Top Cybersecurity Jobs in Romania

Secure SEON’s cloud-based fraud-prevention platform through IAM hardening, infrastructure guardrails, detection engineering, incident response, vulnerability remediation, and threat modeling. Lead ISO 27001, ISO 42001, SOC 2, and PCI DSS assurance programs; automate evidence collection and access reviews; manage customer questionnaires, vendor reviews, policies, risk registers, and regulatory obligations.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Manage IAM and PAM operations, including access matrices, account and role lifecycles, authentication requests, privileged access configurations, service accounts, and account cleanup. Support DAST scans, Linux/Unix-based access administration, RBAC compliance, and least-privilege controls. Handle access requests and ticket queues within SLAs while maintaining security and operational accuracy. Strong English communication is required; French is an advantage.

Contribute to automotive product security incident response and fuzz testing for embedded electronic control units. Responsibilities include monitoring vulnerabilities, triaging cybersecurity events, conducting ISO 21434-aligned fuzz testing, analyzing results, documenting findings, supporting remediation and disclosure activities, and collaborating with international engineering and cybersecurity teams.

Designs and implements application, cloud, Kubernetes, and development-pipeline security controls. Responsibilities include threat modeling, secure design and code reviews, automated testing, AWS and EKS security, security automation, vulnerability investigation, penetration-test remediation, logging and incident response, and HIPAA/SOC 2 technical controls. The role partners directly with engineering and SRE teams and owns security projects from design through ongoing improvement.

Administer and optimize Jira Software and Jira Service Management while integrating them with CrowdStrike Falcon and Next-Gen SIEM. Build bidirectional alert and ticket synchronization, configure workflows, SLAs, queues, automation, escalation processes, APIs, and webhooks, and troubleshoot integration issues. Partner with security teams to align ticketing processes with detection severity and incident classification, while documenting configurations and changes.

Administers and supports DMZ network security infrastructure, handles incidents and service requests, monitors performance, deploys L3 change packages, manages L1 escalation, and oversees backup and restore activities. The role requires Cisco and Palo Alto firewall administration, routing, VLANs, ACLs, IDS/IPS, Panorama, Wireshark, IPsec, ITIL processes, and travel between France and Belgium. This is an on-site position in Bucharest with no work-from-home option.

Monitors and triages security events in an industrial SOC using SIEM, firewalls, IDS/IPS, and other infrastructure logs. Performs initial analysis, escalates incidents to Level 2, tunes detection rules and alerts, documents remediation recommendations, supports control deployment improvements, maintains knowledge-base entries, and tracks emerging threats, vulnerabilities, legislation, and security advisories.

Monitors industrial security environments, triages SIEM alerts and tickets, analyzes events, and escalates incidents to Level 2 SOC teams. The role tunes security rules, signatures, parsers, and scripts; documents remediation recommendations; supports defense-in-depth strategies; creates knowledge-base content; and tracks emerging threats, vulnerabilities, regulations, and security technologies.

Build and scale low-latency AI serving infrastructure for SLMs, prompt-injection engines, and classification services. Architect GPU-accelerated inference pipelines, backend microservices, Kubernetes clusters, rate limiting, tenant guardrails, monitoring, and autoscaling systems. Develop continuous evaluation, retraining, model CI/CD, regression gates, and MLOps/LLMOps pipelines while improving service reliability, latency, cost efficiency, and detection quality.

Build and harden Chromium-based browser components in C++ for AI and browser security. Develop prompt-injection and Shadow AI detection, integrate AI agents, MCP servers, and CDP, and support networking and HTTP security capabilities. Build tooling and detection services with Python or Rust, deploy cloud infrastructure on AWS or GCP using Kubernetes and Terraform, and optimize high-scale systems across browser and backend environments.

Defines information security requirements for business applications and core infrastructure, designs security architectures and safeguards, supports solution selection and deployment, and integrates security processes and tools into software delivery. The role seeks a network enthusiast with strong English communication, research, cognitive processing, teamwork, integrity, and ethical judgment.

Conduct security audits of Atlassian Cloud environments, including Jira, Confluence, customer portals, Marketplace applications, APIs, and Rovo. Assess identity and access controls, vulnerabilities, data exposure, AI-related risks, and governance gaps. Produce evidence-based audit reports with prioritized risks and remediation recommendations, then develop remediation roadmaps aligned with Atlassian best practices and enterprise security standards.

Lead product security vulnerability cases from intake through assessment, remediation, customer communication, and responsible disclosure. Coordinate engineering, product, quality, legal, communications, customers, and researchers; manage CVE workflows, security advisories, milestones, risks, and escalations. Improve PSIRT procedures, governance, templates, audit readiness, and regulatory preparedness for requirements such as the EU Cyber Resilience Act.

