Security Operations

• Build and maintain security checks and detection content for the Invicti platform
• Create new OpenGrep detection rules for novel malware and vulnerability patterns
• Research vulnerability classes, exploitation techniques, and emerging attack patterns
• Translate research into production-ready detections
• Extend support for new programming languages across the analysis pipeline
• Triage analysis-pipeline packages and validate findings
• Build attack-chain templates combining low-severity findings into higher-impact detection scenarios
• Contribute to evaluation harnesses and benchmarks measuring false-positive rates, coverage, and accuracy
• Build and maintain testing frameworks for detection quality, exploit reproducibility, and regression coverage
• Triage difficult or ambiguous findings and maintain platform detection quality
• Refine internal detection and exploitation standards and methodologies
• Explore new tools and techniques for detecting threats and malware at scale
• Apply current AppSec, offensive security, AI security, LLM vulnerability, AI agent security, MCP security, and emerging attack research to detection engineering
• Collaborate with engineering, product, AI/ML, and infrastructure teams
• Integrate detection, testing, and validation into cloud-native infrastructure and CI/CD pipelines

Senior Security Operations Engineer – Europe

• Monitor and respond to security events and incidents
• Contribute to continuous improvement of team performance and operational efficiency
• Monitor logs and security events across various security tools
• Act as first responder by performing triage, threat analysis, and containment
• Document and report security incidents with detailed analysis and remediation recommendations
• Maintain accurate incident records to enhance future responses
• Communicate incident response activities to technical teams, senior management, and customers
• Escalate complex issues to senior analysts as needed
• Optimize detection rules and alert thresholds to reduce false positives and improve accuracy
• Conduct proactive threat hunting
• Research emerging threats and vulnerabilities to inform detection strategies and incident response playbooks
• Participate in the incident response on-call service
• Spend regular quality time on site at company offices or a client location for collaboration sessions, customer meetings, and internal workshops

Security Operations jobs in Romania

Senior Security Operations Engineer – Europe

Senior SOC Analyst