Senior Cyber Security Engineer

About

is one of Europe's leading digital service providers, empowering entrepreneurs, businesses, and developers with the tools they need to succeed online. With more than 60 SaaS and hosting brands, 4,000+ employees, operations across 23 European countries, and 3.5 million customers, combines local expertise with the strength of a global organization.

As part of the ecosystem, we place European values—including privacy, transparency, innovation, and local customer support—at the heart of everything we do, delivering trusted digital solutions tailored to local market needs.

About Natro & Turhost

Natro and Turhost are proud members of the family and among Türkiye's leading providers of domain registration, hosting, cloud infrastructure, and digital services.

Founded in 1999, Natro has been helping businesses establish and grow their online presence for over 25 years. Today, the company serves more than 200,000 customers, manages over 500,000 domain names, and hosts hundreds of thousands of websites through a comprehensive portfolio including domain registration, web hosting, cloud and dedicated servers, SSL certificates, trademark services, and security solutions.

Following the acquisition of Turhost in 2022, the two brands continue to strengthen their market position by delivering reliable, high-performance hosting and cloud solutions to SMEs, entrepreneurs, developers, and enterprise customers across Türkiye.

Together, Natro and Turhost combine strong local expertise with the global capabilities, innovation, and best practices of the ecosystem.

Role Summary:

We are looking for a Senior Cyber Security Engineer to join our Cyber Security team and play a key role in strengthening and continuously improving our security infrastructure. The role will focus on network security, security operations, incident response, vulnerability management, and the continuous improvement of our security controls and architecture.

The successful candidate will work closely with the Cyber Security, Infrastructure, IT and Technology teams to protect our systems and services against evolving cyber threats.

Key Responsibilities:

• Contribute to the design, implementation, and continuous improvement of the cybersecurity architecture.

• Manage and improve the integration of network security and protection infrastructures.

• Perform L2/L3-level incident response for critical security incidents.

• Analyse cyber attacks, identify and extract IOCs and TTPs, and carry out the necessary containment and remediation actions.

• Continuously improve security controls and evolve the security architecture in response to emerging threats and vulnerabilities.

• Contribute to the hardening of Linux and Windows systems.

• Support vulnerability management, remediation, and security improvement activities.

• Contribute to information security processes and compliance activities.

• Support security automation initiatives and identify opportunities to improve security operations through automation.

• Prepare and maintain technical documentation, incident reports, and security-related assessments.Prepare technical documentation, incident reports and security-related assessments.

• Contribute to information security processes and ISO 27001 compliance activities.

Skills & Qualifications:

• Minimum 5 years of experience in Cyber Security or a similar role.

• Bachelor’s degree, preferably in Engineering, Computer Science, Information Technology or a related field.

• Strong knowledge and hands-on experience in Network Security and Cyber Security.

• Experience with IAM and PAM concepts, including privileged account governance, credential vaulting, session monitoring, and least-privilege access controls.

• Deep expertise in WAF systems, proxy management, and Layer 7 (L7) DDoS protection.

• Experience managing DDoS protection appliances.

• Experience with SIEM solutions, including log analysis, event correlation, alert investigation, and incident tracking.

• Experience with EDR/XDR solutions, such as SentinelOne, CrowdStrike, or Microsoft Defender.

• Experience in triage, investigation, and incident response for cybersecurity incidents.

• Good knowledge of IOCs, TTPs, and the MITRE ATT&CK framework.

• Strong experience with firewall technologies, including firewall policy management, routing, and security policies.

• Experience designing, deploying, and maintaining firewalls, VPNs, and intrusion detection/prevention systems (IDS/IPS).

• Ability to perform basic to intermediate-level security analysis and auditing on Windows and Linux systems.

• Experience with vulnerability assessment, system hardening, and remediation, including the ability to produce technical reports.

• Proficiency with vulnerability management tools and processes.

• Ability to contribute to Red Team activities and security assessments.

• Experience supporting and implementing security controls aligned with PCI DSS, SOC 2, and other relevant compliance requirements.

• Ability to document cybersecurity incidents and produce clear and detailed technical reports.

• Knowledge of ISO 27001 and information security practices.

• Experience with security automation processes.

• Experience with scripting and automation using PowerShell, Python, APIs, or similar tools.

• Strong analytical, problem-solving, and troubleshooting skills.

• Good command of English.

"Come as you are"