Top Cybersecurity Jobs in Bucharest

Act as subdomain Technical Information Security Officer for applications/infrastructure: perform compliance evaluations, define and support remediation, run risk assessments, ensure security scanning and asset testing, support incident response and privileged access management, enforce policies and recertify technical access.

Lead design and delivery of security monitoring, automation and threat response architecture. Define roadmaps, guide engineering teams, select and optimize SIEM/SOAR solutions, manage vendor contracts, allocate budget, and liaise with stakeholders to ensure secure cloud and enterprise operations.

Design, implement, and manage enterprise DNS-layer network security (Cisco Umbrella); conduct risk assessments; ensure regulatory compliance (DORA, GDPR, NIST, ISO 27001); act as L3 engineer for incidents and tooling; develop documentation, policies, and automation (Chronicle SOAR, SQL Server analytics).

Lead planning and delivery of Security Monitoring & Remediation projects, enforce governance and PM methodologies, manage risks, financials, and stakeholder communications, and drive security monitoring, detection, and incident response improvements.

Support the information security audit lifecycle, coordinate stakeholders and documentation, drive findings management and remediation, provide status reporting to senior management, and maintain trackers and training materials to ensure effective governance and risk transparency.

Lead and quality-assure penetration testing engagements across applications, infrastructure and cloud. Scope tests, manage vendors, review findings, eliminate false positives, advise remediation and risk acceptance, and improve testing methodologies and tooling while communicating outcomes to technical and business stakeholders.

Technical IAM role focused on authentication, enterprise and federated SSO, API security, and access management. Act as SME for global authentication services, translate business requirements into technical solutions, evaluate new technologies, produce architecture artifacts, collaborate with project and managed service teams, and support deployment of secure enterprise capabilities.

Lead the design and delivery of enterprise security architecture, develop security strategies and reference architectures, embed advanced security controls across products and systems, monitor emerging threats, influence stakeholders, and mentor junior cybersecurity staff to improve the organisation's security posture.

Lead and advance the organisation's Governance, Risk & Compliance programme: manage ISO 27001 and SOC 2 certification efforts, coordinate audits, implement compliance standards, improve risk management and automation, advise senior stakeholders, mentor colleagues, and drive cross-functional security and privacy initiatives across an international business.

Provide 24x7 security platform support: triage L1 alerts, investigate and contain incidents, manage cases in ServiceNow, coordinate with engineering/ops, maintain runbooks and governance, monitor tool health/usage, and mentor junior analysts during shifts.

Hands-on senior penetration tester responsible for planning and executing end-to-end offensive security assessments across applications, infrastructure, and cloud. Document scopes, test activities, and findings; produce clear technical reports and remediation guidance; collaborate with engineering teams; develop automation, custom tools, and exploits; mentor teammates and contribute to methodology and tooling improvements.

Lead requirements, architecture, and technical specification for secure embedded cryptographic libraries. Drive design, review code and APIs, monitor code quality/KPIs, coordinate releases, and support engineering and business teams on integration and security issues.

Lead product security incident response for hardware and software products: triage vulnerabilities, manage PSIRT JIRA tickets, coordinate cross-functional remediation, engage external researchers and vendors, define best practices for third-party and open-source components, and contribute to relevant regulations and standards.

Design, review, and specify software security architectures for embedded systems and firmware. Perform risk/threat analyses, root-cause investigations, develop countermeasures, liaise with customers and labs, and create innovative security solutions for product development and certification contexts.

Design, implement, and optimize regional SIEM platforms to aggregate, normalize, and correlate security events across IT, OT, and R&D. Lead detection engineering, integrate SIEM with SOAR/EDR/NDR and threat intelligence, drive automation of response workflows, enforce retention/compliance, and collaborate with SOC, threat hunters, and engineering to improve detection fidelity and OT/R&D security posture.

Design and develop customer-specific embedded applications, debug complex software/hardware issues, build demo platforms and reference designs, support sales for design wins, produce technical documentation and presentations, and provide hands-on customer support throughout development.

Lead end-to-end security analysis and architecture for NXP product solutions, translate regulatory and certification requirements into designs, evaluate security trade-offs, and assess risks from emerging trends (including AI/ML) to secure large-scale embedded and semiconductor products.

Lead CRA compliance strategy and influence security architecture across MCU/MPU product lines. Translate regulations into security controls, perform system-level threat modeling and risk assessments, ensure traceability and audit readiness, and drive security-by-design across legacy and new products while collaborating with global stakeholders.

Design, deploy, and operate security foundations for a sovereign Google Cloud region: manage Vault at scale, PKI and KMS strategies, Keycloak federation, ELK-based detection, TPM/HSM trust patterns, and participate in incident response and follow-the-sun on-call with Google Cloud SREs.

Own the Nordics & Benelux region, build and manage strategic account pipelines, run consultative sales processes with CISOs and security leaders, deliver outcome-based demos with Solutions Engineers, collaborate with partners and internal teams, and accurately forecast revenue to close high-impact deals.

Senior Sales Engineer for META region: lead technical strategy, architect and deliver PoVs/PoCs, run deep architectural workshops with CISOs, enable channel partners and GSIs, translate isolation and zero-trust concepts into business value, and relay regional compliance needs to product and engineering teams.

Lead proposal and estimation efforts from bid/no-bid through order booking. Coordinate cross-functional teams to develop technical solutions, cost estimates, bid plans, schedules, WBS and labor histograms. Drive bid reviews, action tracking, customer value alignment, and support onsite or virtual bid activities to close opportunities.

Owner of post-sale technical relationship for EMEA customers: lead onboarding and deployments of the Upwind platform, drive feature adoption and roadmap discussions, support renewals and expansions, and advocate customer needs cross-functionally to ensure value realization and satisfaction.

Build, operate, and automate Menlo Security's global cloud-native platform across GCP and AWS. Manage VM fleets and Kubernetes clusters, author Terraform IaC and Spacelift workflows, implement observability with Grafana/Prometheus/OTel, handle networking, DNS, certificates, and service mesh, and reduce operational toil through automation while participating in 24x7 on-call rotation and cross-team architecture and DR planning.

The Senior Engagement Manager will own client relationships, ensure service excellence, manage account health, and oversee engagement performance in a hands-on leadership role.