Engineering állások, munkák információbiztonság kategóriában

• Monitorozás és triage:
• QRadar SIEM offense-ek és riasztások valós idejű figyelése, elsődleges validálása
• FP/TP megkülönböztetés, Known Issue ellenőrzés, hasonló riasztások összegyűjtése, scope megállapítása
• Riasztások priorizálása az Incident Severity Matrix (P1-P4) alapján
• Incidenskezelés:

• Scada felügyeleti rendszer fejlesztésében és paraméterezésében való aktív közreműködés
• A rendszer új funkcióinak tervezésében, szoftverarchitektúra kialakításában
• Házon belüli és kívüli kapcsolattarásban (pl. külsős tanácsadó, marketing, ügyfél, gyártócégek)

• Energiatároló és középfeszültségű rendszerek digitális és irányítástechnikai infrastruktúrájának támogatásában.
• Terepi kommunikációs és vezérlési eszközök beállításában, alapkonfigurálásában.
• Terepi és központi rendszerek közötti stabil adatkapcsolatok kialakításának és fenntartásának támogatásában.

• Design, implement, further develop and oversee requirements from ISO 27001, EASA Part-IS and national regulatory requirements (e.g., NIS2) within a multinational business unit.
• Identify, assess, and report security risks.
• Coordinate, support, and accompany audits together with specialists.

• Support the OT Security BAU team in maintaining and updating documentation related to cybersecurity policies, procedures, and standards within regulated manufacturing environments
• Ensure alignment and harmonization of cybersecurity procedures across global manufacturing sites.

• Identify potential network, system, and application-level vulnerabilities.
• Develop and implement comprehensive mitigation strategies.
• Conduct security investigations and computer forensic analysis.
• Perform penetration testing and security-focused architecture reviews.

• Support the daily operation of IT systems, acting as the IT point for contact for internal and customer requests
• Manage business outage, contribute to root cause analysis recovery plan and related communications
• Participating in IT projects and documentation

Review and evaluate project proposals and tender material in relation to information security requirements....

• Manage the onboarding of applications into Dynamic Application Security Testing (DAST) tools, ensuring thorough scanning and identifying vulnerabilities early in the SDLC
• Good understanding of SCA, SAST tools like SonarQube, DependencyTrack or similar

Design and implement security architecture for Azure Databricks platforms Enforce Role-Based Access Control (RBAC) across Azure and Databricks environments Integrate security into DevSecOps pipelines, ensuring automated security controls and policy enforcement Manage and secure Azure resources,...

• Manage and scale our Teleport infrastructure for secure access to servers, databases, and Kubernetes clusters.
• Develop and maintain automated Identity and Access Management (IAM) workflows within AWS.
• Implement and improve Just-In-Time (JIT) access solutions to reduce our permanent attack surface.

Apply your knowledge of security architecture to help software engineers build secure products and services across a diverse technology stack, including microservices, mobile applications, and cutting-edge AI-driven solutions....

Design and Own End-to-End Solutions: Lead the architectural design and implementation of full-stack features, from robust backend services to intuitive internal dashboards....

• Serve as the trusted security advisor for customers and internal teams, addressing inquiries related to cybersecurity, privacy, and compliance.
• Lead customer security reviews, audits, and due diligence processes.

• Maintain the IT infrastructure, including hardware, software, system and network etc.
• Manage cyber security related issues, including monitoring, assessing and handling etc.
• Provide security solution for the branch according to the Head Office's requirement.

• Responsible for designing and implementing of OT network architectures for globally located production sites based on Purdue model and ISA/IEC 62443
• Configuration and integration of PLCs (Siemens / Rockwell) into industrial networks and SCADA systems for secure and reliable operation

Lead SOC engineering initiatives including SOC automation, SIEM–IT Service Management (ITSM) integration, and threat framework mapping and adoption (e.g., MITRE ATT&CK)....

• Manage and scale our Teleport infrastructure for secure access to servers, databases, and Kubernetes clusters.
• Develop and maintain automated Identity and Access Management (IAM) workflows within AWS.
• Implement and improve Just-In-Time (JIT) access solutions to reduce our permanent attack surface.

• Formulate, evangelise, and drive adoption of the product security strategy
• Assess, advise on, and increase the security maturity posture
• Create a standardised security architecture and operational best practices
• Help track and drive remediation of security and technology risks

• Formulate, evangelise, and drive adoption of the product security strategy
• Assess, advise on, and increase the security maturity posture
• Create a standardised security architecture and operational best practices
• Help track and drive remediation of security and technology risks