Top Cybersecurity Jobs in Romania

Monitors and investigates industrial cybersecurity events across SIEM, ICS, network, and application environments. Designs SOAR processes and playbooks, performs threat hunting, malware analysis, threat modeling, and forensic support, and acts as an L2 SOC escalation point. Develops remediation recommendations, tunes detection rules, supports root-cause analysis, documents procedures, tracks emerging threats and regulations, and mentors junior SOC analysts. The role requires strong industrial cybersecurity, automation, analytical, communication, and client-facing skills.

Monitors and investigates industrial cybersecurity incidents across SIEM and ICS environments. Develops SOAR playbooks, automates security processes with Python, performs threat hunting, malware analysis, threat modeling, and supports forensic investigations. Tunes detection rules, coordinates remediation, conducts root cause analysis, documents procedures, and mentors SOC analysts. The role serves as an L2 SOC escalation point and requires expertise in industrial protocols, cybersecurity frameworks, and client-facing managed security services.

Leads complex cybersecurity incident investigations and response within the SOC. Responsibilities include threat hunting, root cause analysis, containment, eradication, recovery, detection-rule development, threat modeling, MITRE ATT&CK mapping, incident reporting, playbook optimization, and major-event leadership. The role mentors SOC analysts, coordinates cross-functional response efforts, supports purple-team exercises, and drives improvements to enterprise security monitoring and detection capabilities.

Build production infrastructure features in Go while embedding security into the product. Own vulnerability triage and remediation through patched releases, threat-model new features, conduct security-sensitive code and design reviews, and improve secure engineering practices. Requires deep Kubernetes knowledge, including API server, admission control, RBAC, controllers, kubelet, and attack surfaces such as container breakout and privilege escalation.

Manage and grow cybersecurity channel partnerships across EMEA. Responsibilities include developing joint business plans, driving indirect revenue, managing pipelines and deal registrations, enabling resellers and distributors, executing channel programs, coordinating co-marketing, recruiting partners, analyzing performance, and collaborating with sales, marketing, product, engineering, and customer success teams.

Leads pre-sales, solution design, assessments, and implementation for data security and governance engagements. Designs and delivers Microsoft Purview and Varonis solutions covering data protection, DLP, insider risk, classification, permissions, and governance. Produces proposals, statements of work, executive risk reporting, and remediation roadmaps. Provides technical leadership, customer presentations, mentoring, regulatory mapping, practice development, and delivery oversight across concurrent engagements.

Manages Oracle Cloud security service delivery, including SLA and KPI performance, team supervision, client support, incident and escalation handling, documentation, reporting, resource coordination, and process improvement. Requires service and program management experience, strategic planning, leadership, and performance management skills.

Manage ContiTech’s information security risk management process, including risk identification, evaluation, governance, reporting, mitigation tracking, exception handling, and cyber risk register consolidation. Maintain and improve the ISMS, conduct cybersecurity assessments, support audits and adherence measurement, and contribute to security awareness initiatives. Collaborate with enterprise risk management, OT, purchasing, and other stakeholders while monitoring the threat landscape and supporting cybersecurity management.

Designs and maintains secure enterprise and site network architectures, including segmentation, Palo Alto firewall deployment, security policies, monitoring, incident response, and IT-OT security controls. Collaborates with infrastructure, cloud, and cybersecurity teams, supports global security programs, and develops technical documentation and operational runbooks. The role focuses on protecting industrial OT/ICS environments and ensuring system availability.

Owns cyber risk oversight for a Data & Analytics portfolio, assessing controls, architecture, threats, vulnerabilities, AI security, identity, cloud, third-party risk, and remediation. Partners with business, engineering, and central Cyber teams to translate technical risks into business impact, treatment options, and executive decisions. Maintains risk reporting, challenges security decisions, supports regulatory alignment, and builds trusted relationships across organizational boundaries.

Own the full enterprise sales cycle across the Nordics, from prospecting through negotiation and close. Drive new-logo acquisition, manage complex multi-stakeholder deals, deliver tailored demos and proof-of-value engagements, maintain pipeline and forecasting in Salesforce, and build trusted relationships with key stakeholders. Collaborate with marketing, sales engineering, product, and leadership while consistently exceeding quotas and supporting junior team members.

Leads security workstreams across complex IT transformation programs, ensuring solutions meet organizational security requirements, regulations, and standards. Responsibilities include translating requirements into controls, managing risk assessments and audits, coordinating certification programs, collecting evidence, driving remediation, supporting secure AI adoption, and reporting risks and recommendations to senior leadership. The role interfaces with IT, cybersecurity, legal, privacy, business teams, and external partners.

