Security Architecture Professionals

About the Team

At Trendyol Tech, our mission is to create a positive impact in our ecosystem by enabling commerce through technology.

We solve complex problems with data, creativity, and agility — always driven by real outcomes. With a culture built on learning, collaboration, and ownership, we grow together while building what’s next.

About the Role

This role is part of the Security Architecture & Engineering team and focuses on embedding security into systems, platforms, products, and infrastructure by design.

The role provides security architecture consultancy to technical and business stakeholders, helping teams make pragmatic, risk-based security decisions while supporting business objectives. It is responsible for identifying architectural security risks, design flaws, and security gaps across new initiatives, infrastructure changes, cloud adoption, platform services, and business-critical systems.

In addition, the role contributes to building reusable reference security architectures, design principles, and assessment frameworks aligned with regulatory and industry frameworks such as NIST, ISO, PCI DSS, GDPR, and KVKK. The role also drives process improvement and automation initiatives to improve the scalability, consistency, and maturity of security architecture practices across the organization.

Responsibilites

Conduct security architecture reviews and design flaw analyses for new projects, platforms, infrastructure changes, and business-critical systems.

Provide pragmatic, risk-based security consultancy to technical teams, product teams, business stakeholders, and platform/infra teams.

Create, maintain, and promote reusable reference security architectures, design patterns, and secure-by-design principles.

Identify architectural design flaws and propose practical mitigation options considering business context, technical constraints, and regulatory requirements.

Support security alignment in areas such as cloud architecture, network security, Kubernetes/container platforms, IAM, data security, AI security, and infrastructure security.

Contribute to improving and automating security architecture review processes to increase scalability, consistency, and efficiency.

Collaborate with engineering, infrastructure, product, compliance, and security teams to ensure security requirements are understood and implemented effectively.

Support regulatory and audit readiness by aligning architecture decisions with relevant standards and control requirements.

Expected Qualifications

Experience in security architecture, security engineering, security consultancy, or technical security assessment roles.

Experience in conducting security reviews, architectural GAP assessments, or design-level security evaluations.

Good understanding of multiple technology domains such as network and network security, virtualization, Kubernetes and container platforms, cloud architecture and security, IAM, data security, and AI security.

Ability to identify design flaws and architectural risks across complex systems and propose practical mitigation strategies.

Understanding of security standards, frameworks, and regulations such as NIST, ISO 27001, PCI DSS, GDPR, and KVKK.

Experience in developing or contributing reference architectures, design guidelines, or reusable security patterns.

Ability to balance security requirements with business priorities and engineering constraints.

Strong verbal, written, presentation, and consultative communication skills.

Good stakeholder management, coordination, and collaboration skills.