4 days ago
Bucharest, RomaniaEntry Level
Responsibilities
- Monitor, identify, investigate, and respond to security threats and system anomalies within the SOC.
- Support CSIRT response activities and collaborate with incident task forces throughout the security incident lifecycle.
- Manage incoming security tickets and keep technical and intermediate stakeholders informed during incident resolution.
- Document security cases and write forensic incident investigation reports.
- Improve monitoring coverage, conduct proactive threat hunting, curate operational playbooks, and participate in security education.
- Participate in structured on-call responsibilities outside core business hours.
Requirements
- Professional experience in a SOC or CSIRT environment, ideally for at least one year.
- Hands-on exposure to enterprise SIEM and endpoint detection and response tools.
- Practical understanding of securing AWS assets, Kubernetes deployments in AWS, and Google Workspace or similar corporate cloud environments.
- Operational knowledge of the MITRE ATT&CK Framework.
- Scripting experience with Python, PowerShell, or Bash.
- Good written and verbal English communication skills, including technical report writing and stakeholder interaction.
Benefits
- 22 days of annual holiday, increasing up to 25 days based on tenure.
- Private medical coverage with options to add family members.
- Daily meal allowance of 30 RON per working day.
- Public transport ticket subsidy.
- Office-first working model requiring at least three days per week in the office.
- Role based in Zalando’s Bucharest office.
Tech Stack
Categories
About Zalando
Zalando operates a European online fashion and lifestyle platform where consumers shop apparel, footwear, accessories, and beauty, and brands sell via its marketplace. The public company, founded in 2008 and headquartered in Berlin, runs its own logistics network and serves over 50 million active customers across 25 markets. Its business spans direct e-commerce, partner services, and payments and risk systems that support the platform’s operations.