Top Cybersecurity Jobs in Romania

Lead design and delivery of security monitoring, automation and threat response architecture. Define roadmaps, guide engineering teams, select and optimize SIEM/SOAR solutions, manage vendor contracts, allocate budget, and liaise with stakeholders to ensure secure cloud and enterprise operations.

Design, implement, and manage enterprise DNS-layer network security (Cisco Umbrella); conduct risk assessments; ensure regulatory compliance (DORA, GDPR, NIST, ISO 27001); act as L3 engineer for incidents and tooling; develop documentation, policies, and automation (Chronicle SOAR, SQL Server analytics).

Lead planning and delivery of Security Monitoring & Remediation projects, enforce governance and PM methodologies, manage risks, financials, and stakeholder communications, and drive security monitoring, detection, and incident response improvements.

Support the information security audit lifecycle, coordinate stakeholders and documentation, drive findings management and remediation, provide status reporting to senior management, and maintain trackers and training materials to ensure effective governance and risk transparency.

Perform protocol-focused security research to prevent vulnerabilities on Ethereum mainnet. Tasks include AI-assisted analysis, fuzzing, manual review, reviewing hardforks and spec changes, improving security tooling and automation, coordinating disclosures, and supporting audits and audit competitions while collaborating with devops, specifications authors, and client implementers.

Define and execute the product roadmap for AI-driven blockchain security monitoring tools. Collaborate with cross-functional teams, analyze market and customer feedback, deliver features on time, and communicate with stakeholders to align expectations and improve product offerings.

Lead identification, mitigation, and prevention of security risks across teams. Architect and manage security solutions, enforce policies, perform penetration testing and purple teaming, monitor and respond to incidents, build automation and security frameworks, and collaborate on secure design and DevSecOps practices for a decentralized exchange.

Own and scale Wayflyer’s security program: lead a security team, define strategy, run monitoring, detection and incident response, partner with engineering on cloud and application security, manage third‑party risk, ensure regulatory controls, and report security posture to leadership.

Operate and maintain SOC operations, respond to security incidents (including on-call), build supply chain security into incident processes, prioritize vulnerability management, and support colleagues in incident handling and remediation.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Lead the design and delivery of enterprise security architecture, develop security strategies and reference architectures, embed advanced security controls across products and systems, monitor emerging threats, influence stakeholders, and mentor junior cybersecurity staff to improve the organisation's security posture.

Lead and advance the organisation's Governance, Risk & Compliance programme: manage ISO 27001 and SOC 2 certification efforts, coordinate audits, implement compliance standards, improve risk management and automation, advise senior stakeholders, mentor colleagues, and drive cross-functional security and privacy initiatives across an international business.

Owner of offensive security testing and continuous perimeter monitoring across external domains, IPs, DNS, VPS, and office infrastructure. Conduct adversary emulation against endpoints/EDR/XDR, scoped web/API tests, and document exploitation chains. Translate findings into defensive controls, support Purple Teaming, and improve asset tracking and remediation metrics.

Hands-on senior penetration tester responsible for planning and executing end-to-end offensive security assessments across applications, infrastructure, and cloud. Document scopes, test activities, and findings; produce clear technical reports and remediation guidance; collaborate with engineering teams; develop automation, custom tools, and exploits; mentor teammates and contribute to methodology and tooling improvements.

Design and implement secure Linux-based product, network, and server architectures with automation. Lead cloud infrastructure and application deployment projects, support regulatory and product security management, and advise on APIs (REST, MQTT, OPC-UA). Work in a cross-functional team using containerization, CI/CD, and infrastructure-as-code tools.

Lead product security incident response for hardware and software products: triage vulnerabilities, manage PSIRT JIRA tickets, coordinate cross-functional remediation, engage external researchers and vendors, define best practices for third-party and open-source components, and contribute to relevant regulations and standards.

Design, review, and specify software security architectures for embedded systems and firmware. Perform risk/threat analyses, root-cause investigations, develop countermeasures, liaise with customers and labs, and create innovative security solutions for product development and certification contexts.

Design, implement, and optimize regional SIEM platforms to aggregate, normalize, and correlate security events across IT, OT, and R&D. Lead detection engineering, integrate SIEM with SOAR/EDR/NDR and threat intelligence, drive automation of response workflows, enforce retention/compliance, and collaborate with SOC, threat hunters, and engineering to improve detection fidelity and OT/R&D security posture.

Design and develop customer-specific embedded applications, debug complex software/hardware issues, build demo platforms and reference designs, support sales for design wins, produce technical documentation and presentations, and provide hands-on customer support throughout development.

Lead end-to-end security analysis and architecture for NXP product solutions, translate regulatory and certification requirements into designs, evaluate security trade-offs, and assess risks from emerging trends (including AI/ML) to secure large-scale embedded and semiconductor products.

Lead CRA compliance strategy and influence security architecture across MCU/MPU product lines. Translate regulations into security controls, perform system-level threat modeling and risk assessments, ensure traceability and audit readiness, and drive security-by-design across legacy and new products while collaborating with global stakeholders.

Own and execute end-to-end collaboration-platform integrations for acquisitions: scope and migrate Google Workspace, Slack, Zoom, mailboxes, channels, and domains. Maintain platform governance, email/domain security, DLP, archiving, eDiscovery/legal holds, and incident response. Build repeatable playbooks, automation, and tooling; coordinate cross-functionally with Legal, Compliance, IT, Security, and Corporate Development.

Design and verify secure architectures across infrastructure, applications, blockchain, Rust, and AI projects. Perform in-depth security assessments and audits, recommend mitigations, and embed with engineering teams to improve security posture and operational practices.

Design, deploy, and operate security foundations for a sovereign Google Cloud region: manage Vault at scale, PKI and KMS strategies, Keycloak federation, ELK-based detection, TPM/HSM trust patterns, and participate in incident response and follow-the-sun on-call with Google Cloud SREs.

Provide strategic procurement and contract advice across major public and private projects, lead end-to-end procurement processes, support post-contract management under NEC4, develop procurement services and supply-chain intelligence, contribute to business development, and mentor/manage teams while supporting CIPS/MCIPS accreditation.