Information Security Engineer (Cybersecurity)

Location: Croatia, Serbia, Romania or Bulgaria. Remote, hybrid, or onsite work is available depending on preference.

Company

hirify.global is a B2B SaaS identity intelligence company providing identity, biometric, payment card, fraud detection, and continuous identity control solutions.

What you will do

• Lead the vulnerability management program in partnership with Product and Engineering teams.
• Define vulnerability management policies, guidelines, procedures, and reporting processes.
• Monitor infrastructure and products through vulnerability scans, security testing, and analysis of bug bounty reports.
• Support Engineering teams with vulnerability impact analysis and corrective actions.
• Oversee the security aspects of the Secure Software Development Lifecycle.
• Design security solutions and mitigation strategies while supporting regulatory and compliance alignment.

Requirements

• Experience in information security or DevOps.
• Knowledge of application security and cloud infrastructure best practices.
• Familiarity with OWASP Top 10, ASVS, SANS Top 25, and MITRE ATT&CK.
• Hands-on experience with vulnerability scanning and penetration testing tools.
• Working knowledge of coding and CI/CD practices.

Nice to have

• Knowledge of ISO 27001 and SOC 2 requirements.
• Understanding of encryption, authentication, and authorization mechanisms.
• Experience in risk management and security incident management.
• Interest in cybersecurity threats and security awareness.

Culture & Benefits

• Flexible remote, hybrid, and office-based work arrangements.
• Unlimited paid time off.
• Region-specific benefits.
• Equity participation.
• People-first culture focused on growth, learning, and impact.

Hiring process

• Submit a resume through the application process.
• Applications are considered based on qualifications, merit, and business needs.