Senior SecOps Engineer İş İlanı

About Us Turna.com is the leading technology company in the travel industry. It offers Flight, Bus, Hotel, Ferry and Car Rental Services. It has a dynamic and innovative team dedicated to making travelling accessible and enjoyable for everyone.

At Turna.com, we run a high-traffic, multi-cloud, hybrid infrastructure hosting over 85+ servers (including Windows and Linux Servers) on Huawei Cloud. We are seeking a hands-on Mid to Senior SecOps (Security Operations) Engineer to own our security operations, protect our infrastructure, and embed security practices directly into our CI/CD pipelines. In this role, you will be the ultimate owner of our security posture—defending our platforms against threats, hardening our systems, and automating access control. You will work closely with our SRE, SysAdmin, DevOps and Development teams to offload security monitoring, configure modern security controls, and design resilient, secure pipelines. Technical Spirit: We do not believe in manual, slow security processes. We expect you to treat security as code (IaC/GitOps) and actively leverage cutting-edge GenAI engineering tools like Claude Code, Codex, and OpenCode to write security scripts, automate threat hunting, and analyze massive logs at lightning speed. Responsibilities Design, configure, and continuously tune WAF (Web Application Firewall), DDoS mitigation, and caching policies on Akamai (our primary CDN/WAF) and Cloudflare to protect turna.com against advanced application-layer attacks. Manage DNS/NS records, SSL/TLS certificates, and secure configurations on Cloudflare . Oversee office network and remote-access security via modern Firewall, VPN and ZeroTrust solutions. Improve automated security scanning in our Jenkins and Bitbucket Pipelines (SAST/DAST/SCA), using tools like SonarQube and container scanners. Collaborate with development and SRE teams to analyze scan results, coordinate vulnerability remediation, and ensure "shift-left" security. Audit and secure our Docker images and Kubernetes (k3s) configurations to prevent container breakout and access issues. Maintain centralized logging and correlation mechanisms (using ElasticSearch log agents, Zabbix, Grafana , Datadog and Elastic APM ). Build detection rules and alert triggers to identify anomalies, unauthorized access attempts, or infrastructure breaches. Lead incident response efforts: investigate security alerts, perform root-cause analysis, and draft incident response playbooks. Enforce Zero Trust, Least Privilege, and Multi-Factor Authentication (MFA) across our multi-cloud infrastructure. Standardize secret management and credential storage using modern secure key vaults. Harden our hybrid system environment: implement security baselines and automated patching policies for both Linux (Debian-based) and Windows Server (Active Directory, IIS, MSSQL) infrastructures. Requirements Education: Bachelor’s degree in Computer Engineering (or a closely related engineering discipline). Experience: Minimum 4+ years of hands-on experience in security operations, SOC, DevSecOps, or infrastructure security engineering. Systems & Cloud: Deep understanding of both Linux and Windows Server and IIS security concepts. Solid hands-on experience with Huawei Cloud (or AWS/Azure). CDN/WAF Expertise: Strong experience managing security policies on enterprise CDNs—ideally Akamai (or Cloudflare/CloudFront). Programming & Automation: Proficient in at least one scripting or programming language: Python, Go, or Bash (PowerShell is a big plus). Infrastructure as Code: Familiarity with managing and securing infrastructure via Ansible and Terraform . Modern Tooling: Strong command of Git workflows, VS Code , and containerization ( Docker/Kubernetes ). Language:

Excellent command of English (written and verbal) to collaborate with global partners, consume complex technical CVEs, and document playbooks. AI-First Mindset: Advanced ability to use AI engineering assistants ( Claude Code, Codex, OpenCode ) to accelerate security scripting, parsing, and analysis. We are waiting for your application to join the Turna.com team and contribute to the best experience for travellers!

https://cdn.turna.com/Documents/A-03-Calisan-Adayi-Aydinlatma-Metni.pdf