Security Engineer

• Monitors SIEM, trouble tickets / email notifications and in-person escalations, logs from ICS infrastructure components (SCADA, HMI, PLC, RTU, Control Servers), applications or network devices such as switches, firewalls, IDS/IPS;
• Design, implement, test Security Orchestration, Automation and Response processes and procedures;
• SOAR playbook development and troubleshoot automation capabilities;
• Examine the escalated tickets to determine if they are true positive or false positives.
• Performs malware analysis, threat hunting and threat modeling activities;
• Assist forensic investigation by providing reports and other information;
• Reviews and suggests improvements to control deployment process and installation procedures
• Develops and documents remediation recommendations for business owners to improve the control environment in which a security incident occurs. Recommendations must be easily understood by non-technical staff;
• Provide recommendations and direction on the tuning of signatures, rules, alerts, parsers, and custom scripts within the monitoring solutions;
• Participates in root cause analysis and helps with the orchestration of remediation;
• Understand defense in depth strategies and apply those to Client’s environment;
• Creates and disseminates security related notifications for internal staff (for example: trends, developments, changes in capabilities);
• Acts as L2 Escalation layer in the SOC.
• Mentors Level 1 SOC Analysts;
• Creates manuals, guides and knowledge base entries;
• Keep abreast of latest security and privacy legislation, emerging threats, regulations, advisories, alerts, and vulnerabilities pertaining to HCE OT IR SOC and its customers;
• Remains knowledgeable of our current solution portfolio and the technical specificities of our offerings.

Advanced Cyber Security Architect – Engineer

• Administer and fine-tune Microsoft Sentinel (SIEM), including rule creation, use-case development, and incident triage
• Manage and optimize Elastic Stack (Elasticsearch/ELK) for log ingestion, indexing, and security analytics
• Configure, maintain, and troubleshoot enterprise firewalls (rule management, policy hardening, traffic analysis)
• Operate and tune EDR (Endpoint Detection & Response) solutions for threat detection and incident response
• Collaborate with SOC/IT teams to ensure compliance with banking regulatory and security standards

• Manage front desk operations and support office administration.
• Ensure physical security compliance within the Offshore Delivery Center (ODC).
• Coordinate audit and reporting activities.
• Act as key liaison for ODC-related requirements.
• Support daily office operations and assist in planning meetings, workshops, and events.
• Monitor and control access to secure areas and maintain physical security procedures.
• Prepare compliance reports and documentation for audits.

Reception & Physical Security Coordinator

• Planning, research, and design of Cyber security architectures;
• Development, review and approval of technical concepts and solutions;
• Verify Cyber security structures / solutions to ensure that they behave as expected;
• Perform technical Cyber security audits on network, cloud (SaaS, IaaS, PaaS);
• Analyse and approve IT Service Changes with impact on Schaeffler´s Cyber Security;
• Verification of the Cyber security of third-party vendors;
• Plan and carry out threat, risk analyses, and define countermeasures in accordancerisk acceptance criteria;
• Conduct security assessments, e.g. vulnerability testing and risk analysis;
• Prepare and perform Security awareness training for end user aswell as other IT colleagues;
• Define, implement and maintain corporate Schaeffler Cyber Security Guidelines, Rules Requirements;
• Security metrics delivery and improvements;
• Developing and maintaining documentation of application security controls.

