Deloitte
Linkedin · Posted 2d ago
Cloud Security Expert | Hungary
Continue to application
Add your email once, then Caio opens the original posting.
Indexed description
Description & RequirementsWho we are looking forAre you passionate about securing cloud-native applications and driving best-in-class security practices? We are looking for a Product Security Expert to join our dynamic team and help us build secure, resilient systems!
- ✅ Proven experience in software security, DevSecOps, or application security engineering.
- 🔄 Familiarity with SDLC and secure operational practices.
- 🛠️ Expertise with security tools & methodologies: SAST, DAST, vulnerability scanners (Tenable/Nessus, Rapid7, Aquasec/Trivy, Black Duck, CheckMarx, Fortify, Coverity).
- 📊 Experience with SIEM systems like Splunk or Elastic.
- 📝 Comfortable using Jira or similar ticketing systems.
- 🛡️ Strong understanding of compliance standards (ISO 27001, SOC 2, PCI-DSS).
- Analytical and problem-solving skills, able to turn complex findings into actionable plans.
- ⚡ Experience moderating Threat Modelling workshops, familiarity with STRIDE.
- 🐳 Deep knowledge of cloud-native development, containers & Kubernetes.
- 🐍 Development experience in Javascript and/or Python and/or Golang.
- ☁️ Exposure to major cloud providers (AWS, Azure, GCP) or with OpenStack.
- 🖥️ Nice to have: familiarity with physical datacenter infrastructure (storage, network, hypervisors like KVM).
- 🔍 Conduct security and risk assessments across applications and systems to identify vulnerabilities.
- Collaborate with our security colleagues to set up Frontier AI scanning capability, analye technical findings, manage backlog (including false positives), and improve our security posture.
- 📋 Create, manage, and resolve Jira backlogs for security issues, exceptions, and risk items.
- 🛠️ Support rollout and implementation of SDLC, including documentation, exception handling, and compliance alignment.
- ⚙️ Work with dev & ops teams to integrate security into CI/CD pipelines (SAST, DAST, dependency scanning, compliance-as-code).
- 📚 Help develop and maintain security policies, standards, and procedures aligned with ISO 27001, SOC 2, PCI-DSS.
- 🛡️ Configure and optimize security tools & vulnerability scanners to improve detection and efficiency.
- 🏗️ Co-lead threat modeling & risk assessment workshops to evaluate architectural and operational risks.
- ✍️ Provide clear documentation and explain complex security concepts to stakeholders.
- Collaborate with architects, service owners, and SAP Global Security & Compliance contacts to create security concepts for critical projects.
- 👥 An opportunity to work in small, dynamic team with a startup mindset — all within a large international company.
- 🏡 Flexibility to work from home or from our modern office in Budapest.
- 💬 A supportive, collaborative, and motivational work environment where ideas truly matter.
- 💡 Be part of innovation — contribute to the development of cutting-edge applications.
- ⏰ Full-time role with flexible working hours.
- 💼 Enjoy a wide range of benefits and the stability that comes with working for a reputable, global organization.
- Hr call with the recruiter.
- Technical interview with the hiring team.
- Final interview with project team.
Create a free Caio profile to unlock more results and save your role and location preferences.
Unlock free search
Want help applying to roles like this?
Search Caio for free. If repetitive applications get heavy, Managed Job Search adds supervised execution for $99/month.
View Managed Job Search