Principal Security Operations Advisor

Join ABBYY and be part of a team that celebrates your unique work style. With flexible work options, a supportive team, and rewards that reflect your value, you can focus on what matters most – driving your growth, while fueling ours.

Our commitment to respect, transparency, and simplicity means you can trust us to always choose to do the right thing.

As a trusted partner for purpose-built AI and intelligent automation, we solve highly complex problems for our enterprise customers and put their information to work to transform the way they do business. Over 10,000 customers trust ABBYY, including many Fortune 500 ones. You will work on further developing a portfolio already containing client names such as DHL, Johnson & Johnson, FDA, DMV, PwC, KeyBank, Spotify, and H&R BLOCK.

As the Principal Security Operations Advisor, you will serve as a senior-level expert guiding the development, execution, and maturity of the organization’s security operations strategy. This role blends hands-on technical leadership with high-level advisory responsibilities, helping to protect critical assets, reduce risk, and ensure rapid threat detection and response across the enterprise.

Key Responsibilities: 

• Act as the strategic advisor to executive stakeholders on security operations capabilities, trends, and risk posture.
• Drive the design, implementation, and continuous improvement of the Security Operations Center (SOC) and associated processes (SIEM, SOAR, IR playbooks).
• Oversee threat detection, incident response, and threat intelligence programs; provide senior-level input on major incident handling.
• Advise on tooling, automation, and architecture for improving response times and reducing false positives.
• Perform gap assessments against NIST, MITRE ATT&CK, ISO 27001, or other frameworks to enhance operational readiness.
• Lead red/blue team coordination, purple teaming engagements, and tabletop exercises with cross-functional teams.
• Collaborate with cloud security, DevSecOps, and infrastructure teams to advise on secure monitoring for hybrid and multi-cloud environments.
• Mentor security analysts, engineers, and managers; shape training, hiring, and maturity roadmaps for the SOC.

Qualifications: 

• 8–12+ years of experience in Information Security, with 5+ years in Security Operations leadership roles.
• Proven experience advising CISOs and executive leadership on operational cybersecurity strategies.
• Deep understanding of modern SOC operations, including EDR, SIEM (e.g., Splunk, Sentinel), SOAR platforms, and threat intel tools.
• Hands-on knowledge of attacker TTPs, threat modeling, and frameworks such as MITRE ATT&CK, NIST CSF, and CIS Controls.
• Experience with cloud security monitoring (AWS, Azure, GCP) and containerized environments (Kubernetes).
• Strong communication and stakeholder management skills across technical and non-technical audiences.
• Preferred certifications: CISSP, GCIA, GCIH, GCFA, OSCP, or similar.

Nice to have 

• Strategic mindset with tactical fluency—able to align security ops with business goals.
• Calm under pressure; leads confidently during high-severity incidents.
• Passionate about mentorship and talent development.
• Data-driven decision-maker with strong analytical and risk-assessment capabilities.

Additionally, you will enjoy some of our local benefits such as:

• Work from home, remotely, or hybrid
• Partial compensation for glasses and lenses
• Private health insurance
• Volunteering Time Off (2 days/ year)
• SZÉP Card for recreational activities
• 3 extra days/ month for 'sick leave' without doctors visit
• Flexible working hours