{"id":118942,"url":"https://alion.io/job/qualysoft-security-consultant-ai-driven-threat-management","title":"Cyber Security Analyst - AI-Driven Threat Management","company":{"id":6361,"name":"Qualysoft","domain":"qualysoft.com","url":"https://alion.io/company/qualysoft","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":74,"open_postings":68,"ghost_share":0.515,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":21,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Budapest, Hungary"],"countries":["HU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19500,"max_usd":57000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Datadog","optional":false},{"name":"Docker","optional":false},{"name":"ElasticSearch","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"OpenSearch","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-08-24T13:00:18Z","employer_posted_date":"2026-08-24","last_verified_at":"2026-11-01T15:38:05Z","board_verified":true,"closed_at":null,"days_open":69,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":68},"description":"Position Overview\nWe are looking for a Security Consultant - AI-Driven Threat Management to join our cybersecurity team in Budapest. The role focuses on security monitoring, alert triage, threat detection, incident investigation and threat hunting across cloud and hybrid environments. The position operates at Tier 1-2 level, with close collaboration with internal stakeholders and escalation to Tier 3 / Incident Response teams when required. The role includes participation in a 24/7 on-call rotation\nKey Responsibilities\nMonitor and respond to security alerts in a 24/7 security operations environment, including participation in an on-call rotation\nPerform initial security alert triage and validation using logs, telemetry and contextual information\nInvestigate security events in collaboration with internal stakeholders and system owners\nEscalate confirmed or high-risk incidents to Tier 3 or Incident Response teams with detailed technical findings\nDevelop, tune and continuously improve detection rules, alert logic and correlation use cases based on real-world threats and the MITRE ATT&CK Framework\nSupport and co-lead security investigations, including identifying root causes, lateral movement and potential data exposure\nConduct threat hunting and purple teaming exercises to proactively identify novel threats\nContribute to the development and continuous improvement of SOC playbooks, investigation runbooks and incident response procedures\nSupport the customization of security response strategies for cloud infrastructure environments, including SAP Cloud Infrastructure\nCreate and maintain security dashboards, metrics and KPIs to monitor SOC effectiveness and threat landscape trends\nParticipate in lessons-learned reviews and provide recommendations for improving security detection and response processes\nRequirements\n2-4 years of experience in a Security Operations Center (SOC) or cybersecurity operations role, preferably in cloud-based or hybrid environments\nHands-on experience with security monitoring and workload protection in public cloud environments such as Microsoft Azure, AWS or GCP\nPractical experience with security alert triage, basic forensic analysis and incident response support\nExperience investigating cloud-native security events, such as IAM misconfigurations, insecure storage, compromised credentials or unusual container activity\nHands-on experience with at least one SIEM platform, such as Splunk, ElasticSearch, OpenSearch or DataDog\nExtensive familiarity with security logging and monitoring tools, SIEM platforms ... and Threat Intelligence Platforms\nProven experience creating, maintaining or tuning detection rules and custom security alerts\nGood understanding of cloud-native security principles, networking protocols, Linux internals and common security controls\nFamiliarity with Docker, Kubernetes and other container technologies\nKnowledge of the MITRE ATT&CK Framework and NIST incident handling lifecycle\nBasic understanding of malware behavior and security investigation techniques\nExperience developing or using incident handling playbooks and security runbooks\nBasic understanding of security within Infrastructure as Code (IaC) and static code analysis tools\nGood scripting and automation skills in Python, PowerShell or Bash are an advantage\nBachelor’s degree in Computer Science, Information Security or a related technical field, or equivalent practical experience\nPreferred Certifications\nCompTIA Security+\nGIAC GSEC / GCIH\nEC-Council CEH\nMicrosoft SC-200","description_format":"text","description_chars":3525,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Hungary","iso":"HU","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-08-24T13:00:18Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.336,"p_room":0.28,"age_days":68,"expected_fill_days":21,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:junior"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/qualysoft-security-consultant-ai-driven-threat-management","json_url":"https://alion.io/job/qualysoft-security-consultant-ai-driven-threat-management.json","meta":{"generated_at":"2026-11-01T16:26:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25386,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6361},"rest":"https://alion.io/mcp/rest/get_company?id=6361"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fqualysoft-security-consultant-ai-driven-threat-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fqualysoft-security-consultant-ai-driven-threat-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fqualysoft-security-consultant-ai-driven-threat-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/qualysoft-security-consultant-ai-driven-threat-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fqualysoft-security-consultant-ai-driven-threat-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":118942}},{"tool":"search_jobs","arguments":{"company":"qualysoft.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":118942},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}