Cybersecurity Specialist

📣Would you like to join a company that puts people at the heart of its concerns? We are waiting for you! Since 2007, Extia, an IT consulting company, has been offering a unique approach in its field by combining well-being at work and performance.

Our philosophy at Extia is “First who, then what”, so let's go for it!

🚀 First Who?

• Versatile, with a broad understanding of cybersecurity across multiple security domains.
• Analytical, with strong problem-solving skills and the ability to assess security risks.
• Collaborative, comfortable working with technical teams and stakeholders across different functions.
• Proactive, able to identify security gaps and contribute to practical solutions.

This role is hybrid, requiring 5 days per month in the client's Bucharest office.

🚀 Then what?

We are looking for a Cybersecurity Specialist to join our fintech client and contribute to securing strategic products across multiple cybersecurity domains, including application, cloud, infrastructure security, and IT resilience. You will work closely with product and engineering teams to implement and integrate security capabilities.

Responsibilities:

• Define and review secure CI/CD standards, pipeline configurations, and deployment controls.
• Integrate security testing activities, including SAST, SCA, DAST, secret scanning, and container security scanning.
• Support vulnerability management and remediation throughout the SDLC.
• Promote DevSecOps, Security by Design, and Secure SDLC practices across development teams.
• Coordinate security controls and requirements across applications, infrastructure, and production environments.
• Support cloud security and assess solutions against security, availability, recovery, and resilience requirements.
• Contribute to disaster recovery planning and testing, identify resilience gaps, and support remediation initiatives.
• Review architectures and technical solutions from a security perspective, ensuring alignment with security standards, regulatory requirements, and industry best practices.
• Collaborate with product, engineering, platform, and security stakeholders, tracking security findings through to closure.

Requirements:

• 5+ years of experience in Cybersecurity, with a broad understanding of information security principles and risk management.
• Experience across multiple cybersecurity domains, without requiring deep specialization in one specific area.
• Understanding of DevSecOps, secure CI/CD, vulnerability management, and secure development practices.
• Good knowledge of key security domains, including:
• Application Security: SAST, DAST, SCA, secret scanning, vulnerability management.
• IAM: access reviews, PAM, MFA.
• Cloud and Infrastructure Security.
• IT Resilience: RTO/RPO, disaster recovery.
• Data Security.
• Familiarity with security scanning tools such as SonarQube, Qualys, Trivy, Aikido, or similar.
• Experience in a large international organization or digital platform environment is a plus.
• Security certifications (e.g. AZ-500, CKS, CISSP, ISO 22301) are a plus.
• Strong communication, stakeholder management, analytical, problem-solving, and documentation skills.
• English – mandatory; French – nice to have.

🚀 Do you recognize yourself in the "Who" and represent the "What"? Apply and let's talk!