Cybersecurity Consultant (AI)

Location: Bulgaria or Romania; hybrid work with 3 days per week on-site in Bucharest. Work from the European Union region and a work permit are required.

Company

Global AI-first digital transformation and engineering partner delivering scalable products, platforms, data-driven solutions, and security improvements for international clients.

What you will do

• Harden CI/CD pipelines with least-privilege access, isolated build environments, configuration as code, secure secrets management, and credential rotation.
• Integrate and tune SAST, DAST, SCA, dependency, secret, container, and infrastructure-as-code security checks.
• Strengthen software supply-chain and release security through artifact signing, SBOM generation, dependency pinning, trusted registries, branch protection, and mandatory reviews.
• Build and maintain authoritative inventories of APIs, endpoints, infrastructure, ownership, classification, exposure, and lifecycle status.
• Design access matrices for users, service accounts, API clients, integrations, and automated jobs while applying least-privilege and segregation-of-duties principles.
• Onboard assets into Qualys, coordinate vulnerability triage and remediation, document controls and findings, and support knowledge transfer.

Requirements

• Proven experience in information security, IT security, or product security in complex technical environments.
• Hands-on experience with security asset management, SAST and DAST, API security, vulnerability management, RBAC, access matrices, IAM, and SSO.
• Knowledge of authentication, authorization, encryption, least-privilege access, service-account security, and relevant security controls.
• Familiarity with ISO 27001, NIS2, or SOC 2 frameworks and strong technical documentation skills.
• Professional fluency in English is required because documentation and deliverables are in English.
• Work from the European Union region and a valid work permit are required.

Nice to have

• Experience with AWS, GitHub, Qualys, Okta, or Microsoft Entra ID.
• Knowledge of software supply-chain security, SBOMs, artifact signing, and dependency security.
• Experience working across multiple product and engineering teams in an international organization.
• Practical experience using AI-powered assistants such as Claude Code, GitHub Copilot, or Cursor.

Culture & Benefits

• International collaboration across engineering, IT, compliance, and business stakeholders.
• High autonomy in technical decision-making and a hands-on, delivery-focused working style.
• Continuous focus on growth, engineering excellence, and knowledge sharing.
• Hybrid work arrangement with regular on-site collaboration.

Hiring process

• CV review.
• HR call followed by an interview and client interview.
• Final decision.