Application Security Expert

As KKB, we have been the symbol of sustainable trust in financial life for more than 25 years.

With the support of our competent human resources and innovative vision in the field of financial technologies, we develop products and services that are recognized as reference points. We are proud of our dynamic and experienced human resources, which have contributed to our successes for a quarter of a century, and we are looking forward to welcoming new colleagues who will strengthen our synergy.

Would you like to be the newest member / a member of this qualified team that develops its business goals on a global scale in order to be an exemplary credit bureau to the world?

What we offer:

• We offer alternative working hours (08.00-17.00/09.00-18.00) that respond to today's needs and provide flexibility in managing your time,
• We care about you. For this reason, we are happy to provide you with a comfortable workspace as well as opportunities where you can improve yourself by acquiring new knowledge,
• We contribute to your career journey by providing unlimited training rights on platforms such as LinkedIn Learning, Pluralsight, covering the purchase of technical certificates and supporting your education in programs such as master's and doctoral programs,
• We know that learning and education continue for a lifetime and we bring together technical, professional and personal development training programs and development opportunities that we think can support you on your career path,
• With our social clubs, we support you to discover new hobbies and create a synergy with your teammates in a social environment,
• As an organization, we attach importance to employee volunteerism. All our employees can participate in social responsibility projects with non-governmental organizations under the umbrella of the KKB Volunteers Platform and we make a big difference with small acts of kindness,
• We care about your health; we offer you and your loved ones (spouse/children) a comprehensive health insurance package and title-independent life insurance coverage,
• We work with LifeClub, a sustainable healthy living application to make your life better,
• We create a Corporate Contribution Private Pension plan for your future dreams,
• Considering their past seniority, we base our annual leave policy on their total seniority,
• Birthday leave and more awaits you!

For more information about us, please visit the link:

https://www.kkb.com.tr/hakkimizda

What we look for:

• Bachelors Science Degree in Computer Engineering, Electronics Engineering or equivalent

• Hands-on knowledge of static and dynamic code analyzers (Fortify, NetSparker, BurpSuite, Checkmarx, SonarQube, NexusIQ)

• Knowledge of web and mobile software development technologies and databases (Java, .Net, React, Spring, Webservices, Oracle)

• Knowledge of Secure Software Development Lifecycle (SSDLC) tools (Jira, Bamboo, Git, BitBucket)

• Knowledge of Docker, Kubernetes and Cloud technologies

• Knowledge of programming (java, .net, python, etc.)

• Knowledge of Web application Penetration Tests

• Deep knowledge of vulnerability and protection methods (CSRF, XSS, SQLI, etc.) published in the OWASP WEP /API Top 10 vulnerabilities list

• Knowledge of secure authentication, session management and authorization standards

• Knowledge of API security and architecture (OAuth2, Spring Security, WS-Security)

• Knowledge of security requirements of legislation and standards such as BRSA (BDDK), data privacy (KVKK), ISO27001, COBIT

• Good communication skills with solution oritented attitude

• Analytical mindset with strong critical thinking and detail orientation

• Carrying out dynamic and static code analysis studies within the software development life cycle (SDLC) process

• Ensuring that the application security standards and processes of the organization are up-to-date in line with current needs and threats

• Conducting threat modeling for new product features

• Performing scanning and analysis to determine whether applications/code pieces contain vulnerabilities or not

• Examining the technical design and analysis studies of applications and evaluating them according to the secure software development methodology

• Providing consultancy on the security requirements of the projects within the SDLC process

• Contributing to corporate risk management processes in terms of application security, and proactively working to ensure the necessary control environment before risks occur

• Supporting the attack monitoring activities carried out under the Cyber Defense Center within the scope of application security processes

• Coordinating Application Security trainings within the organization.

6698 sayılı Kişisel Verilerin Korunması Kanunu kapsamında kişisel verilerinizin işlenmesinden doğan haklarınıza ve bu konudaki detaylı bilgiye https://www.kkb.com.tr/kkb-calisan-adayi-kvkk-metni adresinde yer alan aydınlatma metnimizden ulaşabilirsiniz.