Information Security Specialist İş İlanı

Koç University Information Technology Directorate will be hiring an Information Security Specialist with the below-mentioned qualifications. • Bachelor's degree, preferably in Computer Engineering, Software Engineering, Information Systems, Electrical-Electronics Engineering or related departments • Minimum 2 years of experience in the information security / cyber security field • Familiar with the CIS Controls framework or willing to learn it • Knowledge and hands-on experience in penetration testing methodologies (OWASP, PTES, etc.) and vulnerability management processes • Experienced in SIEM / log management and security event analysis • Knowledge of Windows, Linux operating systems and basic network technologies • Knowledge of scripting languages such as PowerShell, Python and Bash • Experienced in creating technical documentation and reporting • Analytical, with strong teamwork and communication skills • Excellent command of English • Preferably holding Microsoft security certifications (SC-200, SC-300, AZ-500, SC-100) and/or a Linux administration certification • Preferably having hands-on experience with security tools such as Nessus and Burp Suite • Preferably having experience in incident response processes Job Description • Identifying security requirements for IT infrastructure designs and projects, and managing associated risks • Planning and conducting internal penetration tests; coordinating assessments performed by external vendors, analyzing and reporting findings, and tracking remediation activities • Performing periodic vulnerability scans using scanning tools (Nessus, OpenVAS, etc.), prioritizing findings and managing remediation processes with the relevant teams • Monitoring and analyzing security logs through SIEM platforms, detecting and classifying security events, and participating in incident response activities • Performing security hardening of servers, endpoints and network components • Contributing to IT risk analysis and tracking risk treatment plans • Developing and maintaining information security policies, procedures, and standards