Cybersecurity Assessment Expert at IT - Strat managing A&A of information systems for U.S. federal clients. Ensuring compliance with DOD cybersecurity policies and standards in complex IT environments.
About the role
- Security Engineer focusing on defensive operations and ensuring web application security. Collaborating with red teams and implementing security measures for cloud environments.
Responsibilities
- Implement defensive controls for web applications based on red team pentest findings (WAF configuration, secure headers, input validation).
- Monitor web application logs to detect exploitation attempts and anomalies.
- Execute incident response for web security incidents, perform root cause analysis, and validate vulnerability remediations.
- Harden cloud infrastructure configurations (IAM policies, encryption, network controls) from cloud security assessment results.
- Develop and maintain security monitoring playbooks, alerting rules, and remediation procedures for web/cloud environments.
- Collaborate with red team during purple team exercises to validate defensive effectiveness.
Requirements
- At least 2 years of experience in defensive security operations or SOC analyst roles.
- Strong understanding of web application security defenses (WAF, secure coding, API protection).
- Experience with a SIEM platform and log analysis for threat detection.
- Proficiency in cloud security services (AWS GuardDuty, Config, IAM ...or Azure/GCP equivalents).
- Skilled in scripting for security automation (Python, Bash) and basic Linux/Windows administration.
- Familiarity with MITRE ATT&CK framework and NIST/CIS compliance standards.
- Professional certifications like CompTIA CySA+, GCIH, or cloud security certs are advantageous.
Benefits
- Competitive Compensation
- Performance bonus (up to 2-month salary)
- Performance review 2 times/ year
- Extra Premium Healthcare & Annual Health-check
- 15 days of annual leave
- A laptop is provided.
- Community Tech activities.
- A fun & dynamic environment and freedom to be creative.
- Modern office with a flexible, relaxing zone.
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Director leading Information Security at KPMG Budapest, developing programs and policies to align with global priorities and strategy.
Senior Security Engineer responsible for deploying and maintaining endpoint security solutions. Collaborating across teams to enhance security posture and supporting incident response activities.
Administrative support role within MAHLE's Thermal and Fluid Systems unit, assisting the team with various operational tasks and employee interactions.
Senior Security Engineer at PagBank focusing on application security and secure development practices. Responsibilities include testing, vulnerability management, and collaboration with development teams.
Security Software Engineer at a tool - building company automating coding. Focused on shipping secure products covering enterprise security, cloud, and embedded protections.
Senior Product Cyber Security Systems Engineer at Sonova focusing on product security and cyber threats. Collaborating with teams to maintain robust security practices and compliance.
Threat Exposure Oversight Specialist enhancing security risk management in Cyber Defence team. Collaborating across functions to validate and document security controls and risks.
Lead Information Security Analyst driving security improvements and team management at Octopus Energy. Join us in ensuring secure service delivery across our global operations.
Lead Security Engineer at Octopus Energy, ensuring security in digital energy solutions and managing a team. Join us in revolutionizing the renewable energy transition.