AppSec - Vulnerability Management Engineer

Trendyol
Istanbul
Workplace: HybridFull timeFunction: Solutions Engineering & Sales EngineeringSkills: ["Communication","Collaboration","Root-cause analysis","Secure coding guidance","Self-improvement"]

Enhance application security across web and mobile platforms by performing security testing, validating vulnerability fixes via code reviews, and advising engineering teams on secure coding. Support the bug bounty program, develop custom security tools and rules, and drive root-cause analysis and remediation. Work with developers to promote security best practices, manage bug bounty operations, and protect against common web and service vulnerabilities (including OWASP Top 10).

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Trendyol
Trendyol
3 years ago

AppSec - Vulnerability Management Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 3 hours agoStatus: Live

Job Summary

Enhance application security across web and mobile platforms by performing security testing, validating vulnerability fixes via code reviews, and advising engineering teams on secure coding. Support the bug bounty program, develop custom security tools and rules, and drive root-cause analysis and remediation. Work with developers to promote security best practices, manage bug bounty operations, and protect against common web and service vulnerabilities (including OWASP Top 10).
Location: Istanbul
Workplace: Hybrid
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering

Key Responsibilities

  • •Perform web and mobile security testing and support vulnerability management across platforms.
  • •Review code changes to confirm vulnerability fixes and provide documentation and remediation guidance.
  • •Support and manage the bug bounty program and platform activities.
  • •Develop custom security tools and security rules to improve detection and remediation.
  • •Conduct root-cause analysis for vulnerabilities and propose feasible technical solutions.

Pay and Benefits

Perks:Meal AllowanceHealth InsuranceFuel SupportLearning Budget

Key Requirements

  • •Perform web security testing on web applications and mobile applications.
  • •Validate vulnerability fixes through manual code review on relevant commits and provide remediation guidance.
  • •Identify and protect against web application and web-service vulnerabilities, including OWASP Top 10.
  • •Develop custom security tools and security rules and promote secure coding best practices to developers.
  • •Have experience managing vulnerability remediation and enterprise remediation efforts, including bug bounty platform management.
Skills:CommunicationCollaborationRoot-cause analysisSecure coding guidanceSelf-improvement
Certifications:EWPTEWPTXv2OSWEEMAPTGWAPT
Languages:English
Tech Stack:OWASP Top 10SemgrepNucleiOWASPJavaGolangPythonSpringGinReact

Company Brief

Trendyol
Trendyol is a leading Turkish e-commerce marketplace offering fashion, electronics, home goods, and groceries. It operates a large logistics network and consumer-facing apps, serving millions of customers across Turkey and expanding regionally.
Industry: Online Marketplaces
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Scaleup
Valuation: Decacorn (USD 10B+)
Funding: Private Equity Backed
Headquarters: Istanbul, Turkey
Founded: 2010
WebsiteLinkedIn