The Senior Cloud Security Engineer assesses cloud and on-premises security, coordinates penetration testing and security scanning, identifies and remediates risks, and establishes security standards. The role drives Security by Design, strengthens Azure and hybrid-cloud practices, integrates controls into CI/CD and DevSecOps workflows, supports security governance, and contributes to organizational security roadmaps. It also requires stakeholder communication, workshop facilitation, and consulting across development and infrastructure teams.

Owns security audits, compliance frameworks, risk and gap analyses, identity and access management, supplier management, security controls, incident handling, and improvement projects. The role maintains security procedures, supports audits and control owners, addresses customer security questions, uses AI for automation, and onboards acquisitions into the global security program. It requires collaboration with IT and development teams while managing ISO 27001, BSI C5, SOC 2, GDPR, and related security and compliance activities.

Own product and infrastructure security across fintech products and cloud environments. Lead threat modeling, architecture reviews, secure code reviews, vulnerability management, bug bounty operations, CI/CD security scanning, IAM and secrets management, and security standards. Partner directly with engineering leadership to identify and remediate critical vulnerabilities across backend services, APIs, frontends, Solana programs, and infrastructure.

Design, implement, and maintain IAM and access-control systems for CrowdStrike’s global, multi-cloud Falcon platform. Manage IAM lifecycle operations, security governance, least-privilege controls, threat modeling, audits, and incident response. Develop automation and integrations, ensure access-system reliability at scale, and advise product and engineering stakeholders on security. The role also involves improving cybersecurity practices, supporting compliance, and applying AI technologies to enhance workflows and decision-making.

Designs, implements, and maintains IAM and access-control systems for CrowdStrike’s global, multi-cloud platform. Responsibilities include IAM lifecycle operations, incident response, least-privilege design, threat modeling, governance, auditing, scripting, automation, and advising product and engineering stakeholders. The role focuses on secure, reliable access across thousands of services and users while improving cybersecurity capabilities and supporting compliance and risk management.

Leads and builds CrowdStrike’s Romania-based IAM Security Engineering team, including hiring, coaching, delivery ownership, architecture, access-control design, code reviews, incident response, and cross-functional alignment. The manager remains technically engaged while establishing engineering standards, processes, and best practices. Responsibilities include delivering IAM platform capabilities across multi-cloud environments and supporting security escalations. Required expertise includes cloud IAM, authentication protocols, access provisioning, people management, and applying AI to improve workflows and business outcomes.

Designs, implements, and maintains IAM and access-control systems for CrowdStrike’s multi-cloud platform. Responsibilities include IAM lifecycle operations, incident response, least-privilege design, threat modeling, governance, audits, scripting, automation, and stakeholder advising. The role supports secure, reliable access across thousands of services and users while improving cybersecurity posture through emerging IAM and AI technologies.

Lead and scale OX Security’s EMEA channel ecosystem by developing partner strategy, recruiting and enabling partners, driving channel-sourced pipeline and revenue, and coordinating joint go-to-market execution. The role manages relationships with VARs, MSSPs, distributors, and system integrators while collaborating with Sales, Marketing, and Product. Responsibilities include partner performance optimization, joint planning, program development, ecosystem analysis, and representing the company within the cybersecurity channel community.

Manage day-to-day security operations across network, cloud, endpoint, email, and infrastructure environments. Configure and monitor security tools, respond to alerts and incidents, enforce secure configurations, manage certificates, secrets, domains, and digital assets, and automate routine tasks with scripting. Collaborate with IT, DevOps, compliance teams, and external partners to strengthen SCOR’s security posture and communicate risks effectively.

Own full-cycle technical recruiting across Engineering, Product, and Design. Build diverse talent pipelines, advise hiring managers and senior leaders, use AI-assisted recruiting tools, improve recruiting processes, manage talent communities, and report on hiring metrics. The role emphasizes stakeholder influence, candidate advocacy, sourcing hard-to-find talent, and delivering strong candidate and hiring-manager experiences.

Own product and protocol security across Jito’s Solana-based products. Responsibilities include threat modeling, secure design and code reviews, deployment hardening, internal audits, onchain monitoring, bug bounty operations, remediation tracking, AI-assisted security testing, and key and asset risk management. The role requires production software engineering experience, strong application security expertise, security automation skills, and familiarity with Web3, crypto, or DeFi.

Leads enterprise infrastructure security architecture, defining security strategy, reference architectures, technology selections, roadmaps, and secure solutions across server, storage, network, and cloud environments. Advises senior stakeholders, manages complex initiatives, audits implementations, researches emerging technologies, mentors engineering teams, and translates security requirements into validated designs. The role also supports training, continuous improvement, project delivery, and development of tools for data ingestion and management.

Investigate fraud, money laundering, account abuse, cheating, and security threats. Manage transaction queues, review documentation, conduct deep-dive investigations, identify coordinated abuse patterns, collaborate cross-functionally, and report fraud trends. Recommend process and tool enhancements while maintaining strong customer support, regulatory compliance, and platform integrity.