Top Cybersecurity Jobs in Romania

Manage at-risk accounts, drive product adoption and onboarding, resolve technical/workflow issues, deliver training, escalate complex problems, and relay customer insights to product teams to reduce churn and maximize customer value.

Owner of post-sale technical relationship for EMEA customers: lead onboarding and deployments of the Upwind platform, drive feature adoption and roadmap discussions, support renewals and expansions, and advocate customer needs cross-functionally to ensure value realization and satisfaction.

The Senior Engagement Manager will own client relationships, ensure service excellence, manage account health, and oversee engagement performance in a hands-on leadership role.

Dragonfly is seeking Software Engineers for various portfolio companies, focusing on crypto technologies. Engineers of all experience levels are needed across multiple stacks.

Administer and improve EDR and SIEM platforms, tuning detection rules, correlation logic, endpoint policies, alerts, dashboards, and integrations. Maintain log collection, agent health, platform availability, and security visibility across endpoints, servers, cloud, and network systems. Support investigations, onboard new systems, convert security findings into monitoring improvements, track detection coverage, and produce documentation and runbooks.

Supports Mercer’s technology risk and information security agenda by designing localized IT, data management, and cyber risk frameworks. The role provides regulatory and control guidance, leads technology risk engagements, develops reporting for executives and boards, and promotes risk governance and culture across technology platforms. It requires strong stakeholder engagement, communication, and practical risk-management expertise within financial services.

Manage and enhance security across Zalando’s SAP landscape, including ABAP roles, Fiori access, HANA privileges, SAP BTP role collections, SAP GRC risk and emergency access, and modern authentication and identity provisioning tools. The role focuses on standardizing procedures, proactive monitoring, access reviews, audit readiness, automation, documentation, and developing a mature, service-oriented security function.

Lead and grow a senior Application Security engineering team; define AppSec strategy and roadmap; engage deeply on threat modelling, security architecture, agentic/AI-native tooling, SAST/SCA, vulnerability management and automation; embed security into the SDLC, coordinate with leadership and partner teams, and represent AppSec externally for compliance and customer interactions.

Lead end-to-end application and product security for a Kubernetes-based multi-tenant platform. Perform deep security reviews of Go services, Kubernetes controllers, and frontends; lead threat modeling; integrate automated security checks into CI; manage vulnerability lifecycle; develop security-related features; and train developers on secure coding and attack vectors.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Design and implement security controls across Azure, AWS and GCP; monitor cloud environments for vulnerabilities and compliance; integrate security into CI/CD and IaC; support remediation and collaborate with engineering and DevOps to improve cloud security posture.

Embed application security across a large cloud-native, microservices fintech platform: design secure architectures, run threat modeling, integrate SAST/DAST and dependency/secrets scanning into CI/CD, manage vulnerability lifecycle, support pentests and bug bounties, and improve secure coding and AppSec maturity.

Design, advise on, and implement Microsoft security solutions; support customer projects across all phases; lead smaller projects; collaborate with Microsoft; define best practices and share knowledge within the security team.

Advise customers on deployment, integration, and operation of Microsoft Defender XDR (Endpoint, Identity, Office, Cloud Apps). Support technical implementation, design managed security services, identify optimization opportunities, and collaborate with engineering and SOC teams to ensure smooth service delivery.

Monitor, investigate, and respond to complex security incidents in a SOC using Microsoft Sentinel. Perform advanced triage, analysis, escalation, KQL query and detection rule development, and threat hunting. Maintain SOC playbooks and runbooks, collaborate with engineering to improve defenses, and mentor junior analysts.

Manage and maintain enterprise firewall platforms, configure and optimize firewall policies/NAT, analyze logs and incidents, monitor performance, support vulnerability remediation, and act as a security expert during customer incidents and infrastructure projects.

Serve as a cyber risk expert within ING Hubs Romania: identify, assess, and mitigate cyber risks; analyze incidents and perform forensics; develop and maintain cybersecurity policies; monitor threat intelligence; assess control effectiveness; advise management and support NFR reporting and remediation activities.

Own architecture and implementation of MCU firmware, security components and HSMs. Design and develop security features (SecOC, SecureBoot) in modern C++ with unit tests and documentation. Review and approve requirements, architecture, design, code, tests and documentation. Collaborate with customers and internal teams to define secure embedded solutions for automotive ADAS and infotainment platforms.

Build and maintain cloud security controls in Google Cloud and Azure using infrastructure-as-code and policy-as-code. Collaborate with security and engineering teams, deliver features via agile sprints, integrate cloud controls with on-prem security, and act as an internal cloud security expert.

Design, implement, and manage secure cloud infrastructure and integrations for GCP and Azure. Automate provisioning with Terraform and GitHub Actions, build security automation with Python, configure and optimize SIEM solutions (Chronicle, Sentinel), and collaborate with vendors and cross-functional teams to enable cloud security monitoring and threat remediation.

Perform third-party information security risk assessments (including onsite reviews), review vendor policies and evidence against DB requirements, document security gaps and business impact, coordinate review processes and escalations, and support control framework improvements and stakeholder communications.

Design and drive the enterprise cryptography domain strategy, develop roadmaps, assess current cryptography posture, recommend improvements, and coordinate with security architects and stakeholders to align capabilities and mitigate emerging threats.

Ensure accuracy, completeness, and integrity of Active Directory data by monitoring for anomalies, performing root-cause analysis, producing reports/dashboards, automating cleansing, and partnering with stakeholders to enforce AD data governance.

Detect and hunt cloud-based cyber threats for Google Cloud workloads using cloud SIEM/SOAR. Develop detection use-cases, automation playbooks, dashboards, collaborate with incident response and security teams, and improve security processes and tooling.

Act as subdomain Technical Information Security Officer for applications/infrastructure: perform compliance evaluations, define and support remediation, run risk assessments, ensure security scanning and asset testing, support incident response and privileged access management, enforce policies and recertify technical access.