Security Engineer

Introduction

We are seeking a proactive and technically skilled Security Engineer to join IBM's Cloud Platform Development team in Budapest. This role is perfect for someone who thrives on solving complex problems through automation and is passionate about building scalable, efficient, and secure systems. You will play a key role in ensuring our platform meets regulatory and security standards by engineering solutions that streamline and strengthen our compliance posture, rather than just filling out templates.

Your Role and Responsibilities

• Design and implement automated solutions to support security and compliance activities, including evidence collection, control validation, and audit readiness.
• Collaborate with development teams to embed security and compliance into CI/CD pipelines and infrastructure-as-code workflows.
• Identify opportunities to optimize and reduce manual effort in recurring compliance tasks through scripting, tooling, and integration.
• Conduct risk assessments, threat modeling, and vulnerability analysis with a strong focus on automation and repeatability.
• Lead and support internal and external audits (e.g., SOC 2, ISO 27001, PCI DSS), ensuring timely and efficient evidence gathering.
• Maintain and evolve security policies, procedures, and documentation with an emphasis on clarity and automation.
• Stay current with emerging security threats, compliance frameworks, and automation technologies.

Required Technical and Professional Expertise

• Exposure to programming/scripting skills (e.g., Python, Bash, Go) and experience building automation tools.
• Exposure to cloud platforms (IBM Cloud, AWS, Azure, or GCP) and cloud-native security practices.
• Good understanding of DevSecOps principles and integrating security into development workflows.

Preferred Technical and Professional Experience

• Exposure to compliance frameworks.
• Exposure to infrastructure-as-code tools (e.g., Terraform, Ansible) and CI/CD platforms (e.g., GitHub Actions, Jenkins).
• Exposure to emerging AI technologies and modern AI-assisted code generation to enhance productivity and streamline compliance workflow.
• Exposure to container security (e.g., Kubernetes, Docker).
• Exposure to developing internal tools or dashboards for compliance visibility and reporting.

Key skills/competency

• Security Automation
• Compliance Engineering
• Cloud Security
• DevSecOps
• Risk Assessment
• Threat Modeling
• Vulnerability Analysis
• CI/CD Integration
• Scripting (Python, Bash, Go)
• Audit Management