Top Cybersecurity Jobs in Bucharest

Perform third-party information security risk assessments (including onsite reviews), review vendor policies and evidence against DB requirements, document security gaps and business impact, coordinate review processes and escalations, and support control framework improvements and stakeholder communications.

Design, implement, and manage secure cloud infrastructure and integrations for GCP and Azure. Automate provisioning with Terraform and GitHub Actions, build security automation with Python, configure and optimize SIEM solutions (Chronicle, Sentinel), and collaborate with vendors and cross-functional teams to enable cloud security monitoring and threat remediation.

Ensure accuracy, completeness, and integrity of Active Directory data by monitoring for anomalies, performing root-cause analysis, producing reports/dashboards, automating cleansing, and partnering with stakeholders to enforce AD data governance.

Design and drive the enterprise cryptography domain strategy, develop roadmaps, assess current cryptography posture, recommend improvements, and coordinate with security architects and stakeholders to align capabilities and mitigate emerging threats.

Detect and hunt cloud-based cyber threats for Google Cloud workloads using cloud SIEM/SOAR. Develop detection use-cases, automation playbooks, dashboards, collaborate with incident response and security teams, and improve security processes and tooling.

Act as subdomain Technical Information Security Officer for applications/infrastructure: perform compliance evaluations, define and support remediation, run risk assessments, ensure security scanning and asset testing, support incident response and privileged access management, enforce policies and recertify technical access.

Lead planning and delivery of Security Monitoring & Remediation projects, enforce governance and PM methodologies, manage risks, financials, and stakeholder communications, and drive security monitoring, detection, and incident response improvements.

Hands-on senior penetration tester responsible for planning and executing end-to-end offensive security assessments across applications, infrastructure, and cloud. Document scopes, test activities, and findings; produce clear technical reports and remediation guidance; collaborate with engineering teams; develop automation, custom tools, and exploits; mentor teammates and contribute to methodology and tooling improvements.

Lead product security incident response for hardware and software products: triage vulnerabilities, manage PSIRT JIRA tickets, coordinate cross-functional remediation, engage external researchers and vendors, define best practices for third-party and open-source components, and contribute to relevant regulations and standards.

Design, review, and specify software security architectures for embedded systems and firmware. Perform risk/threat analyses, root-cause investigations, develop countermeasures, liaise with customers and labs, and create innovative security solutions for product development and certification contexts.

Design, implement, and optimize regional SIEM platforms to aggregate, normalize, and correlate security events across IT, OT, and R&D. Lead detection engineering, integrate SIEM with SOAR/EDR/NDR and threat intelligence, drive automation of response workflows, enforce retention/compliance, and collaborate with SOC, threat hunters, and engineering to improve detection fidelity and OT/R&D security posture.

Design and develop customer-specific embedded applications, debug complex software/hardware issues, build demo platforms and reference designs, support sales for design wins, produce technical documentation and presentations, and provide hands-on customer support throughout development.

Lead end-to-end security analysis and architecture for NXP product solutions, translate regulatory and certification requirements into designs, evaluate security trade-offs, and assess risks from emerging trends (including AI/ML) to secure large-scale embedded and semiconductor products.

Build and secure cloud infrastructure for production AI solutions across AWS and Azure. Responsibilities include designing CI/CD pipelines, implementing Infrastructure as Code, integrating security scanning and compliance controls, managing Docker and Kubernetes environments, configuring IAM and network security, monitoring and logging systems, improving reliability, and supporting penetration testing remediation.

Lead proposal and estimation efforts from bid/no-bid through order booking. Coordinate cross-functional teams to develop technical solutions, cost estimates, bid plans, schedules, WBS and labor histograms. Drive bid reviews, action tracking, customer value alignment, and support onsite or virtual bid activities to close opportunities.

Administer and improve EDR and SIEM platforms, tuning detection rules, correlation logic, endpoint policies, alerts, dashboards, and integrations. Maintain log collection, agent health, platform availability, and security visibility across endpoints, servers, cloud, and network systems. Support investigations, onboard new systems, convert security findings into monitoring improvements, track detection coverage, and produce documentation and runbooks.

Lead and grow a senior Application Security engineering team; define AppSec strategy and roadmap; engage deeply on threat modelling, security architecture, agentic/AI-native tooling, SAST/SCA, vulnerability management and automation; embed security into the SDLC, coordinate with leadership and partner teams, and represent AppSec externally for compliance and customer interactions.

Embed application security across a large cloud-native, microservices fintech platform: design secure architectures, run threat modeling, integrate SAST/DAST and dependency/secrets scanning into CI/CD, manage vulnerability lifecycle, support pentests and bug bounties, and improve secure coding and AppSec maturity.

Define and execute the product roadmap for AI-driven blockchain security monitoring tools. Collaborate with cross-functional teams, analyze market and customer feedback, deliver features on time, and communicate with stakeholders to align expectations and improve product offerings.

Lead identification, mitigation, and prevention of security risks across teams. Architect and manage security solutions, enforce policies, perform penetration testing and purple teaming, monitor and respond to incidents, build automation and security frameworks, and collaborate on secure design and DevSecOps practices for a decentralized exchange.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Design and verify secure architectures across infrastructure, applications, blockchain, Rust, and AI projects. Perform in-depth security assessments and audits, recommend mitigations, and embed with engineering teams to improve security posture and operational practices.

Provide strategic procurement and contract advice across major public and private projects, lead end-to-end procurement processes, support post-contract management under NEC4, develop procurement services and supply-chain intelligence, contribute to business development, and mentor/manage teams while supporting CIPS/MCIPS accreditation.

Lead IT security and operations to identify and remediate vulnerabilities, ensure ISO 27001 and SOC2 compliance, manage software, hardware and infrastructure, develop IT policies and SLAs, and build a high-performing IT department that delivers secure, reliable support across the business.

Serve as the primary security advisor to the Retail business unit, assessing and communicating security risk in business terms, overseeing vendor and project risk, coordinating incident response, advising on secure design for retail technologies, and driving incremental security improvements and transformation while supporting seasonal readiness and stakeholder communication.