Cyber Security Engineer (Infrastructure & AI Platform Security)

Location: Bucharest, Romania; hybrid work with 3 days per week in the office

Company

hirify.global provides cloud infrastructure, cloud services, hosting, domains, web presence and productivity solutions, and cloud solutions for businesses across Europe and North America.

What you will do

• Define and maintain security architecture standards and hardening baselines for virtualization, container, control-plane, provisioning, DNS, mail, backup and recovery infrastructure.
• Assess tenant isolation and drive remediation across shared hosting, virtualization and container platforms.
• Review infrastructure designs and major changes, reduce blast radius for privileged access and administrative segmentation, and advise platform, cloud and brand engineering teams.
• Support Cyber Defense, Vulnerability Management and IT Emergency Management during incidents and post-incident hardening.
• Own security architecture and baseline standards for internal AI platforms, including model gateways, self-hosted models, agents, connectors and retrieval pipelines.
• Define agent identity, authentication, authorization, secrets handling, least-privilege access, human-in-the-loop controls, data access, logging and pre-deployment reviews.

Requirements

• Several years of hands-on infrastructure or platform security experience, ideally in a hosting provider, cloud provider, telco or comparable large-scale multi-tenant environment.
• Deep practical knowledge of Linux, virtualization, container platforms, networking and the security properties of multi-tenant infrastructure.
• Strong experience with privileged access, machine and workload identity, secrets management, authorization models and infrastructure-as-code security.
• Experience designing and enforcing security standards in heterogeneous, partly legacy environments and gaining adoption from teams without direct management authority.
• Working knowledge of LLM and agent systems and risks including prompt injection, over-scoped tool access, retrieval-related data exposure, unlogged autonomous actions, and model or provider dependency.
• Ability to make and defend risk-based decisions, including blocking deployments with clear rationale, and explain technical risk to non-technical stakeholders.
• Fluent English required; German is an advantage.

Nice to have

• Production experience deploying or securing internal AI platforms, agent frameworks or tool-calling integrations.
• Familiarity with NIS2, BSIG or ISO 27001.
• Background in DNS, email infrastructure or abuse-adjacent platform security.
• Experience in multi-brand or post-acquisition environments.
• Security engineering or development experience with automation, tooling or scripting.

Culture & Benefits

• Permanent, full-time position with flexible scheduling and hybrid work.
• Technical and soft-skills training, development opportunities and access to e-learning platforms.
• Modern technologies and product responsibility.
• Private medical services package, 25 vacation days per year, substitute days off for weekend public holidays and meal tickets.
• Team and networking events, referral program, and office refreshments.