Cyber Security Engineer Croatia

Role Overview

An international organisation is seeking a handson Senior Cybersecurity Engineer to strengthen and mature its security capabilities across cloud identity and operational environments.

Fully remote (reporting into a hiring manager based in another region).

This is a pivotal role focused on building centralised visibility improving detection and response and preparing the organisation for a future managed Security Operations Centre (SOC) capability.
You will work across cloud security identity endpoints and infrastructure while acting as a key technical partner to an external managed SOC provider. As the security function evolves this role offers a clear progression path toward Cybersecurity Architect or Security Lead.

Key Responsibilities:

Security Monitoring & Detection

• Design and implement centralised security monitoring (SIEM or equivalent)
• Prepare environments for successful managed SOC integration
• Improve detection use cases to increase signal quality and reduce noise
• Enhance visibility across cloud identity and operational systems

Managed SOC Integration

• Act as the primary technical liaison for the managed SOC provider
• Support SOC onboarding log ingestion tuning and usecase development
• Validate alerts incident handling and reporting outputs
• Continuously refine detection fidelity and response effectiveness

Cloud Security

• Manage and optimise cloudbased security controls
• Improve web application security bot protection and traffic filtering
• Monitor and analyse traffic patterns to identify threats and anomalies
• Strengthen resilience against denialofservice and abuse scenarios

Identity & Collaboration Platform Security

• Enhance identity protection and conditional access controls
• Improve email security and antiphishing defences
• Strengthen audit logging monitoring and investigation workflows
• Support investigations into user activity and account compromise

Incident Response & Operational Security

• Establish internal incident response processes aligned with SOC workflows
• Define runbooks escalation paths and operational responsibilities
• Support incident investigations and postincident reviews

Vulnerability Management & Security Testing

• Implement vulnerability scanning across infrastructure and endpoints
• Integrate security testing into CI/CD pipelines
• Drive remediation efforts and track risk reduction initiatives

Security Engineering & Architecture

• Improve security controls across cloud onpremise and hybrid environments
• Embed security into both digital and operational technology environments
• Support secure design architecture reviews and threat modelling

Risk & Compliance

• Support implementation of controls aligned to recognised frameworks
• Contribute to risk identification mitigation and reporting
• Assist with audit readiness and evidence collection

Stakeholder Engagement

• Build strong working relationships with business and technology teams
• Act as a trusted internal security advisor
• Improve awareness of shared security responsibilities across the organisation

Experience & Skills

Required

• 5 years experience in cybersecurity or security engineering
• Handson experience with:
  • SIEM and log management platforms
  • Cloudbased security controls
  • Identity and access management
  • Endpoint protection
• Strong troubleshooting threathunting and investigation skills
• Experience operating in complex distributed environments
• Familiarity with security frameworks such as ISO 27001 or NIST

Preferred

• Experience working with or integrating managed SOC services
• Prior involvement in log onboarding and detection tuning
• Knowledge of security controls in CI/CD pipelines
• Exposure to regulatory or operational resilience frameworks
• Relevant security or cloud certifications

What Success Looks Like (612 Months)

• Centralised security visibility fully established and SOCready
• Managed SOC successfully onboarded and optimised
• Highquality detection use cases in place with low falsepositive rates
• Significantly improved cloud and identity security posture
• Incident response processes aligned with SOC operations
• Vulnerability management operating effectively
• Clear progress toward audit and resilience readiness