KNOWLEDGE AND EXPERIENCE:

• Considerable hands-on experience with incident response methodologies, including detection, analysis, containment, eradication, and recovery.
• Familiarity with security frameworks such as NIST, MITRE ATT&CK, and SANS.
• Proficiency with security technologies and platforms (e.g., SIEMs like Splunk, LogRhythm; EDR tools like CrowdStrike, CarbonBlack; firewalls, IDS/IPS systems).
• Understanding of digital forensics, including evidence collection, chain of custody, and data analysis techniques.
• Strong understanding of network protocols, operating systems (Windows, Mac, and Linux), and web applications.
• Experience within cloud platforms (AWS, Azure, GCP) and security implications within cloud environments.
• Knowledge of relevant regulatory requirements (e.g., GDPR, HIPAA, PCI-DSS, NIS2, CMMC) and how they relate to incident management and reporting.

WHAT SUCCESS LOOKS LIKE IN THIS ROLE:

We are a global technology solutions company that powers breakthroughs for the world’s leading organizations. These solutions — digital workplace, cloud, applications & infrastructure, enterprise computing and business process solutions, cybersecurity — help people overcome obstacles and not only reach their greatest potential but go beyond it.
Due to our continuous growth, we are looking for an experienced and dynamic Cybersecurity (Detection & Response) Senior Engineer/Lead. This primarily remote role is based in Hungary, with occasional travel including visits to our Budapest offices.

KEY RESPONSIBILITIES:

• Lead and assist in the detection, analysis, and resolution of security incidents, including malware outbreaks, network intrusions, and data breaches.
• Perform in-depth analysis of security events and provide actionable intelligence to prevent future incidents.
• Conduct post-incident analysis to determine the root cause of incidents and assist in developing mitigation strategies to prevent recurrence along with details notes inside a standard RCA template.
• Maintain detailed records of security incidents, including timelines, actions taken, and outcomes.
• Work closely with other internal teams, such as IT, legal, and compliance, to mitigate and remediate security incidents and provide necessary incident reporting.
• Provide clear and concise incident reports and updates to senior management and relevant stakeholders.

YOU WILL BE SUCCESSFUL IN THIS ROLE IF YOU HAVE:

• Certifications: Ideally relevant certifications such as Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or similar.
• Familiarity with scripting or automation (Python, Bash, PowerShell) for incident investigation and response tasks.
• Advanced Threat Detection: Knowledge of advanced persistent threats (APT) and advanced techniques used by cybercriminals and state-sponsored actors.