Senior Security Engineer (Cybersecurity)

Location: Hybrid in Zagreb, Croatia; only candidates already based in Croatia will be considered.

Company

hirify.global provides software supply chain security and threat intelligence solutions that help Fortune 500 companies, government agencies, and security teams detect and respond to threats in software.

What you will do

• Lead security investigations and incidents from triage through containment, eradication, recovery, and blameless post-incident reviews.
• Run and improve SIEM, monitoring, and alerting; define logging requirements and build and tune MITRE ATT&CK-based detections.
• Proactively hunt threats across endpoints, identities, networks, and cloud environments using threat intelligence.
• Manage and strengthen EDR, firewalls, IDS/IPS, email security, identity and access management, and other security controls.
• Conduct vulnerability assessments, prioritize remediation by exploitability, and secure cloud and container environments with the Platform team.
• Support security guidance, policies, risk and vendor assessments, audits, and incident response playbooks.

Requirements

• 5+ years of experience in security operations roles.
• Hands-on incident response experience from initial alert through post-incident review.
• Strong experience with SIEM platforms, including writing and tuning detections.
• Hands-on experience with EDR, IDS/IPS, firewalls, and vulnerability scanners.
• Deep understanding of networking, Windows, Linux, macOS, and attacker movement through these environments.
• Practical experience with MITRE ATT&CK and incident response frameworks.
• AI-forward mindset, including use of AI tools and understanding of emerging AI-related security risks.
• Scripting skills in Python, PowerShell, or Bash for analysis and response automation.
• Ability to understand complex environments end to end and explain risk clearly to technical and non-technical audiences.
• Degree in computer science or a related field, or equivalent practical experience; clear written and spoken English.

Nice to have

• Application security experience, including WAFs and protection of internet-facing applications at scale.
• Container, Kubernetes, and cloud security experience, ideally with AWS.
• Digital forensics or malware analysis experience.
• CISSP, CISM, GCIH, GCIA, Security+, or similar security certification.
• Experience supporting ISO 27001 or SOC 2 compliance frameworks.

Culture & Benefits

• Hybrid work, flexible working hours, and paid accommodation and transportation to Zagreb during onboarding for remote employees.
• Permanent contract, performance-based bonus system, education budget, conferences, seminars, and access to a company library.
• Career advancement opportunities, internal promotions, challenging projects, and a collaborative team environment.
• Health checkups, Multisport card, newborn child allowance, rent-cost and third-pillar pension benefits, and a fully covered car garage in Radnička.
• Quarterly company-wide three-day Wellness Weekends and employee referral bonuses.