Security Engineer (Hybrid, Bucharest)

Stack

Responsibilities

• ▹Partner with Incident Response Operations to identify operational challenges and engineer scalable solutions
• ▹Automate repetitive investigative and response workflows to reduce manual effort and accelerate incident handling
• ▹Design solutions that improve investigative efficiency, enrich security data and simplify analyst workflows
• ▹Design, implement and maintain security detections across a variety of technologies and data sources
• ▹Improve detection fidelity by reducing false positives and increasing actionable alert quality
• ▹Develop and maintain detection, enrichment and response pipelines
• ▹Collaborate with Threat Intelligence to operationalise threat intelligence through detections and automation
• ▹Develop automation, integrations and internal tooling for security operations
• ▹Build and maintain integrations between security platforms, cloud services and internal systems
• ▹Engineer reliable, cloud-native capabilities using CI/CD pipelines, Infrastructure as Code and modern software engineering practices
• ▹Contribute to engineering standards, documentation and continuous improvement initiatives

Requirements

• ▹Hands-on experience investigating and responding to cybersecurity incidents in a SOC, CSIRT or Incident Response team
• ▹Experience developing software using Python, Go or another modern programming language
• ▹Experience building automation, APIs or systems integrations
• ▹Experience working with cloud platforms such as AWS, Azure or Google Cloud
• ▹Understanding of Linux, networking, authentication and enterprise security technologies
• ▹Strong analytical, troubleshooting and communication skills

Nice to have

• ▹Experience building CI/CD pipelines using GitLab CI, GitHub Actions, Jenkins or similar platforms
• ▹Experience with Docker, Kubernetes, Terraform or other Infrastructure as Code technologies
• ▹Experience with SIEM, EDR, SOAR, identity or cloud security platforms
• ▹Experience with security telemetry, log analytics or detection engineering
• ▹Familiarity with MITRE ATT&CK, threat hunting methodologies or threat intelligence
• ▹Experience applying AI or machine learning to improve security operations and engineering workflows

Soft skills

What we offer

• ▹Market leader in compensation and equity awards
• ▹Comprehensive physical and mental wellness programs
• ▹Competitive vacation and holidays
• ▹Paid parental and adoption leaves
• ▹Professional development opportunities for all employees
• ▹Employee networks, geographic neighborhood groups and volunteer opportunities
• ▹Vibrant office culture with world class amenities
• ▹Great Place to Work certified across the globe

About the company

CrowdStrike is a global cybersecurity leader that protects the people, processes and technologies that drive modern organizations. Since 2011 its mission has been to stop breaches, and its AI-native platform processes almost 3 trillion events per day on large scale distributed systems.