Junior adótanácsadó állások, munkák információbiztonság kategóriában

• Help Shopify run its planet scale systems by enabling our engineering teams to create resilient systems.
• Build and improve tools to keep our platform resilient and performant.
• Help define what Resiliency and Site Reliability Engineering means for Shopify.

Your task will be to identify, analyze, and track threat actor TTPs and IOCs using prioritization frameworks and continuous monitoring of the threat landscape....

• Act as NIS2 Integration Expert, bridging the German KRITIS team with other EU member states' critical infrastructure teams.
• Manage Cross-Border Integration of security protocols, processes, and controls in accordance with NIS2.

Responsibility for all information security issues within the institution and with regard to third parties....

• Implement security controls and tools for application security testing (SAST, DAST, IAST)
• Perform vulnerability assessments and penetration testing on applications
• Collaborate with developers to remediate security issues and enforce secure coding practices

• Set up test systems (hardware / virtualized) in complex network structures so that they are ready to perform test cases
• Set up and run tests in line with test specifications and take appropriate actions (i.e. passing the test, raising a defect)

• Work together with international product teams, you form an API platform for our vehicles over 5 brands
• Design, implement, and maintain scalable and reliable cloud infrastructure on AWS
• Manage and monitor existing CI/CD pipelines to ensure smooth deployment processes

• Conduct digital forensic investigations in the context of information security incidents, ensuring thorough and accurate analysis.
• Collect, preserve, and document forensic evidence in accordance with industry standards and legal requirements.

• Define, maintain, and enhance governance controls for firewall management in line with internal policies, DORA, and BaFin requirements.
• Conduct second line reviews of firewall configurations, rule changes, and network segmentation to ensure compliance and risk reduction.

Function as part of the second line of defense, reporting to the Deputy CISO and collaborating closely with first line teams on ICT risk and compliance topics....

• Design, implement, and maintain secure, scalable, and resilient production and non-production environments on AWS.
• Build and manage CI/CD pipelines with integrated security checks (SAST, DAST, dependency scanning).
• Automate security controls, governance processes, and compliance validation.

Own and optimize the security incident management process and related tools, also ensure alignment and integration of related processes: information security, corporate security, product security, IT security, data privacy, and crisis management...

Understand the European regulatory authorities' approach to operational resilience, regional nuances and requirements, with a specific focus on the Digital Operational Resilience Act (DORA) and support integrating those expectations into the operational resilience framework...