Cloud Security DevOps Engineer (Budapest)

About the Position

Cloud Security DevOps Engineer (Budapest) | Deloitte

Full-Time

We are seeking a Cloud Security DevOps Engineer to support our Cloud Security Posture Management (CSPM) program. This role focuses on building, automating, and scaling security controls, remediation, and reporting capabilities across multi-cloud environments.

You will work within a hybrid operating model (pod + service area), contributing both deep hyperscaler expertise and horizontal service capabilities (Controls, CSPM Tooling, Remediation, Reporting).

This is a hands-on technical role with strong expectations for ownership, delivery, and measurable outcomes, not just advisory work.

Responsibilities

Core Engineering & Delivery

• Design, build, and maintain security controls across AWS, Azure, GCP, and other environments
• Develop solutions using CI/CD pipelines
• Implement automated compliance checks aligned to internal and industry standard frameworks
• Build and optimize remediation automations to reduce manual effort and improve MTTR
• Integrate CSPM tooling with enterprise workflows (ServiceNow, Jira, etc.)

CSPM Capability Enablement

• Deliver and operationalize new CSPM capabilities (features, controls, integrations)
• Contribute to LoB onboarding and adoption, including enablement materials and self-service guides
• Define and track adoption, coverage, and value metrics
• Reduce false positives and alert noise through tuning, data analysis, and control improvements

Operations & Continuous Improvement

• Contribute to monthly service health reporting and dashboards (team and stakeholder facing)
• Analyze operational metrics and drive quarterly service improvement initiatives
• Support incident intake and alert routing via ServiceNow and other systems
• Implement and mature processes for:
  • Alert ownership & routing
  • Exception handling
  • False-positive tracking
  • Asset attribution

Cross-Team Collaboration

• Partner with engineering, cloud platform, and LoB teams to align security controls and remediation
• Support audit and compliance requirements through reporting and data transparency
• Work across global teams and time zones
• Contribute to shared knowledge and enablement

Ownership Delivery Expectations

• Independently own and deliver complex workstreams or features end-to-end
• Provide clear status, risks, and outcome reporting
• Contribute to strategic improvements, not just task execution
• Act as a senior technical contributor or functional SME within assigned areas

Requirements

Experience & Level

• 4+ years in cloud security / DevSecOps / platform engineering
• Operating as a SecDevOps engineer at an expert level
• Proven track record of delivering complex, automation-driven cloud security solutions at enterprise scale

Technical Expertise

• Strong experience in at least one hyperscaler (AWS, Azure, or GCP); multi-cloud preferred at large enterprise scale
• Deep knowledge of:
  • Security as Code / Policy as Code
  • Infrastructure as Code (Terraform preferred)
  • CI/CD security integration
• Strong programming skills in Python (preferred), Go, or Java
• Experience with:
  • CSPM / CNAPP platforms (e.g., Orca, Prisma, Wiz, Defender)
  • Cloud-native security services
  • Kubernetes security (preferred)

Security & Compliance

• Strong understanding of:
  • Cloud security architecture
  • Vulnerability management
  • Compliance frameworks and control design
• Experience developing and tuning:
  • Detective controls
  • Compliance rules
  • Alerting pipelines

Operational Tooling

• Experience integrating and operating:
  • ServiceNow (incident/request workflows)
  • Jira (Agile delivery, KPI tracking)
  • Git-based workflows
• Familiarity with:
  • Monitoring & logging pipelines
  • Reporting/data platforms

Ways of Working

• Strong data-driven problem solving mindset
• Experience in Agile / continuous improvement environments
• Ability to:
  • Work independently with minimal direction
  • Navigate ambiguity and complex systems
  • Drive alignment across multiple stakeholders

Nice to Have

• Experience in SAP cloud environments or enterprise-scale CSPM programs
• Experience reducing false-positive rates and improving signal quality
• Background in platform engineering / SRE practices
• Exposure to asset inventory / ITAM integrations
• Experience delivering self-service security capabilities

We Offer

• Competitive salary
• Opportunity to work in a dynamic and innovative environment
• Professional growth and development opportunities
• Collaborative and inclusive team culture

About the Company

Deloitte is a global leader in providing audit, consulting, financial advisory, and tax services. We are committed to helping our clients succeed and thrive in an ever-changing business landscape.

Success in This Role (First 6–9 Months)

You will be successful if you:

• Deliver at least one CSPM capability or control set into production
• Contribute to measurable improvements in:
  • False-positive reduction
  • Remediation rates
  • Adoption of CSPM features
• Help establish clear ownership and routing for alerts
• Build or enhance automation that reduces manual workload
• Contribute to service metrics, dashboards, and reporting maturity

Team & Operating Model

• Pod-based (Vertical): Hyperscaler alignment (AWS, Azure, GCP, etc.)
• Service Areas (Horizontal):
  • Controls
  • CSPM Tooling
  • Remediation Assistance
  • Reporting

You will operate across both dimensions, ensuring:

• Consistency in services
• Depth in platform expertise
• Scalable, reusable solutions

Team Culture

We value:

• Outcomes over activity
• Data-driven decisions
• Ownership and accountability
• Collaboration and knowledge sharing
• Sustainable pace and work-life balance
• Innovative spirit

Some important details:

1. The project is planned for 3 years, but our current contract ends 31.12.2026, with a 99% extension probability, but not certainty.

2. The role also requires working from the end client's office in Budapest 1 day per week, and from our client's office 1–2 times per month.

Apply now