scripting languages such as PowerShell, Python and Bash

• Experienced in creating technical documentation and reporting

• Analytical, with strong teamwork and communication skills

• Excellent command of English

• Preferably holding Microsoft security certifications (SC-200, SC-300, AZ-500, SC-100) and/or a Linux administration certification

• Preferably having hands-on experience with security tools such as Nessus and Burp Suite

• Preferably having experience in incident response processes

Job Description

• Identifying security requirements for IT infrastructure designs and projects, and managing associated risks

• Planning and conducting internal penetration tests; coordinating assessments performed by external vendors, analyzing and reporting findings, and tracking remediation activities

• Performing periodic vulnerability scans using scanning tools (Nessus, OpenVAS, etc.), prioritizing findings and managing remediation processes with the relevant teams

• Monitoring and analyzing security logs through SIEM platforms, detecting and classifying security events, and participating in incident response activities

• Performing security hardening of servers, endpoints and network components

• Contributing to IT risk analysis and tracking risk treatment plans

• Developing and maintaining information security policies, procedures, and standards