Cybersecurity Engineer
HybridBudapest, Budapest, Hungary
Job Summary
Implement and improve practical security controls across servers, endpoints, cloud services, network infrastructure, identity systems, and engineering platforms. Support vulnerability management by scanning, validating, prioritizing, and tracking remediation for security risks. Monitor alerts from SIEM, EDR, and firewalls to triage suspicious activity, document findings, and execute incident response procedures. Partner with Infrastructure, DevOps, and Software Engineering teams to embed security into CI/CD, harden systems, and manage access controls including MFA and least privilege. Assist with compliance evidence collection and maintain security documentation while collaborating with distributed teams in a hybrid environment.
Required Qualifications
- 3+ years of experience in cybersecurity, information security, security engineering, infrastructure security, or similar hands-on security roles
- Practical understanding of cybersecurity principles, vulnerability management, incident response, access control, endpoint security, network security, and secure system configuration
- Hands-on experience with security tooling such as EDR / endpoint protection, SIEM or log management, vulnerability scanners, identity platforms, firewall / VPN tools, or cloud security tools
- Working knowledge of Windows and Linux server security, patching, hardening, logging, and operational troubleshooting
- Understanding of network security concepts including firewalls, VPN, DNS, IDS / IPS, segmentation, remote access, and zero trust principles
- Experience supporting identity and access management practices, including MFA, least privilege, privileged access, role-based access control, and access reviews
- Ability to investigate security alerts, analyze logs, validate vulnerabilities, document findings, and follow issues through remediation
- Understanding of application security concepts, secure SDLC, dependency scanning, secrets management, SAST / DAST concepts, and DevSecOps practices
- Ability to work with infrastructure, DevOps, software engineering, DBA, and business teams to implement security controls without unnecessarily blocking delivery
- Strong written communication skills and ability to create clear documentation, runbooks, remediation notes, and risk summaries
- High ownership mindset, structured troubleshooting approach, and ability to operate in a distributed, multi-timezone environment
- This role is hybrid from our Budapest office
Desired Qualifications
- Experience with Microsoft security ecosystem, including Microsoft Defender, Microsoft Entra ID / Azure AD, Intune, Microsoft Sentinel, or related tools
- Experience with security controls in hybrid environments that include on-premise infrastructure, cloud services, VPN, data centers, and distributed offices
- Familiarity with Azure, AWS, or GCP security services and cloud security best practices
- Experience supporting vulnerability remediation for Windows servers, Linux servers, network devices, endpoints, databases, and web applications
- Familiarity with compliance frameworks or control libraries such as SOC 2, ISO 27001, NIST, CIS Controls, GDPR, or similar
- Experience with secure configuration baselines, CIS benchmarks, patch management, endpoint management, and configuration drift detection
- Experience with application security testing tools, dependency scanning, container scanning, or CI/CD security integrations
- Relevant certifications such as Security+, CySA+, SSCP, CISSP Associate, CEH, Azure Security Engineer, or similar are helpful but not required
- Background in electronic components, B2B technology, supply chain, distribution, manufacturing, logistics, e-commerce, or similar business environments
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.