AppSec - Vulnerability Management Engineer

Hybrid Istanbul, Turkey Full-time Posted 2 months ago

Skills & stack

Languages

Golang Java Python

Frameworks

React Spring

Skills

Gin Nuclei OWASP Semgrep

About the role

AppSec - Vulnerability Management Engineer at Trendyol is a full-time hybrid role in Istanbul, Turkey. You will work with Trendyol engineering teams on application security across web and mobile platforms, including testing, code review, secure coding guidance, bug bounty support, custom tools, and remediation work.

Work format

Istanbul, Turkey. Full-time and hybrid.

Skills and tools

OWASP
Semgrep
Nuclei
Java
Golang
Python
Spring
Gin
React

What to prepare

Prepare a short example of web or mobile security testing work you have done.
Be ready to walk through a code review that confirmed a vulnerability fix.
Bring examples of custom security rules or tools built with Semgrep or Nuclei.

Responsibilities

Test web and mobile applications for security issues.
Review code to confirm vulnerability fixes.
Guide engineers on secure coding practices.
Develop custom security tools and rules with Semgrep and Nuclei.
Support the bug bounty platform.
Investigate root causes and suggest technical remediation.

Requirements

Experience with OWASP Top 10 and web application security.
Programming or scripting skills in Java, Golang, and Python.
Familiarity with front-end and back-end frameworks such as Spring, Gin, and React.
Clear communication and collaboration with engineering teams.
Experience with vulnerability management and remediation work.

Nice to have

Professional security certifications such as eWPT, eWPTXv2, OSWE, eMAPT, or GWAPT.
Community contributions such as public CVEs, bug bounty recognition, or blogs.

Apply for this role

Send a short intro — the hiring team will review and respond.

Create candidate account Log in

Trendyol

Product

Largest e-commerce and mobile marketplace in Turkey and the MENA region, running thousands of microservices across its own data centers to power retail, delivery and fintech products.

Location: Istanbul, Turkey
Team size: 1000+
Remote policy: Hybrid

View company profile