Senior IT Security Engineer
Employer · Grepton
Cybersecurity specialistNetwork engineerSystem administratorFlexibleFull-timeBudapest
We are looking for a hands-on security specialist who doesn't just see red on the dashboard, but understands the actual risk and what's genuinely worth fixing. Someone who sees the big picture, loves untangling problems, and doesn't believe that "let's block it" or "the firewall will catch it" is the right answer to everything.
Tasks
- Design, implement, and maintain security controls across infrastructure, identity, endpoints, and cloud
- Drive vulnerability management from assessment and prioritization to remediation tracking
- Turn NIS2, ISO 27001, DORA, and GDPR requirements into genuinely working technical controls
- Handle and investigate security incidents, build IR playbooks
- Work on logging, monitoring, and detection strategy, develop SIEM/SOC use cases
- Participate in security architecture decisions, technology selection, and POCs
- Document and share knowledge
Conditions & benefits
Real input into security decisionsNot just executing what someone else has decided, because we are also curious about how you would do it.Diverse tech stackWhere you likely won't be solving the exact same three problems over and over again.Professional leeway and growth opportunitiesBecause a senior role isn't senior just because the ticket list is longer.Hybrid and flexible working arrangementsBecause we don't try to measure good work by the number of hours spent in an office chair.Training supportTo give you the opportunity to keep up with the profession.Language training opportunitiesIf you want to use English more confidently.Modern, comfortable office environmentWhere it's not a tragedy to come in even when you're not working from home.Private healthcare supportSo that making an appointment ideally doesn't turn into a separate project plan.Competitive compensation packageWith elements you can actually use.Direct, supportive teamWhere you can ask questions, debate, and brainstorm.
Requirements
- At least 5 years of solid security experience, independently completed projects, and real incident response background.
- Technically, it's great if you are at home with: AD / Entra ID · MFA · Conditional Access · PKI · Azure / M365 Security · EDR/XDR · hardening · firewall · segmentation · VPN · NAC · SIEM · MITRE ATT&CK · threat hunting · DLP · vulnerability management · CVSS / EPSS · PowerShell / Python
- We'd love to see at least two of these: SC-200, SC-300, AZ-500, MS-102, or vendor network security certifications (Fortinet, Palo Alto, Cisco, Check Point).
- You touch production systems with a backup and rollback plan in place
- You know how to prioritize even when reports say everything is urgent
- You dare to speak up if something is a bad idea, ideally offering what you would do instead
- You can talk about security so that not only other security folks understand