K-01 SECURITY ● OPEN ROLE
Senior SOC Analyst (Tier 3)
As a Tier 3 analyst in our Hacettepe Teknokent SOC you will own complex incident analysis, threat hunting and playbook development, and mentor Tier 1 and Tier 2 analysts as the technical reference point of the team.
LOCATIONHACETTEPE TEKNOKENT · ANKARA
WORKINGFULL TIME
EXPERIENCE5+ YEARS
POSTED12.04.2026
CLOSES30.05.2026
§ 01
Responsibilities
- 01Run deep analysis of incidents escalated from Tier 1 and Tier 2; report root cause and blast radius.
- 02Design and regularly run threat hunting scenarios based on the MITRE ATT&CK framework.
- 03Develop and maintain playbooks and automation workflows on the SOAR platform.
- 04Build SIEM content (use cases, correlation rules, dashboards); track and reduce the false positive rate.
- 05Present the monthly security posture report and quarterly tabletop exercise results to clients.
- 06Chair post-incident reviews and follow up on improvement actions.
§ 02
What we look for
- 01Bachelor's degree in an engineering discipline.
- 02At least 5 years in a SOC, MDR or enterprise security operations environment.
- 03Content development experience on a SIEM (FortiAnalyzer, Splunk, QRadar or similar).
- 04Incident analysis experience on EDR/XDR platforms (Trend Vision One, CrowdStrike, SentinelOne).
- 05Log analysis, network traffic analysis and scripting (Python / PowerShell) on Windows and Linux.
- 06English at a level sufficient to run vendor escalation.
§ 03
Nice to have
- 01At least one of OSCP, GCIH, GCIA, GCFA or CISSP.
- 02Threat intelligence platform (MISP, OpenCTI) and integration experience.
- 03Familiarity with log retention regulation.
- 04A record of contribution to open source security tooling (Sigma, YARA, Suricata).
§ 04
Benefits
B.01
Certification Budget
An annual per-person training and certification budget: CCNP, CEH, OSCP, CISSP, VMware VCP, Fortinet NSE.
B.02
Private Health Insurance
A comprehensive complementary health package for employees, partners and children.
B.03
Meals & Transport
Meal card and shuttle or travel support; additional premium for SOC shifts.
B.04
Hybrid Working
Two days remote per week depending on the role; flexibility for engineering and software.
B.05
Lab Access
Access to vendor lab environments and the product pool; test and POC benches.
B.06
Teknokent Benefits
Hacettepe Teknokent tax exemptions and R&D personnel allowances.
§ 05
Process
01
Screening call
A 30-minute phone or online conversation with HR.
02
Technical interview
A role-specific scenario or case study with a senior engineer.
03
Meeting the team
Half a day in the office with the team you would join.
04
Offer
Salary, package and start date; a response within two working days.
§ 06 — APPLICATION
A few fields, one CV.
Fill in the short form below and attach your CV. Every application is reviewed shortly.