Senior IT Security Engineer – AI & Automation
We are recruiting a Senior IT Security Engineer – AI & Automation with broad IT security expertise, AI exposure and a strong automation mindset for our client, an international group with 30 years of presence in Romania.
You’ll join their growing IT team in Bucharest and take a key role in strengthening the security landscape as AI becomes increasingly embedded into the business. With group-level security frameworks already in place, your focus will be on adapting and optimising them for the needs of the sub-group, while connecting security governance with practical engineering and automation.
You’ll work across AI security, incident and alert automation, monitoring and broader IT security topics, collaborating with the internal SOC as a security partner. A key part of the role will be to shape how incidents and alerts are automated and handled, combining a solid security foundation with enough AI understanding to assess new technologies and risks.
📍 Location: One Cotroceni Park, Building B, Bucharest
🏢 Hybrid: 3 days/week in the office
📄 Employment: Individual Employment Contract (CIM)
✈️ Travel: Regular business trips to Germany
If IT security is your core expertise and you’re ready to bring AI and automation into the equation, apply or send us your CV, and let’s see if it’s a match.
Main Responsibilities
IT Security Governance and Automation
Analyze, assess, and continuously evolve the IT security architecture across the division
Define and enforce security policies, standards, and controls
Develop and implement auditable, measurable security measures, such as automated compliance checks, security dashboards, and audit trails
Build and operate a Security Monitoring and Automation Framework, including SIEM, SOAR, and IaC security scanning
Conduct regular risk assessments and vulnerability evaluations and coordinate penetration testing
Lead the escalation and management of security incidents as part of incident response
AI Security and Privacy by Design
Act as a security sparring partner for all AI use cases within the division from day one
Establish AI Security Guidelines, particularly for prompt injection prevention, model security, data leakage prevention, and adversarial robustness
Ensure data privacy and GDPR compliance in AI projects in close collaboration with the Data Protection Officer
Assess AI applications under the EU AI Act, including risk classification and mitigation planning
Build an AI Security Review Process for new use cases, including a Security by Design Gate
Raise awareness and train development teams and business units on AI security risks
Requirements
At least 5 years of professional experience in IT security, ideally in an international corporate environment
Solid knowledge of SIEM/SOAR systems, cloud security with Azure, AWS, or GCP, Zero Trust, IAM, and network security
Experience with security automation, for example using Python, PowerShell, Terraform, and CI/CD security
Proven knowledge of AI security, particularly LLM risks, ML pipeline security, and RAG security
Familiarity with relevant frameworks and regulations such as ISO 27001, NIST CSF, the EU AI Act, and GDPR
Strategic thinking and the ability to translate the big picture into concrete, actionable measures
Excellent communication skills and the ability to work fluently with both engineering teams and senior management
Pragmatic mindset with the ability to balance maximum security and operational agility
Initiative and assertiveness when setting standards and ensuring that they are upheld
Team-oriented approach and the ability to embed a security mindset into cross-functional teams without being perceived as a blocker
English: business proficient / negotiation level
Nice to Have
Certifications such as CISSP, CISM, CEH, CompTIA Security+, or equivalent qualifications
Good working knowledge of German
- Department
- IT&C | Technology Security
- Role
- Cyber Security
- Location
- Bucharest
- Remote status
- Hybrid
- Employment type
- Full-time
About Evolve Today
This text can be a short description about your company. A so called "boilerplate", describing your business, services or products that you offer and your target group.
This text should be informative rather than selling.