Cyber Security Advanced Investigation Expert

The essence of the position\:

The Cyber Security Advanced Investigation Expert performs incident handling related tasks with special focus on Forensics & Malware Analysis and provides advanced investigation tasks and deep analysis skills for Cyber Security Incident Response and Advanced Investigation team.

Acts as part of a team in relation to identified events for the relevant technical support groups, businesses at risk and Service Recovery teams both internally and externally.

He/She also works closely with other internal teams to provide oversight of emergency response to information security incidents to quickly identify, respond, and mitigate the risk from Information Security incidents that impact the firm.

Does it resonate with you?

Then your place is here with us as a Cyber Security Advanced Investigation Expert based in Budapest MOL Campus

Main responsibilities\:

Security and Privacy Incident Response

• Identify cybersecurity threats and perform analysis of reported anomalies on networks and systems.
• Mitigate and contain identified threats
• Initiate escalation procedures and incident response processes
• Works as part of a multidisciplinary team in the delivery of information security and privacy response services to the global retail and commercial enterprise.
• Responsible for the management of events, including notification, escalation response and post incident review.
• Delivers the execution of triage controls to detect and prevent attackers from infiltrating company information or jeopardizing e-commerce programs.
• Escalates to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information.
• Delivers recommendations and actions to improve the detection, escalation, containment and resolution of data security incidents.

Initiative Delivery

• Establish and deliver detection & incident response methods, tools and processes which provide the organization value by reducing risk.
• Identify trends, potential new technologies, and emerging threats which may impact the whole business
• Deliver response focused initiatives leveraging experience in doing so previously.

General Advice and Guidance

· Provide support in relation to the other teams and functions as and when dictated by workloads and deadlines.

· Provide general advice and guidance on Information Security related matters when required.

· Provision of out of hours support and investigation as and when required.

Main requirements\:

• University / college degree in Computer Science, Engineering or related field
• 5+ years experience in Security/Cyber Defence
• Proven track record of working Global IT services (Global IT security services preferable)
• Previous security operations centre experience is desire
• Understanding of networking protocols and infrastructure designs; including routing, firewall functionality, host and network intrusion detection/prevention systems, encryption, load balancing, and other network protocols.
• Has an understanding of emerging security technologies.
• Solid knowledge of processes and workflows for SIEM environments
• Ability to convey security concepts related cybersecurity events to both technical and non-technical audiences
• One or more of the following\: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA)
• Background in one or more of the following\: Anti-Malware, Vulnerability Management, Intrusion Detection/Protection, Perimeter Security, Security Incident Management, Security Risk Assessments, Information protection, Security Information and Event Management (SIEM), Penetration Testing (application, network, host, social)
• Ability to recognize security events of interest
• Background with enterprise security products, such as firewalls, next generation firewalls, IDPS, WAF, AV, DDoS prevention, AV, content and URL filtering, etc
• Knowledge of and experience with security monitoring methodologies such as packet capture, flow data, patterns, watch lists, black lists, log parsing, correlation, classification, event generation and filtering.
• Experience with Linux/Unix
• Understanding of current hacking techniques, vulnerability disclosures, data breach incidents and security analysis techniques
• Excellent demonstrable oral and written communication skills in English, Slovakian (advantage), Croatian (advantage)

What we offer\:

• A working location in 11th district
• Flexi time, home office possibilities, 2 HO per week
• Work together and learn from experienced team
• Project related travelling possibilities in the region
• Career opportunities within MOL Group
• Annual bonus
• Maximalized - Gross 800.000 HUF - annual fringe benefits (with elements of SZÉP card, All you can move card, culture and sport event, health and pension insurance allowance, etc)
• Loyalty bonus (after 3 years of employment)
• Support at all stages of family life – baby born allowance, extra paid paternity leave, paid leave for single parents, MOL Égigerő kindergarten support and MOL Campus Égigerő daycare, school start support, student loan support)
• Support in difficult situations (health insurance support for employees with diability,advance salary payment, etc.)
• Preparation for retirement (pre-retirement support, pensioner benefits, company loyalty program)
• Awards and recognitions (extra leave days, project reward, leadership reward, etc.)
• Support for physical and mental well-being (fitness center, health programs and company help line)
• Other company benefits (MOL partner benefits, discounted fueling)
• Community building (MOL open day, family days, cooking days, Christmas concert)
• Discounted phone fleet package for family members
• Discounted MediCare health insurance for family members
• Life and accident insurance
• Travel allowance - 40 HUF/km

How to apply?

If you wish to form the future with us, please submit your applications via our career site\: [external link] or contact Andrea Juhász on +36 20 931-1239 or [email protected] or connect with me on Andrea Juhasz - Senior Recruitment Specialist - MOL Group | LinkedIn

At MOL Group, we know that our strength lies in diversity. During the selection process, we provide equal opportunities to all applicants with the appropriate qualifications and work experience, regardless of age, gender, disability, or reduced work capacity, sexual orientation, or ethnicity. At MOL Group, everyone matters.

If you have any specific needs related to your reduced work capacity at any stage of the recruitment process, please inform our recruitment team! We are happy to assist.