Open to opportunities

Marcell Ujlaki

@marcellujlaki

Message

I build detection and incident response systems for complex cloud and blockchain environments.

Hungary

Message

What I'm looking for

I'm looking to build and improve detection, threat-hunting, and incident-response capabilities for complex cloud-native, Kubernetes, or blockchain environments, with opportunities to apply threat intelligence and strengthen security operations.

At Grey Technologies, I lead detection engineering and incident handling for P2P.org, building a security monitoring ecosystem and alert-to-case pipeline aligned with NIST CSF.

I design SIEM and EDR detections for advanced threats, tune rules for signal fidelity, and manage incidents from triage through root cause analysis, containment, and remediation. My work includes Kubernetes, cloud-native infrastructure, threat intelligence integration, and security runbooks.

Previously, I served as a Security Analyst at BlueVoyant, a Threat Hunter and Security Analyst at Hydro Global Business Services, and a Security Analyst at Deutsche Telekom IT Solutions Hungary. Across these roles, I investigated alerts, assessed compromises, developed detection mechanisms, mentored analysts, and supported customers through remediation.

My cybersecurity foundation includes defensive operations for the Hungarian Defense Forces, including NATO Locked Shields and CWIX exercises. I bring experience across SIEM, SOAR, threat hunting, forensics, incident response, cloud security, and Web3 threat modeling.

Experience

Work history, roles, and key accomplishments

Current

Founder & Principal Security Architect

Current

Grey Technologies Ltd.

Jan 2025 - Present (1 year 8 months)

Lead Detection Engineer and Incident Handler for P2P.org, designing and implementing a security monitoring ecosystem from the ground up following NIST CSF standards. Engineer custom detection logic across SIEM and EDR platforms, manage the incident lifecycle, and integrate threat intelligence feeds.

SIEM EDR Detection Engineering Incident Response NIST CSF Kubernetes Cloud Security Web3 DeFi Threat Intelligence

Security Analyst L2

BlueVoyant Ltd.

Apr 2023 - Dec 2024 (1 year 8 months)

Monitored and analyzed security events from SIEM, IDS, firewall logs, and system logs, separating true threats from false positives. Served as technical escalation point, mentored lower-level analysts, and communicated with customer IT teams for remediation.

SIEM Network Analysis Log Analysis Intrusion Detection Mentor

Threat Hunter | Security Analyst L3

Hydro Global Business Services (GBS)

May 2022 - Mar 2023 (10 months)

Performed compromise assessments, detected and contained breaches, and developed threat intelligence to scope networks. Built advanced forensics skills to counter anti-forensics and data hiding.

Threat Hunting Compromise Assessments Incident Response Digital Forensics Threat Intelligence Adversary Tracking Scoping

Security Analyst L2 | Customer Responsible

Deutsche Telekom IT Solutions Hungary Ltd.

Jul 2021 - Jan 2022 (6 months)

Monitored and analyzed security events, separated true threats from false positives, and escalated intrusions. Served as technical escalation point, mentored analysts, and communicated with customer IT teams.

SIEM Network Analysis Log Analysis Intrusion Detection Mentor

Cyber Security Engineer | Military Officer

Hungarian Defense Forces

Jun 2018 - Jun 2021 (3 years)

Represented Hungary in NATO cyber defense exercises, performing defensive operations and testing system interoperability. Performed continuous security monitoring, log analysis, and digital forensics on classified networks, and responded to incidents following NATO standards.

Security Monitoring Log Analysis Digital Forensics Incident Response Interoperability Testing Security Research Process Improvement