Security Engineer
- Job Reference:
- 2024-1684
- Location:
- Budapest
- Category:
- Technology
- Solution:
- Other
MSCI is building a world-class information security and IT risk program. We are moving beyond industry best practices and charting a path towards automation and resilience. Our cyber team has met its Board-driven obligations against the NIST cybersecurity framework, and we have achieved certifications against ISO 27001:2022, SOC1, SOC2, SOX and other control sets. Our strategy now focuses on attack simulation to improve our defensive and detection capabilities.
Over time, we expect the cyber and IT risk regulatory environment to increase in its complexity and rigor. We also expect that cyber threat actors will get more sophisticated. This role will help to shape and drive our approach towards these risks, which supports the broader business growth strategy of the firm by building trust with our clients.
This role involves working as a member of the Security Engineering team on key and strategic projects to strengthen our defensive controls. Since we are also simultaneously building new detection capabilities alongside these new defensive controls, we expect candidates to work in close collaboration with our Security Operations team – hence we highly value strong communication and teamwork.
Successful candidates will have the opportunity to work with different businesses and other departments across MSCI. A candidate Security Engineer will work across architecture, governance, business and technology groups to advise and build security solutions to improve our posture and reduce risk to the firm and our clients.
Support the overall cyber strategy of the firm (using MITRE ATT&CK and D3FEND to improve defensive and detection controls) to address cyber threats.
Implement enterprise-grade controls to address cyber risks.
Use existing tools to identify and analyze security risks and control gaps.
Make recommendations to senior management on how to obtain more value from existing tools and how to reduce risk in an efficient manner.
Advise internal application development (DevOps) stakeholders on how to rebuild applications “from scratch”, assuming a worst-case cyber scenario.
Support occasional client and auditor requests for control evidence in areas where you are a subject matter expert.
At times, serve as an internal consultant for matters involving security engineering.
Create design documents, implementation guides and other relevant documentation.
Be able to constructively influence partners across the organization to accomplish tasks.
Be an organized and thoughtful communicator.
Have a focus on team building and collaboration; we do not want siloed workers.
Have a strong foundation of IT skills (operating systems, database, network, etc.)
Have experience working with software developers and familiarity with modern software development practices.
Have a strong grasp of the MITRE ATT&CK framework.
Have prior experience working in a security operations, engineering, or architecture role.
Be fluent in scripting languages to collect / analyze data and build reporting dashboards.
Hands-on experience with Linux and Windows operating systems.
Experience building new controls and ensuring that they are effective and sustainable.
Knowledge of major cloud providers and Kubernetes architectures.
Certifications in cloud infrastructure, cybersecurity, Linux OS are all helpful to demonstrate your knowledge.
At least 4 years of relevant experience.
What we offer you
At MSCI we are passionate about what we do, and we are inspired by our purpose – to power better investment decisions. You’ll be part of an industry-leading network of creative, curious, and entrepreneurial pioneers. This is a space where you can challenge yourself, set new standards and perform beyond expectations for yourself, our clients, and our industry.
MSCI is a leading provider of critical decision support tools and services for the global investment community. With over 50 years of expertise in research, data, and technology, we power better investment decisions by enabling clients to understand and analyze key drivers of risk and return and confidently build more effective portfolios. We create industry-leading research-enhanced solutions that clients use to gain insight into and improve transparency across the investment process.
MSCI Inc. is an equal opportunity employer. It is the policy of the firm to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, creed, age, sex, gender, gender identity, sexual orientation, national origin, citizenship, disability, marital and civil partnership/union status, pregnancy (including unlawful discrimination on the basis of a legally protected parental leave), veteran status, or any other characteristic protected by law. MSCI is also committed to working with and providing reasonable accommodations to individuals with disabilities. If you are an individual with a disability and would like to request a reasonable accommodation for any part of the application process, please email Disability.Assistance@msci.com and indicate the specifics of the assistance needed. Please note, this e-mail is intended only for individuals who are requesting a reasonable workplace accommodation; it is not intended for other inquiries.
To all recruitment agencies
MSCI does not accept unsolicited CVs/Resumes. Please do not forward CVs/Resumes to any MSCI employee, location, or website. MSCI is not responsible for any fees related to unsolicited CVs/Resumes.
Note on recruitment scams
We are aware of recruitment scams where fraudsters impersonating MSCI personnel may try and elicit personal information from job seekers. Read our full note on careers.msci.com
MSCI is committed to providing a competitive benefit package to you and, where applicable, your family. You are entitled to an extensive range of core benefits along with a range of cafeteria benefits.
Core benefits:
Cafeteria benefits:
Guided by your manager, our learning and development opportunities empower you to perform at your best, make an impact and shape your career.
Career paths are multidirectional and we believe new and challenging experiences drive personal growth and innovation. With access to LinkedIn Learning Pro and our bespoke Learning@MSCI platform, you can easily customize and tailor your learning journey to accelerate your career.
Kassák Lajos utca 19-25
1134 Budapest
Hungary
Our Budapest office, located in the XIIIth district of the city, occupies the top three floors of the first LEED-Platinum-certified building in Hungary. As MSCI’s second-largest office, a wide variety of teams and functions are represented here, and each Wednesday we host in-person and hybrid events to nurture inter-departmental relationships. You’ll also find a wide variety of collaboration spaces, private rooms for 1:1s, relax rooms to help you recharge and showers for colleagues who like to exercise before work. Learn more about MSCI's Budapest office.
First, click Apply and upload a CV that shows us the skills and passion you could bring to this role, as well as your contact details so we can reach out to you.
If you look like a good match, our recruiters will arrange a chat where we’ll ask about your motivations, experience, and background, and where you can ask us anything you want to know about working at MSCI.
If you like what you hear, and we think you have what we need, then it’s time to interview with your future team, either virtually or in the office. These interviews will give you a clear insight into the team and the day-to-day responsibilities of the role. Read our interview top tips.
If you’re successful, we’ll make you an offer and give you any further information you need to help you make your decision. If the answer is yes, it’s time for some background checks, and then we’ll welcome you on board. Learn more about our onboarding experience.