Staff Security Engineer (SecOps & Threat)

Location: Romania, Remote

Company

hirify.global develops technology focused on helping companies improve growth, retention, and operational efficiency.

What you will do

• Execute end-to-end Security Operations and Threat Management initiatives aligned with the security roadmap.
• Monitor environments, assess vulnerabilities, analyze logs, and investigate complex incidents including system compromises, intrusion attempts, and denial-of-service attacks.
• Coordinate with vendors and Infrastructure, IT, GRC, Cloud, and Application Security teams to validate alerts, resolve incidents, and perform root cause analysis.
• Research emerging threats, vulnerabilities, and attack vectors, then implement mitigating controls across products and services.
• Perform security forensics, build advanced security automation and tools, and lead threat exercises.
• Maintain runbooks, workflows, dashboards, and project milestones while participating in the Security Operations on-call rotation and mentoring security engineers.

Requirements

• 5+ years of experience in Security Operations or a similar security team.
• 3+ years of experience developing automation and 2+ years conducting adversary emulation exercises.
• Experience with security tools and cloud environments, including vulnerability scanners, SIEM, SOAR, and AWS.
• Knowledge of security frameworks, regulations, and standards such as MITRE ATT&CK, STRIDE, PASTA, ISO 27001, SOC 2, GDPR, PCI, SOX, and NIST.
• Ability to work independently, collaborate cross-functionally, prioritize risks, and communicate technical requirements and mitigations clearly.
• Applicants must be based in Romania for this remote role.

Nice to have

• Bachelor's degree in a related field.
• Certifications such as CISSP, CISM, or GIAC.

Culture & Benefits

• Full-time employees receive health coverage, paid parental leave, paid time off, holidays, quarterly self-care days, and stock options.
• Equipment and support are provided for working from home or connecting with office-based teams.
• Learning and development opportunities include access to LinkedIn Learning.
• Wellness education sessions, wellness days, and employee resource group events support employee well-being and inclusion.