mid-level SOC security engineer
Employer · MVM
Cybersecurity specialistFlexibleFull-timeBudapest
The MVM team in Budapest is looking for a mid-level SOC security engineer. Your tasks will include developing and maintaining detection logic and use cases, analyzing alerts, and performing configuration and operational tasks for security systems used in the SOC.
Tasks
- Implementation, maintenance, and documentation of detection logic, use cases, and correlation rules based on senior expert guidance.
- Developing use cases based on threat intelligence (CTI), incident experience, audit findings, and operational feedback.
- Participating in the creation and maintenance of the detection rule system.
- Analyzing and evaluating the quality of alerts generated in the SOC to improve the signal-to-noise ratio.
- Identifying the causes of false positives and making rule and threshold adjustments.
- Fine-tuning alert priorities and severity levels considering business impacts.
- Supporting the operation of SOAR automations and playbooks.
- Testing automations, reporting detected errors, and documenting them.
- Participating in implementing necessary corrections.
- Ensuring that automated steps do not compromise operational functioning.
- Performing configuration and operational tasks for security systems used in the SOC (specifically SIEM, SOAR, EDR/NDR, log collection, and correlation components).
- Participating in testing and deploying new features and versions.
- Ensuring system integration with other IT and security solutions (log sources, endpoint protection, network devices).
Conditions & benefits
competitive salaryperformance-based bonus or premiumcontinuous professional development opportunitiesinternal and external trainings, conferencescomprehensive cafeteria benefits packagecafeteria, health insurance, accident insurance, pension savingsrecreational and sports opportunities, eventsmobility supportprovision of a laptop and mobile phone for workrewarding outstanding performanceflexible working hourscorporate leisure and professional events
Requirements
- you have at least 3 years of experience in IT security, SOC, or incident management
- you have a higher education degree in IT, technical fields, or information security
- you have practical experience in the technical analysis and handling of security events
- you are fluent in English in a professional environment
- you are precise, analytical, and not afraid of complex technical challenges