Cloud Security Expert | Hungary
Employer · Deloitte
Security guardFlexibleFull-timeBudapest
We are looking for a Product Security Expert to join our dynamic team and help us build secure, resilient systems! You will conduct security and risk assessments, integrate security into CI/CD pipelines, and collaborate with architects and development teams.
Tasks
- Conduct security and risk assessments across applications and systems to identify vulnerabilities.
- Collaborate with our security colleagues to set up Frontier AI scanning capability, analyze technical findings, manage backlog (including false positives), and improve our security posture.
- Create, manage, and resolve Jira backlogs for security issues, exceptions, and risk items.
- Support rollout and implementation of SDLC, including documentation, exception handling, and compliance alignment.
- Work with dev & ops teams to integrate security into CI/CD pipelines (SAST, DAST, dependency scanning, compliance-as-code).
- Help develop and maintain security policies, standards, and procedures aligned with ISO 27001, SOC 2, PCI-DSS.
- Configure and optimize security tools & vulnerability scanners to improve detection and efficiency.
- Co-lead threat modeling & risk assessment workshops to evaluate architectural and operational risks.
- Provide clear documentation and explain complex security concepts to stakeholders.
- Collaborate with architects, service owners, and SAP Global Security & Compliance contacts to create security concepts for critical projects.
Conditions & benefits
Startup mindset in a global companyAn opportunity to work in a small, dynamic team with a startup mindset --- all within a large international company.Work from homeFlexibility to work from home or from our modern office in Budapest.Work environmentA supportive, collaborative, and motivational work environment where ideas truly matter.InnovationBe part of innovation --- contribute to the development of cutting-edge applications.Benefits packageEnjoy a wide range of benefits and the stability that comes with working for a reputable, global organization.
Requirements
- Proven experience in software security, DevSecOps, or application security engineering.
- Familiarity with SDLC and secure operational practices.
- Expertise with security tools & methodologies: SAST, DAST, vulnerability scanners (Tenable/Nessus, Rapid7, Aquasec/Trivy, Black Duck, CheckMarx, Fortify, Coverity).
- Experience with SIEM systems like Splunk or Elastic.
- Comfortable using Jira or similar ticketing systems.
- Strong understanding of compliance standards (ISO 27001, SOC 2, PCI-DSS).
- Analytical and problem-solving skills, able to turn complex findings into actionable plans.
- Experience moderating Threat Modelling workshops, familiarity with STRIDE.
- Deep knowledge of cloud-native development, containers & Kubernetes.
- Development experience in Javascript and/or Python and/or Golang.
- Exposure to major cloud providers (AWS, Azure, GCP) or with OpenStack.