2 months ago
Budapest, HungaryMid Level / Senior
Responsibilities
- Design and implement automated security workflows across detection, response, and remediation pipelines.
- Build integrations between SIEM/SOAR platforms, case-management systems, internal APIs, threat feeds, CVE databases, and asset inventories.
- Engineer SOAR playbooks for IOC lookups, containment, notifications, ticketing, enrichment, and escalation.
- Improve scripts, enrichment logic, and event-correlation rules to reduce false positives and expand automation coverage.
- Support Fluentd and OpenTelemetry monitoring pipelines with a security context.
- Provide engineering support during security incidents, including ad hoc response tooling, log aggregation, and Tier 2 support for Cyber Security Analysts.
- Collaborate with DevOps, system owners, and analysts to ensure tooling is effective, resilient, and context-aware.
- Align automation with internal policies and frameworks including IT-Grundschutz, ISO 27001:2022, and C5:2022.
- Maintain accurate documentation and support on-call duties when necessary.
Requirements
- Bachelor's degree in Cybersecurity, Computer Engineering, or a related technical field, or equivalent experience.
- Strong development or scripting experience with Python, Go, or Bash.
- 3–5 years of experience in a cybersecurity engineering or DevSecOps role.
- Experience designing and maintaining integrations among security platforms, including SIEM, SOAR, threat intelligence, and ticketing systems.
- Familiarity with SOAR tools such as Cortex XSOAR, Splunk SOAR, Tines, or TheHive/Cortex.
- Experience with Azure, AWS, or GCP cloud-native environments, including APIs and identity models.
- Strong knowledge of Docker, Kubernetes, and container security.
- Understanding of vulnerability management, CVE/CVSS standards, and patching challenges.
- Ability to build RESTful API integrations and security-focused data pipelines.
- Experience working in or supporting a SOC.
- Familiarity with Terraform, GitOps pipelines, and securing CI/CD workflows.
- Exposure to regulated environments and frameworks such as IT-Grundschutz, C5, ISO 27001, PCI-DSS, TISAX, and KRITIS.
Benefits
- Qualysoft emphasizes an open, transparent team culture where employees are treated as individuals.
- The company supports continuous learning, development, new ideas, and exposure to current technologies.
Categories
About Qualysoft
Qualysoft is a Vienna-headquartered IT services firm founded in 1999 that delivers CRM/ERP consulting, custom software development, test automation, integration, and application management for enterprises. It works on a project and managed-services basis across Central and Eastern Europe, supporting digitalization and data/BI initiatives. Privately held, the company serves clients in multiple industries.