Cybersecurity Detection Engineering Manager

Who We Are:

At Yapı Kredi Technology, we research with passion, wonder as we learn, and implement innovations that shape the future together. We take responsibility from the first day with our expert colleagues and work with all our strength for pioneering applications. We make quick decisions and take action. We quickly adapt to innovations and changes.

• Opportunity to work in hybrid model
• Opportunity to work in Koç Group Community Companies' offices
• Career development opportunities in a structured technology career path
• Opportunity to benefit from Biz Club and KoçAilem privileges exclusive to Yapı Kredi Technology employees
• Company-contributed individual retirement insurance
• Birthday off day.

We are seeking a visionary, highly technical and strategic Cybersecurity Detection Engineering Manager to lead our specialized team responsible for the design, implementation and continuous optimization of our enterprise-wide detection ecosystem. In this hands‑on leadership role, you will oversee the critical infrastructure that powers our defense capabilities - including enterprise SIEM, SOAR and UEBA platforms. You will ensure the healthy ingestion and high availability of telemetry from diverse log sources, lead complex detection engineering initiatives, and architect robust automation workflows.

As a leader, this role will bridge the gap between technical execution and executive strategy, scaling our detection capabilities to counter sophisticated, modern cyber threats while fostering a culture of continuous technical excellence.

• Lead the architectural design, deployment, scaling and maintenance of the enterprise SIEM infrastructure while ensuring high availability and disaster recovery readiness.
• Evaluate and integrate Security platforms logs such as next-generation, AI-native defense tools, Security Service Edge platforms etc. into the central logging and detection pipeline.
• Establish strict KPIs and monitoring frameworks for log ingestion health, data parsing accuracy, and overall system uptime across cloud, on-premises, and hybrid environments.
• Proactively identify, troubleshoot, and resolve telemetry gaps, collection outages, and indexing inefficiencies to balance operational depth with compliance.
• Collaborate closely with SOC team to design, test, and deploy high-fidelity correlation rules, behavioral models, and custom parsers mapped to the MITRE ATT&CK framework.
• Drive the automation strategy using SOAR platforms to streamline incident response, orchestrate repetitive tasks, and accelerate overall detection and response times.
• Standardize playbooks for automated containment, enrichments, and cross-platform integrations to maximize operational efficiency.
• Manage, mentor, and scale a high-performing engineering team, providing technical guidance and driving career development pathways.

• Minimum of 9 years of dedicated experience in Cybersecurity, with at least 2 years in a leadership, team-lead, or managerial capacity overseeing engineering teams.
• Team Leadership experience, taking initiative; providing and following through on solutions across various skillsets.
• Proven team player will be working primarily with other staff members, on both long-term projects and rapid response under tight deadlines.
• Effective and excellent oral and written communication, analytical, judgment and consultation skills.
• Ability to work independently and possess strong project management skills.
• Proven track record of managing enterprise-scale SIEM architectures and SOAR platforms.
• Deep understanding of the MITRE ATT&CK framework, Cyber Kill Chain, and modern enterprise threat landscapes.
• Solid understanding of behavioral analytics, machine learning applications in security telemetry, and UEBA platforms.
• Exceptional leadership, communication, and stakeholder management skills with the ability to articulate complex technical risks to executive leadership.
• CISSP, CISM or equivalent security management certifications and vendor‑specific certifications for enterprise SIEM or SOAR platforms are an asset.

Our recruitment process for all positions typically encompasses technical interviews, director assessments, competency evaluations, and personality tests. We will extend our offer to candidates who have successfully completed a positive evaluation process.

If you would like to get to know more about Yapı Kredi Technology, you can follow us!