Python állások VIII. kerületben (információbiztonság)

A vállalati SIEM (Security Information and Event Management) rendszer teljes körű üzemeltetése, konfigurálása, finomhangolása és folyamatos karbantartása;...

Design and implement secure CI/CD workflows: Develop and maintain secure CI/CD workflows using industry best practices and standards. Ensure the security and integrity of the entire CI/CD pipeline, including code repositories, build systems, artifact repositories, and deployment mechanisms on MOL...

• Designing security solutions based on BT’s security portfolio technologies
• Implementing security solutions
• Testing security solutions
• Handing over security solutions to service
• Creating value through technology for security design across complex multiple platforms and/or technology areas

• Perform web, network, and infrastructure penetration tests independently.
• Actively participate in red team exercises (e.g., initial access, lateral movement, persistence).
• Document test results and deliver detailed, client-friendly reports.

• On-premise IT infrastruktúra üzemeltetése, támogatása és folyamatos fejlesztése
• Linux alapú rendszerek adminisztrációja
• Kubernetes klaszterek adminisztrációja
• Middleware komponensek adminisztrációja
• Automatizációs feladatok megvalósítása és karbantartása

• Monitoring security alerts, events, and activities across enterprise environments using security monitoring and detection platforms
• Investigating potential cybersecurity incidents and assisting with containment, remediation, and recovery activities

• Monitoring platform and resolving issues reported by monitoring application
• Maintaining availability, integrity and confidentiality of security platforms
• Upgrading, remediating and patching underlying operating systems
• Writing and updating knowledgebase articles

• End-to-end penetration testing engagements across web applications, APIs, cloud environments, binary applications and internal/external infrastructure
• Simulation of real-world attacks to identify security risks before they become threats

• Daily operational activities including handling service requests and troubleshooting complex network issues
• Design and optimization of corporate firewall architecture focusing on security, scalability, and high availability
• Continuous improvement of network security infrastructure and processes

• End-to-end penetration testing engagements across web applications, APIs, cloud environments, kubernets, binary applications and internal/external infrastructure
• Simulation of real-world attacks to identify security risks before they become threats

• Design and implement cloud security controls across AWS, Azure, and/or GCP
• Deploy and tune Cloud Security Posture Management and Cloud-Native Application Protection Platform tooling
• Build security into Infrastructure-as-Code and CI/CD pipelines

• Design and implement cloud security controls across AWS, Azure, and GCP
• Build security automation using CI/CD pipelines, Infrastructure as Code, and Policy as Code
• Develop automated compliance checks and remediation workflows

• Operational monitoring to resolve issues reported by monitoring application
• Maintenance of availability, integrity and confidentiality of security platforms
• Upgrade, remediation and patching of underlying operating systems including Windows, Linux, ESXi, and firewalls