Top Cybersecurity Jobs in Bucharest

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Designs, configures, integrates, tests, and commissions secure industrial networks for substations, renewable energy, and BESS projects. Responsibilities include network architecture, routing, switching, redundancy, segmentation, firewalls, VPNs, OT cybersecurity controls, and support for SCADA/SAS protocols including IEC 61850 and IEC 60870-5-104. The engineer also prepares technical documentation, performs FAT and SAT, troubleshoots issues, and supports on-site commissioning and handover across Romania.

Provide 24x7 security platform support: triage L1 alerts, investigate and contain incidents, manage cases in ServiceNow, coordinate with engineering/ops, maintain runbooks and governance, monitor tool health/usage, and mentor junior analysts during shifts.

Monitors and investigates industrial cybersecurity events across SIEM, ICS, network, and application environments. Designs SOAR processes and playbooks, performs threat hunting, malware analysis, threat modeling, and forensic support, and acts as an L2 SOC escalation point. Develops remediation recommendations, tunes detection rules, supports root-cause analysis, documents procedures, tracks emerging threats and regulations, and mentors junior SOC analysts. The role requires strong industrial cybersecurity, automation, analytical, communication, and client-facing skills.

Monitors and investigates industrial cybersecurity incidents across SIEM and ICS environments. Develops SOAR playbooks, automates security processes with Python, performs threat hunting, malware analysis, threat modeling, and supports forensic investigations. Tunes detection rules, coordinates remediation, conducts root cause analysis, documents procedures, and mentors SOC analysts. The role serves as an L2 SOC escalation point and requires expertise in industrial protocols, cybersecurity frameworks, and client-facing managed security services.

Manages Oracle Cloud security service delivery, including SLA and KPI performance, team supervision, client support, incident and escalation handling, documentation, reporting, resource coordination, and process improvement. Requires service and program management experience, strategic planning, leadership, and performance management skills.

Own end-to-end security for tokenized-asset infrastructure, including smart-contract audits, penetration testing, threat modeling, secure code review, custody and signing workflows, IAM, secrets management, detection, incident response, and remediation. Contribute TypeScript product engineering while partnering with engineering, security, CISO, compliance, auditors, and external assessors across blockchain and cloud environments.

Own and operate the AI security runtime control plane across Azure, AWS, and GCP. Build inline AI enforcement, tune prompt-injection, data protection, tool-call, and agent access policies, and integrate security platforms with SIEM/SOC workflows. Lead L3 investigations, automated containment, cloud and Kubernetes security, DevSecOps controls, vendor evaluations, and closed-loop red-team remediation. The role requires automation, infrastructure-as-code security, multi-cloud identity management, incident response, and collaboration with technical leadership.

Provides L2 monitoring, triage, investigation, and escalation for AI and cloud security detections. Analyzes telemetry using KQL or SQL, maintains dashboards, and produces operational, compliance, and risk reporting. Investigates AI threats including prompt injection, jailbreaks, data leakage, agent hijacking, and unauthorized tool activity. Monitors Azure, AWS, and GCP posture, supports vulnerability and compliance remediation, documents cases, and partners with SOC, cloud, incident response, and engineering teams.

Own Coinflow’s defensive and offensive security posture by operating the SIEM, conducting internal penetration tests, managing vulnerabilities and dependencies, improving the secure development lifecycle, and supporting PCI DSS, SOC 2, ISO 27001, and DORA compliance. The role also includes security monitoring, incident triage, threat modeling, security tooling automation, and collaboration with engineering teams across cloud and application environments.

Lead the design, implementation, integration, optimization, and operational handover of enterprise security solutions for customer environments. Deliver CrowdStrike and Microsoft security technologies, investigate complex incidents, improve detections and configurations, integrate platforms through APIs and automation, and provide customer-facing technical guidance. The role includes documentation, workshops, technical reviews, incident escalation, stakeholder communication, and mentoring engineers and analysts.

Build production infrastructure features in Go while embedding security into the product. Own vulnerability triage and remediation through patched releases, threat-model new features, conduct security-sensitive code and design reviews, and improve secure engineering practices. Requires deep Kubernetes knowledge, including API server, admission control, RBAC, controllers, kubelet, and attack surfaces such as container breakout and privilege escalation.

Manage and grow cybersecurity channel partnerships across EMEA. Responsibilities include developing joint business plans, driving indirect revenue, managing pipelines and deal registrations, enabling resellers and distributors, executing channel programs, coordinating co-marketing, recruiting partners, analyzing performance, and collaborating with sales, marketing, product, engineering, and customer success teams.

