Senior Cybersecurity Engineer (all genders)

Zalando Bucharest is our newest site designed to consolidate and scale expert services, ensuring operational excellence as we evolve our global footprint.  

Security Incidents have a high potential to cause a severe business impact on the organization. They often involve ambiguity, complexity, and the need for off-playbook approaches and solutions to manage unprecedented problems. Flexibility, fast movement, and the ability to reduce complex situations to individual components to allow action-taking are key during such situations. 

The Senior Cybersecurity Engineer coordinates task forces to respond to major Information Security Incidents. They act as a primary point of contact for all parties involved and contain, eradicate, and recover Information Security Incidents. Most of their time, they will work during core business hours but also regularly on-call outside of business hours and on weekends.

At Zalando, our vision is to be the leading pan-European ecosystem for fashion and lifestyle e-commerce - one that is inclusive by design. We only assess candidates based on qualifications, merit, and business needs. We welcome applications from people of all gender identities, sexual orientations, personal expressions, racial identities, ethnicities, religious beliefs, and disability statuses. We only want to know why you’re great for this role, so please avoid including your picture, age, and marital status in your CV as well.

We want to provide you with a great candidate experience. Please feel free to inform us of any accommodations you may need, so we can best support and assist you throughout the hiring process.

do.BETTER - our diversity & inclusion strategy: https://jobs.zalando.com/en/our-culture/diversity-and-inclusion

• Lead Incident Response Lifecycle: You'll drive 2nd and potentially 3rd level incident response activities, leading dedicated task forces through the entire Security Incident Lifecycle, containing, eradicating, and recovering from major security events.

• Coordinate Cross-Functional Investigation: You’ll coordinate investigation activities across all levels of cybersecurity engineers, partnering tightly with engineering teams and other on-call staff to drive swift response and facilitate decision-making.

• Manage Partner Ecosystem Incidents: You’ll interact proactively with platform partners on 3rd party incidents to evaluate, analyze, and mitigate potential security impacts on our environment.

• Steer Executive Communication: You’ll serve as the primary point of contact for senior leadership, interacting directly with executives to equip them with critical information for rapid decisions while ensuring high-quality forensic incident investigation reports.

• Drive Readiness & Continuous Improvement: When not managing active incidents, you’ll continuously improve our monitoring coverage, and design and execute tabletop exercises to ensure all CSIRT members and stakeholders are trained to execute their responsibilities.
   

• You’re a Seasoned Incident Responder: You bring over 5 years of experience as a Cybersecurity Engineer within a Cyber Defense Team, CSIRT, or SOC (3rd level), and you are fully adept at handling on-call responsibilities outside of business hours.

• You Possess Deep Defensive Expertise: You have extensive experience in security monitoring, detection, and analysis methodologies and technologies, including network-based intrusion detection systems, XDR solutions, web application/network firewalls, and SIEM solutions.

• You Know Cloud & Environment Security: You bring demonstrable expertise in safeguarding assets on AWS, managing Kubernetes deployments within the AWS environment, working with AWS native security tools, and monitoring Google Workspace or similar corporate environments.

• You are Fluent in Frameworks & Automation: You possess a thorough understanding of the MITRE ATT&CK Framework, the Cyber Kill Chain, and NIST, paired with hands-on experience using programming or scripting languages (Python, Go, PowerShell, Bash) to streamline security operations.

• You are a Strategic & Decisive Communicator: You can quickly assess high-pressure situations to make rapid tactical decisions, and you possess excellent verbal and written communication skills with a proven track record of writing rigorous forensic investigation reports for diverse stakeholders.

• Experience the financial backing, market stability and massive operational structure of the leading European technology platform for fashion and lifestyle, combined with the autonomy, agility and risk-taking spirit of a founder. 

• Work on a scale where your daily technical choices, architecture decisions and code deployment directly shape the experience of over 60 million active users across Europe. 

• Our open and collaborative tech radar is a shared platform that inspires our teams to pick the best technologies for new projects, reflect on technical decisions and continuously evolve our software development landscape. 

• Drive your development through our training platform and biannual peer-to-peer review.