Lead SecureChain’s security research and automation function. Own malicious-code detection, vulnerability discovery pipelines, static and dynamic analysis, fuzzing, evidence-based reproduction, AI-assisted patch generation, CNA operations, coordinated disclosure, and technical research publications. Build production-quality tools and services while improving detection accuracy, coverage, review workflows, and vulnerability remediation across multiple open-source package ecosystems.

Own end-to-end security for tokenized-asset infrastructure, including smart-contract audits, penetration testing, threat modeling, secure code review, custody and signing workflows, IAM, secrets management, detection, incident response, and remediation. Contribute TypeScript product engineering while partnering with engineering, security, CISO, compliance, auditors, and external assessors across blockchain and cloud environments.

Own and operate the AI security runtime control plane across Azure, AWS, and GCP. Build inline AI enforcement, tune prompt-injection, data protection, tool-call, and agent access policies, and integrate security platforms with SIEM/SOC workflows. Lead L3 investigations, automated containment, cloud and Kubernetes security, DevSecOps controls, vendor evaluations, and closed-loop red-team remediation. The role requires automation, infrastructure-as-code security, multi-cloud identity management, incident response, and collaboration with technical leadership.

Provides L2 monitoring, triage, investigation, and escalation for AI and cloud security detections. Analyzes telemetry using KQL or SQL, maintains dashboards, and produces operational, compliance, and risk reporting. Investigates AI threats including prompt injection, jailbreaks, data leakage, agent hijacking, and unauthorized tool activity. Monitors Azure, AWS, and GCP posture, supports vulnerability and compliance remediation, documents cases, and partners with SOC, cloud, incident response, and engineering teams.

Own Coinflow’s defensive and offensive security posture by operating the SIEM, conducting internal penetration tests, managing vulnerabilities and dependencies, improving the secure development lifecycle, and supporting PCI DSS, SOC 2, ISO 27001, and DORA compliance. The role also includes security monitoring, incident triage, threat modeling, security tooling automation, and collaboration with engineering teams across cloud and application environments.

Assess and approve AI-enabled, cloud, and SaaS applications for security, regulatory, and compliance risks. Provide cybersecurity consulting, review architectures and assessments, develop security standards and guardrails, support audits and remediation, and guide stakeholders in securely adopting emerging technologies. Collaborate with architecture, legal, privacy, procurement, IT, and business teams across international operations.

Designs, configures, integrates, tests, and commissions secure industrial networks for substations, renewable energy, and BESS projects. Responsibilities include network architecture, routing, switching, redundancy, segmentation, firewalls, VPNs, OT cybersecurity controls, and support for SCADA/SAS protocols including IEC 61850 and IEC 60870-5-104. The engineer also prepares technical documentation, performs FAT and SAT, troubleshoots issues, and supports on-site commissioning and handover across Romania.

Designs, configures, integrates, tests, and commissions secure OT network infrastructure for substations, renewable energy, and BESS projects. Responsibilities include network architecture, routing, switching, segmentation, firewalls, VPNs, redundancy, SCADA/SAS communications, cybersecurity controls, troubleshooting, FAT/SAT, documentation, and technical handover. The engineer works with automation teams and supports project delivery and on-site commissioning across Romania.

Lead the design, implementation, integration, optimization, and operational handover of enterprise security solutions for customer environments. Deliver CrowdStrike and Microsoft security technologies, investigate complex incidents, improve detections and configurations, integrate platforms through APIs and automation, and provide customer-facing technical guidance. The role includes documentation, workshops, technical reviews, incident escalation, stakeholder communication, and mentoring engineers and analysts.

Designs and manages SAP authorization and security concepts across HR IT systems, including SAP HCM, SAP Fiori, SuccessFactors, and hybrid landscapes. Defines roles, profiles, authorization objects, and audit-ready concepts; troubleshoots complex authorization issues; configures OData and SICF access; and supports integrations between SuccessFactors and on-premise SAP. The role collaborates with global IT and business stakeholders to ensure compliant, secure, and maintainable access controls.

Monitors and investigates industrial cybersecurity events across SIEM, ICS, network, and application environments. Designs SOAR processes and playbooks, performs threat hunting, malware analysis, threat modeling, and forensic support, and acts as an L2 SOC escalation point. Develops remediation recommendations, tunes detection rules, supports root-cause analysis, documents procedures, tracks emerging threats and regulations, and mentors junior SOC analysts. The role requires strong industrial cybersecurity, automation, analytical, communication, and client-facing skills.