Cyber Security Advanced Investigation Expert (Endpoint Detection & Response at MOL Group

Budapest, Central Hungary, Hungary -

Full Time

Start Date

Immediate

Expiry Date

15 Jun, 26

Salary

0.0

Posted On

17 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Incident Handling, Forensics, Malware Analysis, Endpoint Detection & Response, Cyber Defence, Threat Analysis, Incident Response, Information Security, Privacy Response, Triage Controls, Detection Improvement, Containment, Resolution, SIEM, Packet Capture, Linux/Unix

Industry

Oil and Gas

Description

Are you interested in incident handling related tasks with special focus on Forensics & Malware Analysis, advanced investigation within the Cyber Security Incident Response and Advanced Investigation team? Do you have variety of experience to be obtained in IT/OT cyber defence? Would you like to work in a great international team in a next generation workplace? If yes, then your place is here with US! Join US to become a part of one of the biggest and most dynamic international Oil and Gas companies in Central & Eastern Europe as a Cyber Security Advanced Investigation Expert based in our Budapest MOL Campus Responsibilities: Identify cybersecurity threats and perform analysis of reported anomalies on MOL Group networks and systems. Mitigate and contain identified threats using approved methodologies when detected. Initiate escalation procedures and incident response processes as defined in operational plans. Works as part of a multidisciplinary team in the delivery of information security and privacy response services to the global retail and commercial enterprise. Responsible for the management of events, including notification, escalation response and post incident review. Delivers the execution of triage controls to detect and prevent attackers from infiltrating company information or jeopardizing e-commerce programs. Escalates to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information. Delivers recommendations and actions to improve the detection, escalation, containment and resolution of data security incidents. Initiative Delivery Establish and deliver detection & incident response methods, tools and processes which provide the organization value by reducing risk. Identify trends, potential new technologies, and emerging threats which may impact the whole business Deliver response focused initiatives leveraging experience in doing so previously. General Advice and Guidance Provide support in relation to the other teams and functions as and when dictated by workloads and deadlines. Provide general advice and guidance on Information Security related matters as and when required. Provision of out of hours support and investigation as and when required. Requirements: Studies: University/College degree in Computer Science, Engineering or related field Experience: 5+ years’ experience in Security/Cyber Defence, Hard competencies: Proven track record of working Global IT services (Global IT security services preferable), Broad Information Security knowledge, Previous security operations centre experience is desired, Understanding of networking protocols and infrastructure designs; including routing, firewall functionality, host and network intrusion detection/prevention systems, encryption, load balancing, and other network protocols, Demonstrable ability to take ownership of incidents through to resolution, Understand potential business impact of a cyber incident, Thorough understanding of security principles, practices and standards and how they translate into real world process solutions, Has an understanding of emerging security technologies, Ability to convey security concepts related cybersecurity events to both technical and non-technical audiences, Good awareness of IT Support processes, such as ITIL, Background in one or more of the following: Anti-Malware, Vulnerability Management, Intrusion Detection/Protection, Perimeter Security, Security Incident Management, Security Risk Assessments, Information protection, Security Information and Event Management (SIEM), Penetration Testing (application, network, host, social), Solid knowledge of processes and workflows for SIEM environments, Ability to recognize security events of interest, Background with enterprise security products, such as firewalls, next generation firewalls, IDPS, WAF, AV, DDoS prevention, AV, content and URL filtering, etc, Knowledge of and experience with security monitoring methodologies such as packet capture, flow data, patterns, watch lists, black lists, log parsing, correlation, classification, event generation and filtering, Experience with Linux/Unix, Understanding of current hacking techniques, vulnerability disclosures, data breach incidents and security analysis techniques One or more of the following: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA) Language skills: Active level of English, Slovakian (advantage), Croatian (advantage) What we offer: A working location in 11th district Unique opportunity to participate in challenging and various projects Flexi time, home office possibilities - 2 per week Work together and learn from experienced team Project related travelling possibilities in the region Career opportunities within MOL Group Annual bonus Maximalized - Gross 800.000 HUF - annual fringe benefits (with elements of SZÉP card, All you can move card, culture and sport event, health and pension insurance allowance, etc) Support at all stages of family life – baby born allowance, extra paid paternity leave, paid leave for single parents, MOL Égigerő kindergarten support and MOL Campus Égigerő daycare, school start support, student loan support) Support in difficult situations (health insurance support for employees with diability,advance salary payment, etc.) Preparation for retirement (pre-retirement support, pensioner benefits, company loyalty program) Awards and recognitions (extra leave days, project reward, leadership reward, etc.) Support for physical and mental well-being (fitness center, health programs and company help line) Other company benefits (MOL partner benefits, discounted fueling) Community building (MOL open day, family days, cooking days, Christmas concert) Discounted phone fleet package for family members Discounted MediCare health insurance for family members Life and accident insurance Travel allowance - 40 HUF/km Help us to achieve our vision: to be the first choice for customers in fuel and convenience retailing and to become a power brand in our core markets. Please visit our site to get familiar with our strategy: www.molgroup.info/strategy2030/ If you wish to form the future with us, please submit your applications via our career site www.mol.hu/karrier or if you have any questions contact Andrea Juhász on +36 20 931-1239 or andreajuhasz@mol.hu or connect with me on LI: Andrea Juhasz - Senior Recruitment Specialist - MOL Group | LinkedIn At MOL Group, we know that our strength lies in diversity. During the selection process, we provide equal opportunities to all applicants with the appropriate qualifications and work experience, regardless of age, gender, disability, or reduced work capacity, sexual orientation, or ethnicity. At MOL Group, everyone matters. If you have any specific needs related to your reduced work capacity at any stage of the recruitment process, please inform our recruitment team! We are happy to assist. #LI-KKI

Responsibilities

The role involves identifying and analyzing cybersecurity threats and anomalies on networks and systems, followed by mitigating and containing identified threats using approved methodologies. Responsibilities also include managing events, executing triage controls, and delivering recommendations to improve security incident handling processes.