Назад
Company hidden
10 дней назад

Cyber Security Engineer (SOAR)

Формат работы
hybrid
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
Hungary
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Cyber Security Engineer (SOAR): Designing and implementing automated security workflows, integrations, and playbooks across SIEM, SOAR, ticketing, threat intelligence, and monitoring systems with an accent on security automation, vulnerability detection, and cloud-native infrastructure. Focus on building RESTful data pipelines, securing containers and CI/CD workflows, reducing false positives, and developing incident-response tooling for SOC operations.

Location: Budapest, Hungary; hybrid workplace

Company

hirify.global is an independent IT consulting and services company founded in Vienna, delivering innovative IT solutions for international customers across financial services, telecommunications, automotive, and energy.

What you will do

  • Design and implement automated security workflows across detection, response, and remediation pipelines.
  • Build integrations between SIEM, SOAR, case management, threat intelligence, asset inventory, and internal API platforms.
  • Develop SOAR playbooks for IOC lookups, containment, notifications, ticketing, enrichment, and escalation.
  • Integrate threat feeds and CVE databases to support vulnerability detection and patch prioritization.
  • Improve scripts, event correlation, enrichment logic, monitoring pipelines, and automation coverage.
  • Provide Tier 2 SOC and incident-response engineering support, including ad hoc tooling, log aggregation, on-call support, and documentation.

Requirements

  • Bachelor’s degree in Cybersecurity, Computer Engineering, or a related technical field, or equivalent experience.
  • 3–5 years of experience in cybersecurity engineering or DevSecOps, including SOC support.
  • Strong scripting and development experience with Python, Go, or Bash.
  • Experience integrating SIEM, SOAR, threat intelligence, ticketing, and REST API platforms; familiarity with Cortex XSOAR, Splunk SOAR, Tines, TheHive/Cortex, or similar tools.
  • Experience with Azure, AWS, or GCP, cloud APIs, identity models, Docker, Kubernetes, vulnerability management, CVE/CVSS, Terraform, GitOps, and CI/CD security.
  • Knowledge of regulated security frameworks including IT-Grundschutz, C5, ISO 27001, PCI-DSS, TISAX, or KRITIS.

Culture & Benefits

  • Hybrid work in Budapest within the Infrastructure and Operations department.
  • Fixed-term employment with continuous learning opportunities and exposure to current technologies.
  • Transparent, collaborative environment focused on development, honesty, and stability.
  • AI tools may support parts of the hiring process, while final decisions remain human-led.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →