Cloud Security Expert

Are you passionate about securing cloud-native applications and driving best-in-class security practices? Our client is looking for a Cloud Security Expert to join our dynamic team and help us build secure, resilient systems.

Skills and Requirements

• Proven experience in software security, DevSecOps, or application security engineering.
• Familiarity with SDLC and secure operational practices.
• Expertise with security tools & methodologies: SAST, DAST, vulnerability scanners (Tenable/Nessus, Rapid7, Aquasec/Trivy, Black Duck, CheckMarx, Fortify, Coverity).
• Experience with SIEM systems like Splunk or Elastic.
• Comfortable using Jira or similar ticketing systems.
• Strong understanding of compliance standards (ISO 27001, SOC 2, PCI-DSS).
• Analytical and problem-solving skills, able to turn complex findings into actionable plans.
• Experience moderating Threat Modelling workshops, familiarity with STRIDE.
• Deep knowledge of cloud-native development, containers & Kubernetes.
• Development experience in Javascript and/or Python and/or Golang.
• Exposure to major cloud providers (AWS, Azure, GCP) or with OpenStack.
• Nice to have: familiarity with physical datacenter infrastructure (storage, network, hypervisors like KVM).

About the role

• Conduct security and risk assessments across applications and systems to identify vulnerabilities.
• Collaborate with our security colleagues to set up Frontier AI scanning capability, analye technical findings, manage backlog (including false positives), and improve our security posture.
• Create, manage, and resolve Jira backlogs for security issues, exceptions, and risk items.
• Support rollout and implementation of SDLC, including documentation, exception handling, and compliance alignment.
• Work with dev & ops teams to integrate security into CI/CD pipelines (SAST, DAST, dependency scanning, compliance-as-code).
• Help develop and maintain security policies, standards, and procedures aligned with ISO 27001, SOC 2, PCI-DSS.
• Configure and optimize security tools & vulnerability scanners to improve detection and efficiency.
• Co-lead threat modeling & risk assessment workshops to evaluate architectural and operational risks.
• Provide clear documentation and explain complex security concepts to stakeholders.
• Collaborate with architects, service owners, and SAP Global Security & Compliance contacts to create security concepts for critical projects.

Benefits

• An opportunity to work in small, dynamic team with a startup mindset — all within a large international company.
• Flexibility to work from home and from our modern office in Budapest (hybrid with focus on remote days).
• A supportive, collaborative, and motivational work environment where ideas truly matter.
• Be part of innovation — contribute to the development of cutting-edge applications.
• Full-time role with flexible working hours.
• Enjoy a wide range of benefits and the stability that comes with working for a reputable, global organization.

For more information – please apply for this job.

Cavendish (Recruitment) Professionals Ltd are proud to be an equal opportunity employer and we believe that inclusivity begins with the candidate experience. All qualified applicants will receive consideration for employment regardless of, gender, race, age, sexual orientation, religion, or belief.