Cyber Security Engineer

At Hepsiburada, we are driven by our mission to improve people's lives by developing innovative products and services. Prioritizing customer satisfaction, we offer over 280 million products across more than 30 categories. Through our marketplace model, we bring together over 100,000 businesses. With Türkiye’s and the region's largest Smart Operations Center, industry-leading R&D initiatives, and innovative solutions, we contribute significantly to the growth of the e-commerce ecosystem. For the past two years, we have proudly held the title of Turkey's most recommended e-commerce platform.

Through our innovative services like HepsiJET, Hepsipay, HepsiLojistik, HepsiAd, and Hepsiburada Global, we create value for all our stakeholders. Committed to harnessing technology for social benefit, our “Technology Empowerment for Women Entrepreneurs” program has connected thousands of women entrepreneurs with e-commerce, supporting their growth. Our goal is to leverage digitalization and e-commerce to enable greater economic participation.

With 25 years of experience driven by innovation and entrepreneurship, we proudly continue our journey as “Türkiye’s Hepsiburada” and the first and only Turkish company listed on NASDAQ, the world's leading technology exchange.

For our colleagues, we offer a work environment that supports creating together and adding more meaning to our work. As a team full of opportunities, we are happy to develop, produce and succeed together.

If you want to be part of a team that creates value for everyone and makes life easier through innovative products and services—and contribute to exciting success stories—the future starts here.

Requirements:

• Installing, maintaining, and monitoring SIEM and SOAR platforms,
• Designing and enhancing Cyber Security Monitoring and Automation Infrastructure,
• Developing, tuning, and optimizing SIEM correlation rules, detection use cases, and automation playbooks,
• Integrating SIEM & SOAR with Threat Intelligence, EDR, Cloud Security, and other security tools,
• Managing log source onboarding, parsing, and normalization (e.g., CIM, data models, field extractions),
• Automating SOC processes and designing SOAR workflows to improve efficiency and accuracy of alert handling, and integrating them with ticketing systems (e.g., ServiceNow, JIRA),
• Documenting processes, playbooks, and standard operating procedures,
• Ensuring scalability, performance, and health monitoring of SIEM environments.

Qualifications:

• Bachelor’s degree or equivalent experience in Computer Science, Engineering, or related field,
• 2+ years of hands-on experience with SIEM & SOAR platforms (Splunk and XSOAR experience highly preferred),
• Experience integrating SIEM/SOAR with multiple security technologies (EDR, FW, IDS/IPS, Cloud Security),
• Knowledge of cyber security frameworks such as MITRE ATT&CK, NIST CSF, etc.,
• Experience with scripting languages (Python, PowerShell, etc.) for automation and integration,
• Proficiency in both Linux and Windows operating systems,
• Strong knowledge of core security concepts (access management, hardening, monitoring, etc.),
• Experience with log pipeline management and parsing (Regex, KQL, SPL),
• Experience with data enrichment, threat feed integration, and use of APIs in automation,
• Proactive, eager to learn, and open to new ideas,
• Team player with the ability to mentor and take initiative,
• Relevant certifications (Splunk Certified Admin/Architect, Palo Alto XSOAR, GIAC GCDA) are a plus.