Senior Security Engineer

Please note: for this position, we are only considering candidates who are already based in Croatia.At ReversingLabs, we provide the world's largest threat intelligence repository to protect software development and power advanced security solutions, keeping leading cybersecurity organizations and Fortune 500 enterprises informed and ahead of threats. Only ReversingLabs delivers the software package analysis speed and depth needed to protect against software supply chain risk.Our vision is clear: to arm every company with end-to-end insights so that development teams release securely, IT purchases safely, and the SOC can effectively detect, isolate, and respond. We are seeking extraordinary talent for this game-changing opportunity to help forge this transformational journey at ReversingLabs.Why this role is differentAt ReversingLabs, security is not a side function; it's what the whole company does. You'll protect an organization where people understand threats deeply, so security conversations start from shared ground rather than from scratch. You'll work alongside threat researchers and malware analysts who study attackers every day, and you can draw on their insight when you investigate.The roleOur IT Security team protects ReversingLabs' people, systems, and data: our corporate environment, our cloud infrastructure, and the services behind our products. We're looking for a senior security engineer with a strong security operations background: someone who can run an investigation end to end, build the detections that catch the next attack, and strengthen the controls around them. You'll play a key role in our security operations and help shape the security strategy of a growing global company. You'll report to our Security Engineering Lead and work closely with IT, our Platform/SRE team, and engineering teams across the company.What You'll DoDetect and respondLead security investigations and incidents end to end: triage, scoping, containment, eradication, and recovery, followed by blameless post-incident reviewsRun and improve our SIEM, monitoring, and alerting: shape what we log, build and tune detections mapped to MITRE ATT&CK, and keep false positives low.Hunt proactively for threats across endpoints, identities, network, and cloud, using threat intelligence, including our ownWrite and improve incident response playbooksHarden and preventManage and improve our security controls: EDR, firewalls, IDS/IPS, email security, and identity and access managementRun vulnerability assessments and drive remediation with IT and engineering teams, prioritizing by real-world exploitabilitySecure our cloud and container environments together with the Platform teamGive security guidance in projects early, while design decisions are still cheap to changeGovern and assureKeep our security policies and guidelines practical, and make sure we follow themTake part in risk assessments and vendor security assessments, and support internal and external auditsWhat We're Looking For5+ years in security operations rolesHands-on experience in incident response, from first alert to post-incident review.Strong experience with SIEM platforms, including writing and tuning detectionsHands-on experience with EDR, IDS/IPS, firewalls, and vulnerability scannersDeep understanding of networking and operating systems (Windows, Linux, macOS), and of how attackers move through themPractical experience with MITRE ATT&CK and with incident response frameworks.An AI-forward mindset: you use AI tools to work faster and smarter, and you understand the new security risks they bringScripting skills in Python, PowerShell, or Bash to automate analysis and responseThe ability to understand complex environments from top to bottom, and to explain risk clearly to engineers and non-engineers alikeA degree in computer science or a related field, or equivalent practical experienceClear written and spoken EnglishNice to haveApplication security experience, including WAFs and protecting internet-facing applications at scaleContainer and Kubernetes securityCloud security experience, ideally in AWSDigital forensics or malware analysis experienceSecurity certifications such as CISSP, CISM, GCIH, GCIA, or Security+Experience supporting compliance frameworks such as ISO 27001 or SOC 2BenefitsHybrid work options (paid accommodation & transportation to Zagreb during onboarding for remote employees)Flexible working hoursGenerous compensation and a bonus system based on annual performanceHefty personal education budget and possibility to attend leading conferences and seminars in the fieldCompany library and possibility to order books of choice via AmazonPermanent contract in a fast-growing global company with Fortune 500 & governmental agencies as clientsChallenging projects in a dynamic, collaborative teamGreat career advancement opportunities - clear goals & internal promotionsEmployee referral bonus program, EUR 1,060 net for junior position, EUR 2,123 net for mid to senior positions, and EUR 2,654 net for principal/managerial positionsMultisport card, annual health checkup, newborn child allowance, rent-cost, and 3rd pillar pension benefitsWellness Weekends - quarterly, company-wide three day weekend, starting with a company paid Friday off for all employeesFully covered car garage in Radnička for all employeesAbout ReversingLabsReversingLabs is the leader in software supply chain security, helping the world's most security-conscious organizations detect and respond to threats hidden inside software. Our platform is trusted by Fortune 500 companies, government agencies, and security teams globally. We're a company that takes the work seriously and takes care of the people doing it.🌐 Careers Page💼 LinkedIn🔍 Our Technology