Top Cybersecurity Jobs in Romania

The Lead Golang Software Engineer develops server solutions, leads technical designs and code reviews, mentors colleagues, and ensures the quality of engineering practices in the Commercial Systems unit.

The Enterprise Customer Success Manager enhances customer experience by onboarding clients, managing relationships, and identifying growth opportunities, especially in IT solutions and cloud technology.

Manage at-risk accounts, drive product adoption and onboarding, resolve technical/workflow issues, deliver training, escalate complex problems, and relay customer insights to product teams to reduce churn and maximize customer value.

Supports Mercer’s technology risk and information security agenda by designing localized IT, data management, and cyber risk frameworks. The role provides regulatory and control guidance, leads technology risk engagements, develops reporting for executives and boards, and promotes risk governance and culture across technology platforms. It requires strong stakeholder engagement, communication, and practical risk-management expertise within financial services.

Manage and enhance security across Zalando’s SAP landscape, including ABAP roles, Fiori access, HANA privileges, SAP BTP role collections, SAP GRC risk and emergency access, and modern authentication and identity provisioning tools. The role focuses on standardizing procedures, proactive monitoring, access reviews, audit readiness, automation, documentation, and developing a mature, service-oriented security function.

Design and implement security controls across Azure, AWS and GCP; monitor cloud environments for vulnerabilities and compliance; integrate security into CI/CD and IaC; support remediation and collaborate with engineering and DevOps to improve cloud security posture.

Embed application security across a large cloud-native, microservices fintech platform: design secure architectures, run threat modeling, integrate SAST/DAST and dependency/secrets scanning into CI/CD, manage vulnerability lifecycle, support pentests and bug bounties, and improve secure coding and AppSec maturity.

Design, advise on, and implement Microsoft security solutions; support customer projects across all phases; lead smaller projects; collaborate with Microsoft; define best practices and share knowledge within the security team.

Advise customers on deployment, integration, and operation of Microsoft Defender XDR (Endpoint, Identity, Office, Cloud Apps). Support technical implementation, design managed security services, identify optimization opportunities, and collaborate with engineering and SOC teams to ensure smooth service delivery.

Own architecture and implementation of MCU firmware, security components and HSMs. Design and develop security features (SecOC, SecureBoot) in modern C++ with unit tests and documentation. Review and approve requirements, architecture, design, code, tests and documentation. Collaborate with customers and internal teams to define secure embedded solutions for automotive ADAS and infotainment platforms.

Perform third-party information security risk assessments (including onsite reviews), review vendor policies and evidence against DB requirements, document security gaps and business impact, coordinate review processes and escalations, and support control framework improvements and stakeholder communications.

Design, implement, and manage secure cloud infrastructure and integrations for GCP and Azure. Automate provisioning with Terraform and GitHub Actions, build security automation with Python, configure and optimize SIEM solutions (Chronicle, Sentinel), and collaborate with vendors and cross-functional teams to enable cloud security monitoring and threat remediation.

Ensure accuracy, completeness, and integrity of Active Directory data by monitoring for anomalies, performing root-cause analysis, producing reports/dashboards, automating cleansing, and partnering with stakeholders to enforce AD data governance.

Design and drive the enterprise cryptography domain strategy, develop roadmaps, assess current cryptography posture, recommend improvements, and coordinate with security architects and stakeholders to align capabilities and mitigate emerging threats.

Detect and hunt cloud-based cyber threats for Google Cloud workloads using cloud SIEM/SOAR. Develop detection use-cases, automation playbooks, dashboards, collaborate with incident response and security teams, and improve security processes and tooling.

Act as subdomain Technical Information Security Officer for applications/infrastructure: perform compliance evaluations, define and support remediation, run risk assessments, ensure security scanning and asset testing, support incident response and privileged access management, enforce policies and recertify technical access.

Operate and maintain SOC operations, respond to security incidents (including on-call), build supply chain security into incident processes, prioritize vulnerability management, and support colleagues in incident handling and remediation.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Hands-on senior penetration tester responsible for planning and executing end-to-end offensive security assessments across applications, infrastructure, and cloud. Document scopes, test activities, and findings; produce clear technical reports and remediation guidance; collaborate with engineering teams; develop automation, custom tools, and exploits; mentor teammates and contribute to methodology and tooling improvements.

Lead product security incident response for hardware and software products: triage vulnerabilities, manage PSIRT JIRA tickets, coordinate cross-functional remediation, engage external researchers and vendors, define best practices for third-party and open-source components, and contribute to relevant regulations and standards.

Design, review, and specify software security architectures for embedded systems and firmware. Perform risk/threat analyses, root-cause investigations, develop countermeasures, liaise with customers and labs, and create innovative security solutions for product development and certification contexts.

Design, implement, and optimize regional SIEM platforms to aggregate, normalize, and correlate security events across IT, OT, and R&D. Lead detection engineering, integrate SIEM with SOAR/EDR/NDR and threat intelligence, drive automation of response workflows, enforce retention/compliance, and collaborate with SOC, threat hunters, and engineering to improve detection fidelity and OT/R&D security posture.

Lead end-to-end security analysis and architecture for NXP product solutions, translate regulatory and certification requirements into designs, evaluate security trade-offs, and assess risks from emerging trends (including AI/ML) to secure large-scale embedded and semiconductor products.

Design and verify secure architectures across infrastructure, applications, blockchain, Rust, and AI projects. Perform in-depth security assessments and audits, recommend mitigations, and embed with engineering teams to improve security posture and operational practices.

Lead IT security and operations to identify and remediate vulnerabilities, ensure ISO 27001 and SOC2 compliance, manage software, hardware and infrastructure, develop IT policies and SLAs, and build a high-performing IT department that delivers secure, reliable support across the business.