About the Role

The Application Security Engineer will be responsible for conducting static and dynamic security tests on web and mobile applications, assessing vulnerabilities, collaborating with development teams for remediation, developing automation for vulnerability prevention, and continuously improving the secure application development process.

Position located at: Libadiye Office (Hybrid)

As an Application Security Engineer

• Conduct the static and dynamic security tests of the Web and Mobile applications developed and used in the corporation
• Assess potential security vulnerabilities within our applications, and work with development teams to ensure remediation in our established SLAs.
• Proactively prevent future occurrences of a vulnerability through developing automation, security controls, and educating developers.
• Report the vulnerabilities detected after the security tests, notify them to the relevant teams, and follow up them
• Verify and follow up the security findings reported from within and out of the corporation
• Support the development teams in relation to the application security matters when necessary
• Improve the secure application development process of the corporation continuously
• Provide guidance and mentorship to junior members of the security team

How do we describe the perfect match?

• Graduation from Computer, Electrical and Electronic, Electronic, Communication Engineering, or similar 5-year engineering departments, or Computer Technologies and Information Systems department of universities preferred
• Good command of English
• Conducting threat modeling, design reviews, and code reviews throughout the development process, offering constructive feedback to development teams.
• Analyzing and reviewing security findings, fine-tuning, and establishing policies within application security solutions such as SAST, DAST, IAST, and SCA.
• Conducting various types of application security assessments, including web application, mobile, API, and thick client penetration tests.
• Holding at least one of the industry certificates like OSCP, OSCE, OSWE, or CS-Ranger preferred
• Identifying and organizing role-specific training initiatives for different development teams.
• Enhancing software security guidelines, including role-specific training programs, training materials, best practices, secure coding checklists, and reusable code libraries.
• Conducting proof-of-concept and proof-of-technology testing to evaluate the integration of new third-party security products into the development and deployment process.
• Implementing tools to automate security testing at scale as part of the DevSecOps approach.
• Participating in the setup, configuration, and maintenance of security tools on CI/CD infrastructure within the DevSecOps framework.
• Performing comprehensive technical analyses of detected vulnerabilities and mitigation methods.
• Actively contributing to the development of internal processes, procedures, and standards.
• Demonstrating strong problem-solving abilities and meticulous attention to detail.

Who We Are?

We are the technology leader of the aviation and air cargo industry in Turkey! We are an innovative and successful team that does not fit into the mold, constantly enlarges its target and pushes the standards in global competition...

We design and develop technology with the spirit of R&D, where human, engineering and software are the most perfect components. We use trend technologies such as big data, cloud computing, artificial intelligence, fintech, cybersecurity and blockchain which we can compete in the sky. We move forward confidently and successfully with the power of our knowledge and experience into the future.

Obviously, We don't dream too much as “what will happen in the future?”, because we are designing the future from today.

We are a strong team of more than 2000+ valuable talents that shed their minds in offices equipped with modern technology in Istanbul, Ankara and Izmir. Team play is our favorite system! We focus on the same goal – winning – and continue to work together with the motivation to achieve this.

If you want to have your name in the success story of a globalizing company, we look forward to your application to the winners team!

Benefits Of Working With Us

In addition to having the opportunity to grow and be challenged, and to be part of a life, our people enjoy a range of rewarding benefits:

• Flexible working arrangements, generous personal, parental and cultural leave
• Competitive remuneration
• Free and subsidized health and wellbeing services
• Discounts on a wide range of products and services
• Career development opportunities
• A buddy who will guide and accompany you during your onboarding process
• A great number of online courses and technical trainings that will support your development
• Personalized development plan for you
• Using CED & Pass Flight for travelling experience with your family
• Support payment for childcare

Be Yourself

We value the unique backgrounds, experiences and contributions that each person brings to our team and encourage and celebrate diversity.

If you would like to get to know more about Turkish Airlines Technology, please follow us on Instagram and LinkedIn;

https://www.instagram.com/turkishairlinstechnology/

https://www.linkedin.com/company/thyteknoloji/