IT Security Professional – Product Line Management

• Define, own and continually evolve the global internal IT and security strategy, ensuring alignment with business priorities, organisational growth and merger and acquisition activity.
• Lead the planning, integration and change management of acquired businesses into Beyond's technology estate, ensuring seamless transitions and minimal operational disruption.
• Oversee the design, implementation and continuous improvement of internal IT infrastructure, including SaaS platforms, end-user computing, collaboration technologies, networking and workplace technology.
• Develop, implement and maintain effective information security policies, governance frameworks and operational controls that protect company systems, data and intellectual property.
• Ensure compliance with relevant regulatory, contractual and certification requirements, including ISO 27001, ISO 9001, ISO/IEC 20000-1, ISO/IEC 42001, Cyber Essentials Plus, SOC 2 and data privacy (UK GDPR and equivalent regimes, including cross-border transfer governance), while leading audits, risk assessments and remediation activities.
• Lead the consolidation of separate legacy-entity certifications into a single group-wide Integrated Management System, while maintaining standalone certification for public-sector requirements.
• Own the global IT operating budget, vendor relationships and technology procurement, ensuring investment delivers value, scalability and operational efficiency.
• Lead business continuity, disaster recovery and incident response planning, regularly testing organisational resilience and driving continual improvement.
• Provide leadership for global IT operations and service delivery, ensuring reliable, responsive and high-quality support for employees across multiple international locations.
• Own the design and implementation of Data Transfer Agreements and Role-Based Access Control across delivery centres in the Philippines, Romania and Argentina.
• Act as the technical authority for customer security/compliance due diligence responses, ensuring consistent, accurate evidence across entities.
• Produce and maintain clear technical documentation, including high and low-level solution designs, architectural standards and operational procedures.
• Evaluate emerging technologies and recommend strategic improvements that enhance security, productivity and operational effectiveness.

Head of IT – Internal Security

• As a Cyber Security Engineer, you will play a key role in protecting Reconomy's global technology landscape by implementing and maintaining security controls across our infrastructure and applications. Working as part of our Group Information Security team, you will help strengthen our security posture through vulnerability management, secure configuration, security testing, and continuous improvement initiatives.
• In this role, you'll collaborate closely with infrastructure, engineering, and application teams to identify security risks, implement technical controls, and ensure security is embedded throughout the technology lifecycle. You'll also contribute to security projects, support penetration testing activities, investigate security issues, and help drive automation and best practices across a modern, cloud-first environment.
• This is an excellent opportunity to work on a diverse range of security technologies while contributing to the protection of a global business operating across more than 80 countries. If you're passionate about cyber security, enjoy solving technical challenges, and want to make a real impact within a collaborative and evolving environment, we'd love to hear from you.

Cybersecurity Engineer

• Set up and drive the overall information security strategy.
• Own the ISMS standards and their adoption, ensuring compliance with company and external requirements including SOC 2 and ISO 27001.
• Organise and manage ISMS-related scheduled activities and drive continuous improvement of the ISMS.
• Contribute to security architecture and design decisions.
• Oversee security tooling such as EDR, SIEM, MFA, password managers, device management, and access review processes.
• Act as the primary escalation point, during and outside business hours, for all major security-related incidents and events.
• Coordinate and manage corrective actions and responses to security incidents.
• Own security documentation, including policies, standards, exceptions, risk registers, and control evidence.
• Oversee the internal risk-assessment and audit programme, supporting internal and external audits, remediating findings, and tracking control improvements to closure.
• Support vendor and supplier risk management, including due diligence, sub-processor oversight, and security assessments.
• Own the access control process, validate and audit access across divisions and functions.
• Provide management reporting on risk posture, incidents, audit status, metrics, service trends, and improvement plans.
• Work with engineering, DevOps, HR, and customer facing teams to embed controls into everyday processes.
• Drive ongoing security governance improvements.
• Address data privacy and data protection concerns, and manage responses to customer data privacy requests.
• Act as Data Protection Officer (DPO) for the organisation if and as required.
• Help enforce security policies, building adoption, embedding them in the company culture, and introducing regular checks on departmental compliance.
• Own and deliver security awareness training and campaigns to strengthen the security culture.
• Complete security-related sections of RFPs and customer questionnaires, build and maintain a security knowledge base, and provide assurance of the integrity, confidentiality, and availability of information owned, controlled, and processed by the organisation.
• Attend meetings with customers and prospects to provide insights into how HICX implements security across the organization.
• Manage a small team of IT support admins providing internal IT support to HICX employees and contractors.
• Act as the escalation point for complex IT issues, incidents, and problems requiring cross-team coordination.
• Ensure IT support activities align with security controls, access management, and acceptable use requirements.
• Oversee onboarding, offboarding, account lifecycle management, and device provisioning/deprovisioning.
• Own and maintain standard operating procedures and the operations platform.
• Help balance usability, cost, and security when selecting or renewing SaaS and IT tools.
• Carry out other reasonable duties as required by the Company.

