General Information

Position
Cloud Security Expert | Hungary
Work arrangement
Full-time
City
Budapest
Country
Hungary
Department
Consulting
Team
Cyber
Area of interest
Cyber
Way of work
Hybrid

Description & Requirements

Who we are looking for
Are you passionate about securing cloud-native applications and driving best-in-class security practices? We are looking for a Product Security Expert to join our dynamic team and help us build secure, resilient systems!


• ✅ Proven experience in software security, DevSecOps, or application security engineering.
• 🔄 Familiarity with SDLC and secure operational practices.
• 🛠️ Expertise with security tools & methodologies: SAST, DAST, vulnerability scanners (Tenable/Nessus, Rapid7, Aquasec/Trivy, Black Duck, CheckMarx, Fortify, Coverity).
• 📊 Experience with SIEM systems like Splunk or Elastic.
• 📝 Comfortable using Jira or similar ticketing systems.
• 🛡️ Strong understanding of compliance standards (ISO 27001, SOC 2, PCI-DSS).
• Analytical and problem-solving skills, able to turn complex findings into actionable plans.
• ⚡ Experience moderating Threat Modelling workshops, familiarity with STRIDE.
• 🐳 Deep knowledge of cloud-native development, containers & Kubernetes.
• 🐍 Development experience in Javascript and/or Python and/or Golang.
• ☁️ Exposure to major cloud providers (AWS, Azure, GCP) or with OpenStack.
• 🖥️ Nice to have: familiarity with physical datacenter infrastructure (storage, network, hypervisors like KVM).
Your future role
• 🔍 Conduct security and risk assessments across applications and systems to identify vulnerabilities.
• Collaborate with our security colleagues to set up Frontier AI scanning capability, analye technical findings, manage backlog (including false positives), and improve our security posture.
• 📋 Create, manage, and resolve Jira backlogs for security issues, exceptions, and risk items.
• 🛠️ Support rollout and implementation of SDLC, including documentation, exception handling, and compliance alignment.
• ⚙️ Work with dev & ops teams to integrate security into CI/CD pipelines (SAST, DAST, dependency scanning, compliance-as-code).
• 📚 Help develop and maintain security policies, standards, and procedures aligned with ISO 27001, SOC 2, PCI-DSS.
• 🛡️ Configure and optimize security tools & vulnerability scanners to improve detection and efficiency.
• 🏗️ Co-lead threat modeling & risk assessment workshops to evaluate architectural and operational risks.
• ✍️ Provide clear documentation and explain complex security concepts to stakeholders.
• Collaborate with architects, service owners, and SAP Global Security & Compliance contacts to create security concepts for critical projects.
What we offer

• 👥 An opportunity to work in small, dynamic team with a startup mindset — all within a large international company. 
• 🏡 Flexibility to work from home or from our modern office in Budapest. 
• 💬 A supportive, collaborative, and motivational work environment where ideas truly matter. 
• 💡 Be part of innovation — contribute to the development of cutting-edge applications. 
• ⏰ Full-time role with flexible working hours. 
• 💼 Enjoy a wide range of benefits and the stability that comes with working for a reputable, global organization.
Selection process
Kindly upload your Cv in English. 
1. Hr call with the recruiter.
2. Technical interview with the hiring team. 
3. Final interview with project team.

#LI-SK1