Hybrid Cyber Defence Center Engineer

at Trendyol Group

• Job title: Cyber Defence Center Engineer
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: No Education Requirement
• Tech skills: Azure, Python, Splunk
• Location requirements: Hybrid, Istanbul, Turkey

About the role

• Security Professional leveraging technology expertise for threat hunting and incident response. Collaborating in a diverse international team at Trendyol Tech to enhance security posture.

Responsibilities

• Conduct deep-dive analysis of complex security incidents, perform root cause investigations, and coordinate appropriate response actions.
• Proactively perform threat hunting activities to identify advanced threat actors, leveraging frameworks like MITRE ATT&CK to analyze attacker behaviors.
• Analyze malware and malicious activity on EDR, SIEM, and network traffic data using both static and dynamic analysis techniques.
• Apply basic reverse engineering methods when needed to support the analysis of suspicious files and malware samples.
• Perform forensic investigations by analyzing logs, memory dumps, registries, and event data to uncover indicators of compromise.
• Automate incident response workflows and develop playbooks using SOAR platforms to improve efficiency and accuracy.
• Utilize, analyze, and leverage diverse cyber threat intelligence sources—including open-source feeds, commercial platforms, and internal telemetry—to proactively monitor emerging threats, assess attacker tactics, techniques, and procedures (TTPs), and continuously update and enhance defensive measures and response strategies.
• Operate and optimize security tools including SIEM (e.g., Splunk, Azure Sentinel), EDR (e.g., CrowdStrike, Microsoft Defender), IDS/IPS, and integrate new log sources for enhanced visibility.
• Contribute to incident monitoring and response activities aligned with compliance standards such as KVKK, GDPR, ISO 27001, PCI-DSS, BDDK, and support regulatory audit requirements.
• Produce comprehensive incident reports and ensure thorough documentation of investigations and remediation steps.

Requirements

• 4+ years of experience in security
• Strong experience in malware analysis, including both static and dynamic techniques.
• Proficiency in reverse engineering tools and techniques.
• Hands-on experience with SIEM platforms, EDR solutions, and network security tools.
• Familiarity with the MITRE ATT&CK framework and threat intelligence services.
• Experience with scripting languages such as Python or PowerShell for automation tasks.
• Excellent analytical and problem-solving skills.
• Strong written and verbal communication skills in English.
• Certifications such as CISSP, GCIH, GCFA, CEH, or Security+ are preferred.

Benefits

• Hybrid working model with flexibility: a schedule that helps you find the right balance between flexibility and team bonding, including work-from-abroad opportunities and a summer working model.
• Customisable FlexBenefits budget: Adjust your daily meal allowance, choose your health insurance package (and extend it to your spouse or children), and pick from additional benefits like fuel support or Trendyol shopping credits.
• Well-being support: Access to location-based in-house doctors, as well as psychologist and dietitian support, and HPV vaccination provision.
• Personalised training allowance and learning opportunities: Use your annual budget for any training or conference of your choice, explore our Learning Management System (LMS) anytime, and join in-person learning sessions offered throughout the year.
• Responsibility from day one: Take full ownership from the start in a culture where every voice is heard and valued.
• A diverse, international team: Collaborate with global peers across our offices in Berlin, Amsterdam, Dubai, and beyond, in a startup-spirited and collaborative environment.
• Opportunities to grow with the best: Tackle meaningful challenges, develop through hands-on experience, and grow with the support of expert guidance and global mentoring.
• Meaningful connections beyond tasks: Be part of team rituals, events, and social activities that help us stay connected and inspired.