Careers

We build cybersecurity for Romania

We're a small, growing team helping companies in Romania and the European Union understand and reduce their cybersecurity risk -- from penetration testing, to phishing simulations and NIS2 compliance. If you like working on concrete things, with direct impact on real clients, we'd love to talk.

Open positions

Cybersecurity Consultant (Pentester)

Full-timeHybrid Bucharest / Remote
Apply now

You perform penetration tests on web applications, networks, and cloud infrastructure for our clients in Romania and the European Union, from reconnaissance through reporting and retesting.

What you'll do

  • Perform penetration tests (black/grey/white box) within the scope agreed with each client
  • Write clear technical reports, with evidence and prioritized remediation recommendations
  • Take part in retesting after remediation and confirm that found vulnerabilities are resolved
  • Collaborate with the team on developing internal methodology and testing checklists

What we're looking for

  • Hands-on experience with OWASP Top 10 and OWASP API Security Top 10
  • Familiarity with tools like Burp Suite, Nmap, Metasploit, or equivalents
  • Solid knowledge of networking and operating systems (Linux/Windows)
  • A certification (OSCP, eJPT, CEH, or equivalent) is a plus, not a requirement
  • Professional-level Romanian and English, written and spoken

Security Monitoring Analyst (SOC)

Full-timeHybrid Bucharest / Remote
Apply now

You monitor security alerts and logs for our clients, investigate incidents, and contribute to the team's NIS2/CyFun compliance reports.

What you'll do

  • Monitor and triage security alerts from client systems (logs, EDR, email security)
  • Investigate and document security incidents, escalating when needed
  • Contribute to phishing simulations and to interpreting results for clients
  • Support the team in generating NIS2 and CyFun compliance reports for clients

What we're looking for

  • Basic understanding of SIEM/logging and network protocols (TCP/IP, DNS, HTTP/S)
  • Attention to detail and the ability to clearly document technical findings
  • Availability for occasional monitoring rotations, outside standard hours
  • A basic certification (Security+, eJPT) or relevant studies is a plus
  • Professional-level Romanian and English, written and spoken

Don't see a role that fits, but think you'd bring something to the team? Write to us anyway at cariere@secureaware.ro with a CV and a few lines about yourself.