Senior Information Security Specialist

Hi, I've got something to share with you!

My name is Pazarama.

Who am I?

I’m an e-commerce platform that makes life easier for my customers and business partners—a place where you can find everything you need. My name is a blend of the words "Bazaar" and "Panorama." I'm here to offer a panoramic view of the e-commerce world, creating a marketplace where everyone can find what they’re looking for. Plus, with the strength of being a subsidiary of İş Bank and my broad perspective, I aim to create a sustainable shopping ecosystem.

I’m everywhere, making it easy for you to reach me: Pazarama mobile, the Pazarama website, İşCep, Maximum Mobile and physical stores.

From hotel and flight bookings to car rentals, online shopping to transportation card top-ups, even fuel payments without leaving your car, and exciting sweepstakes—I provide an all-in-one platform to meet all your needs.

But that's not all... I aim to please those who choose me by offering payment options packed with discounts, instalment plans, and rewards. I don't just make shopping easier; I make it more rewarding with everything I’ve mentioned. I’m constantly evolving, enhancing myself and my technologies for my users and business partners.

So, what can I do for you?

This is a journey, and we’re in it together. We’ll enhance your skills with career-supporting training and create opportunities to achieve your dreams together. Every step of the way, we’ll make this journey more vibrant with your ideas, enthusiasm, and talents. In this adventure, where you won’t be afraid of making mistakes, we can turn your dreams into reality together.

If you want to join me on this journey, apply for the position below and become part of our team!

Pazarama is with you on your career journey 💙

We are looking for a Senior Information Security Specialist to lead our day-to-day security operations. In this role, you will drive threat detection, incident response, and endpoint protection across our hybrid environment, while overseeing perimeter security and advancing Zero Trust initiatives.

Qualifications

• Experience: Minimum 5+ years of professional experience in information security, with a proven track record in security and cloud-native environments.
• Education: Degree in Computer Science, Computer Engineer, Cyber Security, or related engineering fields is a plus, but equivalent practical experience is highly valued.
• Cloud Expertise: Deep technical knowledge of Azure and Google Cloud Platform (GCP) security services. Hands-on experience or familiarity with Prisma Cloud (CNAPP) is strongly preferred.
• SIEM & EDR Operations: Hands-on experience with enterprise SIEM and EDR/XDR platforms for continuous log monitoring, threat hunting, and incident response.
• Cloud-Native & DevOps: Strong understanding of Docker, Kubernetes (K8s) security, and integrating security tools (IaC scanning, SCA, DAST/SAST) into CI/CD pipelines.
• Modern Frameworks: Expert understanding of Zero Trust Architecture (ZTA), SASE, and common frameworks such as NIST CSF, ISO 27001, SOC2, PCI DSS, and KVKK/GDPR compliance.
• Threat Management: Technical proficiency in MITRE ATT&CK® framework and experience implementing/managing XDR/SOAR solutions.
• Offensive & Defensive Security: Experience in vulnerability management, penetration testing orchestration, and Security Hardening for hybrid-cloud infrastructures.
• AI Security: Familiarity with the OWASP Top 10 for LLM, MITRE ATLAS and best practices for securing AI-driven applications and data pipelines.
• Certifications: Professional certifications such as CISSP, CCSP, AZ-500, or Google Professional Cloud Security Engineer are highly desirable.

Responsibilities

• Cloud & Infrastructure Security: Lead POC studies for emerging technologies and evaluate the security impact of migrating workloads to Azure/GCP/Amazon Cloud environments.
• Identity & Access Management: Oversee modern IAM strategies, including Passwordless authentication, Privileged Access Management (PAM), and Conditional Access.
• Incident Response & Forensics: Act as a technical lead during high-severity security incidents; perform root cause analysis and implement long-term architectural remediations.
• Firewall & Network Security: Evaluate and maintain enterprise firewall policies, network micro-segmentation, and perimeter controls to ensure secure network architecture and threat prevention.
• Vulnerability Management: Orchestrate continuous vulnerability assessment programs and guide engineering teams through complex patch management and remediation workflows.
• MDM & Endpoint Security: Technical proficiency with Mobile Device Management (MDM/UEM) solutions to ensure endpoint security baselines, device compliance and access policies.
• AI & Data Security: Establish security guidelines for Large Language Models (LLMs) and AI tools, ensuring data privacy and integrity.
• Awareness & Culture: Design and deliver modern, role-based security awareness programs to foster a security-first mindset across the organization.
• Policy & Governance: Develop and automate the enforcement of information security policies and standards in high-velocity development environments.

Bu ilan sebebiyle yapacağınız başvurular aracılığıyla toplanacak kişisel verileriniz, veri sorumlusu Topkapı Danışmanlık Elektronik Hizmetler Pazarlama ve Ticaret A.Ş. tarafından 6698 sayılı Kişisel Verilerin Korunması Kanunu (“KVKK”) ve ilgili mevzuat kapsamında iş başvuru süreçlerinin yürütülmesi amacıyla otomatik yollarla işlenecektir. Aydınlatma Metni’ne https://cdn.pazarama.com/docs/is-basvurusu-aydinlatma-metni.pdf linkinden ulaşabilirsiniz. İlanımıza başvuru yapmanız halinde ilgili metnin tümünü onaylamış kabul edileceksiniz.