Cyber Security Specialist

📣 Would you like to join a company that puts people at the heart of its concerns? We are waiting for you! Since 2007, Extia, an IT consulting company, has been offering a unique approach in its field by combining well-being at work and performance.

Our philosophy at Extia is “First who, then what", so let's go for it!

🚀 First who?

• Hands-on and execution-oriented, you prefer to build, test, and wire things rather than just running steering committees.
• Strong communicator, you excel at stakeholder management and can seamlessly influence both technical and non-technical audiences.
• Analytical and detail-oriented, you possess an analytical mindset with strong problem-solving capabilities, complemented by excellent documentation and reporting skills.

This role is hybrid, 5 days/week from the office in Bucharest.

🚀 Then what?

Cyber Security Specialist Consultant with a mission to implement, configure, deploy, and integrate security capabilities across our strategic products. Your daily tasks will include:

• CI/CD Pipeline Hardening : Define and promote secure CI/CD standards, integrate security testing (SAST, SCA, DAST, Secret and Container scanning), and support vulnerability remediation throughout the SDLC.
• Product Security Monitoring : Embed operational security controls in production environments, coordinate logging and alerting, and facilitate risk treatment planning between product, engineering, and security teams.
• Cloud Resilience & Disaster Recovery: Assess and implement cloud security strategies, ensure high availability, and coordinate disaster recovery planning, testing (RTO/RPO), and resilience gap remediation.
• Fraud Management Integration: Collaborate with the fraud management team to securely onboard and integrate fraud detection/prevention platforms and define their monitoring alerts.
• Security Integration & Governance: Drive Security by Design and Secure SDLC practices, align technical solutions with industry standards, partner with business stakeholders, and track security findings until closure.

Required technical skills & profile:

• Experience: Min. 5 years of experience in cybersecurity with a strong understanding of information security principles and risk management.
• Core Knowledge: Deep understanding of DevSecOps, CI/CD security controls, Application Security, IAM (PAM, MFA), IT Resilience, Cloud/Infra Security, and Data Security.
• Tools & Methodologies: Hands-on experience with SDLC application security tools (e.g., SonarQube, Qualys, Trivy, Aikido) and vulnerability/incident response processes.
• Domain Knowledge: Knowledge of fraud management, transaction monitoring, or fraud prevention solutions.
• Languages: English is mandatory (all documentation/deliverables are in English). French is a strong plus.
• Nice to have: Experience in a large international group or digital platform environment; Security certifications (AZ-500, CKS, CISSP, ISO 22301 or equivalent).

🚀 Do you recognize yourself in the "Who" and represent the "What"? Apply and let's talk!