Leads security workstreams across complex IT transformation programs, ensuring solutions meet organizational security requirements, regulations, and standards. Responsibilities include translating requirements into controls, managing risk assessments and audits, coordinating certification programs, collecting evidence, driving remediation, supporting secure AI adoption, and reporting risks and recommendations to senior leadership. The role interfaces with IT, cybersecurity, legal, privacy, business teams, and external partners.

Design, implement, and maintain IAM and access-control systems for CrowdStrike’s global, multi-cloud Falcon platform. Manage IAM lifecycle operations, security governance, least-privilege controls, threat modeling, audits, and incident response. Develop automation and integrations, ensure access-system reliability at scale, and advise product and engineering stakeholders on security. The role also involves improving cybersecurity practices, supporting compliance, and applying AI technologies to enhance workflows and decision-making.

Designs, implements, and maintains IAM and access-control systems for CrowdStrike’s global, multi-cloud platform. Responsibilities include IAM lifecycle operations, incident response, least-privilege design, threat modeling, governance, auditing, scripting, automation, and advising product and engineering stakeholders. The role focuses on secure, reliable access across thousands of services and users while improving cybersecurity capabilities and supporting compliance and risk management.

Designs, implements, and maintains IAM and access-control systems for CrowdStrike’s multi-cloud platform. Responsibilities include IAM lifecycle operations, incident response, least-privilege design, threat modeling, governance, audits, scripting, automation, and stakeholder advising. The role supports secure, reliable access across thousands of services and users while improving cybersecurity posture through emerging IAM and AI technologies.

Leads and builds CrowdStrike’s Romania-based IAM Security Engineering team, including hiring, coaching, delivery ownership, architecture, access-control design, code reviews, incident response, and cross-functional alignment. The manager remains technically engaged while establishing engineering standards, processes, and best practices. Responsibilities include delivering IAM platform capabilities across multi-cloud environments and supporting security escalations. Required expertise includes cloud IAM, authentication protocols, access provisioning, people management, and applying AI to improve workflows and business outcomes.

Own the full enterprise sales cycle across Iberia, from prospecting and new-logo acquisition through negotiation and close. Manage territory activities, complex multi-stakeholder deals, demos, proof-of-value engagements, pipeline forecasting in Salesforce, and strategic customer relationships. Collaborate with Marketing, Sales Engineering, Product, and Leadership while consistently exceeding quotas and mentoring junior team members.

Manage day-to-day security operations across network, cloud, endpoint, email, and infrastructure environments. Configure and monitor security tools, respond to alerts and incidents, enforce secure configurations, manage certificates, secrets, domains, and digital assets, and automate routine tasks with scripting. Collaborate with IT, DevOps, compliance teams, and external partners to strengthen SCOR’s security posture and communicate risks effectively.

Own the full enterprise sales cycle across the Nordics, from prospecting through negotiation and close. Drive new-logo acquisition, manage complex multi-stakeholder deals, deliver tailored demos and proof-of-value engagements, maintain pipeline and forecasting in Salesforce, and build trusted relationships with key stakeholders. Collaborate with marketing, sales engineering, product, and leadership while consistently exceeding quotas and supporting junior team members.

Leads enterprise infrastructure security architecture, defining security strategy, reference architectures, technology selections, roadmaps, and secure solutions across server, storage, network, and cloud environments. Advises senior stakeholders, manages complex initiatives, audits implementations, researches emerging technologies, mentors engineering teams, and translates security requirements into validated designs. The role also supports training, continuous improvement, project delivery, and development of tools for data ingestion and management.

The Senior Cloud Security Engineer assesses cloud and on-premises security, coordinates penetration testing and security scanning, identifies and remediates risks, and establishes security standards. The role drives Security by Design, strengthens Azure and hybrid-cloud practices, integrates controls into CI/CD and DevSecOps workflows, supports security governance, and contributes to organizational security roadmaps. It also requires stakeholder communication, workshop facilitation, and consulting across development and infrastructure teams.

Owns security audits, compliance frameworks, risk and gap analyses, identity and access management, supplier management, security controls, incident handling, and improvement projects. The role maintains security procedures, supports audits and control owners, addresses customer security questions, uses AI for automation, and onboards acquisitions into the global security program. It requires collaboration with IT and development teams while managing ISO 27001, BSI C5, SOC 2, GDPR, and related security and compliance activities.

Own product and infrastructure security across fintech products and cloud environments. Lead threat modeling, architecture reviews, secure code reviews, vulnerability management, bug bounty operations, CI/CD security scanning, IAM and secrets management, and security standards. Partner directly with engineering leadership to identify and remediate critical vulnerabilities across backend services, APIs, frontends, Solana programs, and infrastructure.