Application Security Engineer

JOB DESCRIPTION

Performing security tests of internal and externally IT infrastructures like IP, API, Web

pages, Servers or network devices within the company, in line with company objectives

and regulatory requirements, and detecting and reporting vulnerabilities with manual or

automated tools in a certain periods.

QUALIFICATIONS:

• BS or MS in Computer Science, Computer/Electrical/Electronics/Mathematics

Engineering or related fields

• Experience of at least 4 years in Penetration or Application Security Test projects

• Having a good communication skills

• Excellent problem solving skills and ability to formulate alternative approaches

• Knowledge of computer networking concepts and protocols and network security

methodologies, operating systems, computer networks and databases

• Knowledge of software and secure code development processes

• Preferably designed and tested SSDLC processes

• Ability to understand and work with various web and mobile services such as SOAP,

WSDL, REST, etc.

• Understand and evaluate applications from both technical and business process

perspectives

• Experienced in tools used in penetration tests such as Metasploit, Nessus, Burpsuite,

Netsparker, Acunetix

• Preferably having or had a BRSA penetration test

What you'll do:

• Performing manual network penetration tests on IT infrastructure within the company

• Performing penetration tests, analyzing test results, analyzing risks and developing

solution for vulnerabilities.

• Performing manual penetration tests on mobile, web and API based applications within

the company

• Determination and follow-up of BRSA penetration test processes

• Performing vulnerability vulnerabilities scans with products such as Nessus, Rapid7,

analyzing the test results and meeting with the related business or IT units to eliminate

the vulnerabilities

• Scanning application source codes with static application security test tools and

tracking the vulnerabilities.

• Performing security hardening for Windows and Linux operating systems.

TOM Bank is here to change banking!

TOM Bank is Türkiye’s first game-changer digital retail bank with the vision of being the biggest in Türkiye and among the five fintech in Europe.

TOM , which reached 9 million users in a short time with the Hadi application, is under the umbrella of Aydın Holding which hosts strong brands such as A-101, English Home, Memorial and also includes companies TOM Bank, TOM Digital, TOM PAY, TOM Finansman.

Who We Are :

As TOM,