Information Security Manager

• Design, implement, and maintain data security controls across cloud platforms, applications, databases, and data pipelines to protect sensitive and regulated information.
• Develop and operate data protection capabilities including data classification, encryption, key management, data loss prevention (DLP), and access governance.
• Monitor, investigate, and respond to data security incidents, conducting root-cause analysis and driving remediation efforts.
• Partner with engineering, platform, and compliance teams to embed security requirements into system design, software development, and data lifecycle processes.
• Assess security risks, perform technical reviews, and support compliance with regulatory and industry standards such as GDPR, ISO 27001, NIS2, and customer security requirements.

Data Security Engineer

• Plan and execute red team engagements against enterprise IT and industrial OT environments
• Simulate real-world attack scenarios including: Initial access, lateral movement, privilege escalation, Persistence, data exfiltration, and command-and-control
• Conduct adversary emulation based on known threat actors (e.g., MITRE ATT&CK framework)
• Test security controls across IT infrastructure (Active Directory, cloud, endpoints, networks) and OT/ICS systems (SCADA, PLCs, industrial networks)
• Identify vulnerabilities in systems, applications, and network architectures
• Develop and deploy custom tools, scripts, and payloads for offensive operations
• Collaborate with Blue Team / SOC for purple team exercises
• Produce clear, actionable reports with: Attack paths, Risk assessments, Remediation recommendations
• Contribute to continuous improvement of detection capabilities and security strategies
• Stay current on emerging threats, vulnerabilities, and attack techniques (especially IT/OT convergence risks)

Senior Red Team Specialist – IT/OT Cybersecurity

• Define & manage security requirements – Identify, define, and oversee security requirements for various projects and systems.
• Ensure compliance & risk mitigation – Ensure all projects adhere to established security standards, reducing potential security risks.
• Support development teams – Collaborate with development teams at headquarters to formulate and refine security requirements.
• Implement requirements management tools – Utilize tools like Polarion for structured requirements management.
• Continuous monitoring & improvement – Regularly update, track, and ensure fulfillment of security requirements throughout the project lifecycle.

Senior Cybersecurity Requirements Manager

• Develop, maintain, and release new versions of JChat Java Client (Swing)
• Develop, maintain, and release new versions of JChat Web Client (Angular)
• Develop, maintain, and release new versions of JChat Openfire Server
• Develop, maintain, and release new versions of M-Link Server for JChat
• Participate in Scrum ceremonies
• Maintain and improve the development pipeline (CI/CD toolchain)
• Represent the JChat team at test events
• Produce working snapshot builds every two weeks
• Produce release candidates and test reports for each work package
• Ensure code quality: SonarQube A score (Security, Reliability, Maintainability)
• Maintain CI/CD uptime ≥ 98% and build success rate ≥ 95%
• Collaborate with NCIA Product Owner on backlog prioritisation (JIRA)

Software Engineer – Security Clearance

• Conducting audits and quality reviews of IT applications, with a special focus on SAP ERP, HR, and S/4 systems;
• Developing solutions and standards to ensure compliance with legal and internal requirements, especially regarding critical authorizations and segregation of duties;
• Collaborating closely with various stakeholders, including internal and external auditors, the internal control team, and business process owners;
• Regular review and reapproval of critical SAP access rights to ensure compliance and reduce associated risks;
• Designing, implementing, and continuously improving IT security and audit processes as well as related tools;
• Contributing to the global IT security and audit strategy;
• Defining and advancing IT security measures and audit guidelines in line with international standards such as NIST, ISO27001, and DSAG, and supporting their implementation.

Security Engineer jobs in Romania

See all jobs on JobTailor