Senior Software Engineer / Code Security

In recent years, Intertech has been taking important steps towards acquiring technical systems focusing on the banking of the future and meeting the needs of the industry. With the platform transformation process, which is one of the most important examples of this, Intertech also designs technologies for future business models with high quality standards.

What We're Looking For

• Bachelor’s degree in Computer Science, Software/Computer Engineering or a related field.
• Proven record (5+ years) in application-level security: threat modelling, secure-coding standards, vulnerability management and DevSecOps.
• Proficiency in security practices within software development processes and knowledge of S-SDLC and DevSecOps concepts.
• Hands-on expertise in conducting code reviews and identifying code quality issues.
• Direct experience with SAST / SCA / secrets-scanning tools such as SonarQube, Checkmarx, CodeQL, Fortify, Snyk, OWASP Dependency-Check, GitLeaks or TruffleHog.
• Working knowledge of DAST / fuzzing / runtime testing (OWASP ZAP, Burp Suite, Peach Fuzzer, etc.) and how to integrate them into CI/CD pipelines.
• Fluency with Git-based workflows, pull-request best practices and CI/CD platforms (GitHub Actions, Azure DevOps, Jenkins, GitLab CI).
• Solid understanding of software architecture & design patterns, plus data-protection patterns for SQL / NoSQL / Elasticsearch and secure logging.
• Familiarity with OWASP ASVS / Top 10, NIST SSDF, ISO 27001 or similar standards; ability to map requirements to practical controls.
• Strong analytical thinking, attention to detail, excellent communication skills and the ability to translate complex security concepts to diverse audiences.
• Nice to have: relevant certifications such as CSSLP, OSWE, GWAPT, CISSP, Security+, ISTQB Advanced Security Tester or similar.

What You'll Do

• Embed with product squads as the security authority, driving threat-modelling workshops and defining security requirements before coding starts.
• Perform in-depth manual & automated secure code reviews on C#/.NET PRs; identify vulnerabilities, architecture flaws and performance anti-patterns, then provide actionable feedback.
• Configure, tune and own SAST/SCA/secrets-scanning pipelines; generate SBOMs and ensure every build is screened for known CVEs and hard-coded secrets.
• Design reusable security guardrails (e.g., authentication/authorization middleware, secure logging libraries, encryption helpers) that raise the security baseline for all teams.
• Run DAST, API security tests and fuzzing on staging environments; correlate runtime findings with code to shorten remediation cycles.
• Review data-flow diagrams, database schemas and log configurations (Elasticsearch, SQL, NoSQL) to ensure data-at-rest and data-in-motion protections, masking and retention policies comply with GDPR, PCI DSS and internal guidelines.
• Track and manage vulnerability remediation SLAs, publish risk metrics and champion continuous improvement in secure development practices.
• Mentor developers through workshops, brown-bag sessions and pairing, raising the organisation’s overall security maturity.
• Stay on top of emerging threats, tooling and industry best practices; evaluate new AI-powered code-analysis solutions and introduce them when they add value.
• Collaborate with architects and engineering leadership during design and architectural reviews to ensure scalability, resilience and security objectives are aligned.

Why Intertech

At Intertech, we are trying to make sure that you work free of worries with the benefits we offer;

📔 Continuous learning and development opportunities by working with experts and training facilities via Inter Academy,

💫 Opportunity to work in international projects,

🚀 Opportunity to work with new & trend technologies,

🕛 Flexible working hours (08:00-17:00, 09:00-18:00, 10:00-19:00),

🎆 Recreation space: Gym, PlayStation, pinball, table tennis, basketball court, coffee shop & cafe, resting rooms.

👕 No dress code.

🎉 Birthday Leave

💬 Language Allowance

🏢 5 Different Hub Offices (Bilişim Vadisi/İstanbul, Kurtköy Teknopark/İstanbul, Bilkent CYBERPARK/Ankara, DEPARK/İzmir, Esentepe Denizbank Genel Müdürlük)

Our technology and innovative products have been recognized by the many prestigious national and international awards since 1987. Here's a selection of our latest achievements:

🥇 NGN IT Vision – The Cloud Hosting Project of the Year - 2023

🥇 Bilişim 500 – Turkey Based Producer – (Software Category – Grand Prize) - 2023

🥇 Bilişim 500 – Turkey Based Sectoral Software – (Software Cateogry – Grand Prize) -2023

🥇 Bilişim 500 – Contribution to Turkish Economy Special Award (Software Category – Grand Prize) - 2023

🥇 CX Awards – Best Use of Technology (Banking Sector) – 2023

📢Contact us

• WebSite : http://www.intertech.com.tr
• LinkedIn: http://www.linkedin.com/company/intertechteyasam
• Instagram: http://www.instagram.com/intertechteyasam
• Youthall: https://www.youthall.com/en/intertech/
• Anlatsın.com: https://anlatsin.com/intertech
• Spotify: Spotify – Intertech

You will be a member of a dynamic team and a big family. We say join us!