Információbiztonság állások, munkák

Komplex webapp tesztelés Burp Suite Pro-val Mobilapp tesztelés: iOS és Android Infrastruktúra és WiFi tesztelési tapasztalat Userland RE tapasztalat (x86/x64/ARM, Windows/Linux) Képes létező exploit kód értelmezésére Egyedi eszközöket készít a feladat automatizálása érdekében 10% dedikált kutatási...

Forráskód-elemzés (PHP, Java, C#) Konfigurációelemzés és hardening vizsgálat (hálózati eszköz, OS, DB, alkalmazásszerver) Biztonsági szempontú architektúra-elemzés Red Team tapasztalat: védelem megkerülése, privesc AD környezetben, egy post-exploitation framework magabiztos kezelése Képes létező...

• Design, implement, and maintain secure, scalable, and resilient production and non-production environments on AWS.
• Build and manage CI/CD pipelines with integrated security checks (SAST, DAST, dependency scanning).
• Automate security controls, governance processes, and compliance validation.

• Collaborate with a global team and work with colleagues from diverse cultures to gain broad perspectives and insights
• Learn cutting‑edge technologies with in‑depth knowledge of Microsoft Entra ID and how it strengthens organizational security

Own and optimize the security incident management process and related tools, also ensure alignment and integration of related processes: information security, corporate security, product security, IT security, data privacy, and crisis management...

• Operation and continuous improvement of SD-WAN and Office LAN infrastructure, including Wi-Fi and captive portal environments
• Continuous optimization and expansion of our Azure-based cloud network infrastructure

• Developing and refining IT resilience, backup and disaster recovery concepts on a group-wide level.
• Assessing existing backup, restore and recovery capabilities, including resilience against ransomware and large-scale failures.

• Collaborate with group entities on continuous improvement of operational resilience measures
• Conduct ICT risk assessments and evaluation
• Support further development of the group ICT Control framework and monitor entities adherence
• Be a trusted advisor for resilient AI implementation

Incident Response & Monitoring: Participate in on-call rotation for security incidents, manage EDR/SIEM detection rules, and conduct threat/APT monitoring, hunting, and simulation to detect and mitigate malicious activity....

Lead the Security Organization: Oversee and mentor the members of Security Operations, Cloud Security, Product Security, and Security Engineering. Build a cohesive, high-performing security culture across teams. Define a company-wide security vision and roadmap. Align goals, KPIs, and initiatives...

• Design our software, analyze problems and implement your solutions independently focusing on C++ development and network protocols
• Develop complex software modules together with our agile development teams

• Build use cases and configure security tools and technologies (e.g. SIEM, xDR) to detect security events and potential incidents
• Participate in Security Operations & alert monitoring: conducting incident assessments, determine impact and root causes, provide reports and recommendations

Build enterprise cloud infrastructure that provides European data sovereignty and hyperscaler-grade capabilities. You'll work on SAP Cloud Infrastructure, help to solve complex distributed systems challenges at scale: multi-region networking, container orchestration, storage systems, and the APIs...

• Act as NIS2 Integration Expert, bridging the German KRITIS team with other EU member states' critical infrastructure teams.
• Manage Cross-Border Integration of security protocols, processes, and controls in accordance with NIS2.

Our backend systems are the backbone of ING's Daily Banking platform – and this is where you come in. You'll design, develop, and maintain reliable backend applications and services using modern frameworks like Spring Boot, Java and Kotlin, providing the power our systems need....

• Design and implement security measures for systems built on Microsoft technologies, including Windows Server, Azure, and Microsoft 365
• Configure and manage Microsoft security tools such as Defender for Endpoint, Defender for Identity, and Defender for Cloud

• Maintain, further develop and continuously improve our Europe-wide Information Security Management System to ensure its ongoing effectiveness
• Support in reviewing and optimizing current processes in accordance with industry standards and best practices

• Being part of our Infrastructure & Network Team in an international IT set-up ​
• Group-wide definition of standards for network technology
• Management of external service providers
• Establishment of security standards in collaboration with the Information Security Officer

• Monitor security events and investigate alerts to identify potential threats.
• Handle IT security incidents following established procedures and escalate when necessary.
• Operate SOC tools and collaborate with the external MSSP for SIEM alert management.

Lead end-to-end incident response activities, including triage, investigation, remediation, and post-incident reporting. Coordinate with Product, Engineering, Legal, Communications, and other stakeholders. Actively monitor and respond to security alerts from SIEM, EDR, CNAP, and other platforms,...