Security Engineer I, Information Technology

This is a fully remote position, open to applicants in Hungary, +1 more country.

📋 Description

• Evaluate current tools, applications, and processes to uncover security vulnerabilities.

• Develop and uphold cloud security architecture best practices.

• Integrate both new and existing security platforms.

• Partner with R&D teams to ensure secure architectural practices.

• Examine security events for unusual activities.

• Design, implement, and oversee security solutions safeguarding internal systems, third-party vendor systems, and customer data.

• Confirm that security practices comply with regulatory requirements.

• Lead the development of technical solutions for secure systems and data protection throughout the organization.

• Assess and incorporate emerging security technologies.

• Embed security measures within CI/CD pipelines and perform secure code evaluations alongside development teams.

• Educate teams and create secure coding standards.

• Design and manage identity solutions, including SSO, IdPs, and federation protocols.

• Conduct risk assessments, threat modeling, vulnerability assessments, and develop mitigation strategies.

• Assist in incident response, collaborate with SOC, and maintain continuous security monitoring.

• Collaborate across departments, mentor junior engineers, and act as a subject matter expert in security technology.

⛳️ Requirements

• In-depth knowledge of security standards and frameworks such as NIST, ISO 27001, CIS Controls, and relevant compliance regulations (GDPR, HIPAA, PCI-DSS).

• Practical experience with security tools like IDS/IPS, SIEM, vulnerability scanners, and penetration testing platforms.

• Familiarity with cloud platforms (AWS, Azure, GCP, OCI, or Alibaba) and securing cloud-native applications.

• Proficiency in programming languages (e.g., Python, Java, C++) and automation tools (e.g., Terraform, Ansible).

• Strong understanding of networking protocols, firewalls, VPNs, proxies, and security monitoring tools.

• Over 5 years of pertinent experience in security engineering and the development of GRC-focused security solutions.

• Significant hands-on experience in DevSecOps, incorporating security into CI/CD pipelines, and aiding development teams in secure coding practices.

• Demonstrated expertise in cryptography, including encryption, key management, and digital signatures.

• Proficient in designing, implementing, and maintaining security architectures across cloud, third-party, and on-premises environments.

• Extensive knowledge of embedding security within CI/CD pipelines, establishing security standards, and conducting secure code reviews.

• Understanding of encryption technologies, cryptographic key management, and industry standards.

• Knowledge of secure identity solutions, SSO, IdPs, SAML, OAuth, and OpenID Connect.

• Familiarity with Okta and Keycloak is preferred.

• Proficient in secure coding practices and preventing vulnerabilities such as injection flaws, XSS, and authentication issues.

• Strong comprehension of GRC frameworks and the alignment of technical controls with regulatory and audit requirements.

• Expertise in risk assessments, threat modeling, vulnerability assessments, and mitigation planning.

• Knowledge of incident response strategies, SOC collaboration, and continuous monitoring tools.

• Ability to collaborate with cross-functional teams, mentor junior engineers, and serve as a security subject matter expert.

• Candidates must be available for after-hours incident response when urgent security incidents arise.

• The interview process will include a hands-on practical exercise conducted via screen sharing.

🏝️ Benefits

• A friendly and inclusive environment focused on individuals, learning, and development.

• 25 vacation days, with additional days accrued based on age and family status.

• Cafeteria benefits provided through the SZEP card.

• Medicover private health insurance available for employees and their family members.

• 10% of your time dedicated to personal projects, reading groups, and tech talks.

• Flexible working hours and options for remote work.

• A comprehensive people development program, including access to Udemy courses.