Security Tests & Vulnerability / Security Engineer

Garanti BBVA Teknoloji

Garanti BBVA Technology is looking for a Security Engineer to extend its Security Tests and Vulnerability Management team. Successful recruits will benefit from the huge amount of technical experience and knowledge within the team and will be given opportunities to conduct penetration tests on various challenging environments, from digital banking applications to ATM machines, wearables to mainframes.

The successful candidate will meet the following qualifications:

• BS or MS in Computer Engineering, Software Engineering etc.
• At least 2 years of experience on security assessment and penetration testing
• Advanced knowledge of network, system and application vulnerabilities, exploits and mitigation methods
• Preferably having  IT Security related certifications ( GIAC Certified Penetration Tester (GPEN), or GIAC Certified Web Application Penetration Tester (GWAPT), Offensive Security Certified Professional (OSCP), etc. )
• Preferably coding experience in one or more general purpose programming languages (Java, .Net or Python)
• Ability to find workaround solutions for vulnerability remediation
• Knowledge or willing to learn DevSecOps process
• Deep knowledge of OWASP security best practices
• Strong debugging skills and the proven ability to quickly understand other developers' code
• Experience with or willing to learn secure development best practices 
• Embracing customer first approach, able to develop trust-based relationship with customers and understand their needs
• Embracing one-team approach, able to be a strong team player
• Passion for quality and continuous improvement
• Strong multi-tasking abilities and motivation in a fast paced environment
• Strong desire for continuous learning and development in a self-led organization
• Ability to orchestrate multiple projects and priorities in alignment with current business objectives
• Strong analytical thinking, problem solving and decision making skills
• Good command of written and spoken English 

Job Description:

• Detecting, classifying reporting vulnerabilities on IT infrastructure
• Measuring and improving efficiency of vulnerability management processes
• Conducting network, web and mobile application security tests
• Implementing penetration testing methodologies, policies and procedures.
  
• Building security tools and processes to improve efficiency and quality of security tests
• Designing, developing and integrating solutions to automate vulnerability management processes
• Consulting internal teams on information security and security training of developer teams