Python állások, munkák információbiztonság kategóriában

• Sérülékenységvizsgálati eszközök eredményeinek elemzése.
• Javítási és mitigációs intézkedések koordinálása az üzemeltetési és fejlesztői csapatokkal.
• A sérülékenységek életciklusának nyomon követése a feltárástól a lezárásig.
• SLA-k és belső biztonsági követelmények teljesülésének monitorozása.

A vállalati SIEM (Security Information and Event Management) rendszer teljes körű üzemeltetése, konfigurálása, finomhangolása és folyamatos karbantartása;...

Design and implement secure CI/CD workflows: Develop and maintain secure CI/CD workflows using industry best practices and standards. Ensure the security and integrity of the entire CI/CD pipeline, including code repositories, build systems, artifact repositories, and deployment mechanisms on MOL...

• Az integrált vállalatirányítási rendszer fejlesztésének és működtetésének szakmai irányítása; az ehhez kapcsolódó IT projektek tervezésének, megvalósításának és szabályozási kereteinek kialakítása
• Aktív részvétel a vállalatirányítási rendszerek továbbfejlesztésében, fejlesztési irányok meghatározása

• Leadership in integration of security best practices into DevOps lifecycle
• Architecting, implementing, and continuously improving security services, CI/CD pipelines, and cloud infrastructure
• Design and enforcement of secure configuration management, secrets handling, RBAC, and network policies

• End-to-end penetration testing engagements across web applications, APIs, cloud environments, Kubernetes, binary applications and internal/external infrastructure
• Simulation of real-world attacks to identify security risks before they become threats

• Design and implement cloud security controls across AWS, Azure, and/or GCP
• Deploy and tune Cloud Security Posture Management and Cloud-Native Application Protection Platform tooling
• Build security into Infrastructure-as-Code and CI/CD pipelines

• Biztonsági elemző és felügyeleti rendszerek telepítése, konfigurálása, üzemeltetése
• Biztonsági elemző és felügyeleti rendszerek üzemeltetése
• SOC/MSSP szolgáltatás tervezésében való részvétel
• Presales csapat mérnöki támogatása
• Tanácsadói csapat mérnöki támogatása

• Detection, analysis and management of security incidents
• Making and evaluating reports
• Monitoring the customer’s environment
• Tracking IT security issues including vulnerabilities, 0day exploits, malware and making or fitting rules for detecting them in the client's environment

Design, develop, implement and own cloud network products, services, and solutions to improve the security, reliability, and connectivity of the N26 unified network infrastructure and systems....

• Manage and scale our Teleport infrastructure for secure access to servers, databases, and Kubernetes clusters.
• Develop and maintain automated Identity and Access Management (IAM) workflows within AWS.
• Implement and improve Just-In-Time (JIT) access solutions to reduce our permanent attack surface.

• Own IAM strategy across Entra ID and Active Directory.
• Manage conditional access, PIM/PAM, and identity lifecycle governance.
• Develop identity-centric detections and threat-hunting workflows, analyzing Entra ID logs and privilege escalation paths in alignment with the SOC.

Independently apply advanced knowledge of security architecture to guide software engineers in building secure products and services across a diverse technology stack, including microservices, mobile applications, and cutting-edge AI-driven solutions....

Drive the Cloud Infrastructure Security function roadmap in alignment with the Product Manager, Tech Lead, and Engineering Manager....

• Conduct security assessments, including vulnerability scanning, penetration testing, secure code reviews, and reverse engineering of applications and products
• Perform threat modeling and security risk assessments for software, connected devices, and cloud-based service

• Development and Implementation of Infrastructure-as-Code (IaC) Solutions (e.g., Terraform, Ansible).
• Automation of Recurring Tasks such as deployments, scaling, and troubleshooting.
• Building and Maintaining CI/CD Pipelines for fast and secure software delivery.

• End-to-end penetration testing engagements across web applications, APIs, cloud environments, binary applications and internal/external infrastructure
• Simulation of real-world attacks to identify security risks before they become threats

• Role mining for business roles based on the functional task in each department in the organization
• Use of business roles to cluster the birth rights and functional entitlements for each employees joining the organization
• Enhancement of Movers and Leaver Process with the use of business roles

Deploy, configure and operate TXOne Stellar, Malware Check Stations (MCS) and related OT endpoint security components across global manufacturing sites...