offpeak

Vodafone

Security Expert

Bucharest, Romania (city only)

On-site

First seen by offpeak October 22, 2026

See your drive time Apply on Vodafone's site

Who we are

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation.
As the largest shared services organisation in the global telco industry with 30,000 FTE, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in-house and 3rd party capability.
We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal.
#VOIS #BeUnrivalled #CreateTheFuture

About this Role

We are seeking an experienced Cyber Security Operations Centre (CSOC) Security Analyst to provide advanced security analysis and contribute to the success of the Cyber Security Operations Centre. This role focuses on identifying and validating cyber threats through detailed analysis of security events, logs, alerts, firewall activity and other telemetry sources using a broad range of cyber defence technologies. The successful candidate will investigate complex threats, support incident response activities, perform threat hunting and forensic analysis, and help improve detection capabilities through automation, fine-tuning and optimisation initiatives. This position is based in Bucharest and follows a hybrid working model.

What you’ll do

-Investigate, analyse and triage security alerts and events using manual and automated techniques.
-Provide end-to-end support for security incidents and contribute to incident response activities.
-Analyse unusual patterns, behaviours and anomalies to identify potential cyber security threats.
-Perform threat hunting and forensic investigations to support the identification and remediation of complex threats.
-Develop and enhance automation, scripts and analytical tools using technologies such as Python, PowerShell, Java, JavaScript, Ruby, KQL and similar alternatives.
-Define technical and functional requirements to improve detection capabilities and strengthen security controls.
-Conduct historical investigations using security monitoring and analysis platforms.
-Contribute to SIEM optimisation by reducing false positives and improving threat detection effectiveness.
-Support the refinement of SOAR playbooks and automated response actions.
-Collaborate with global teams and local market CSIRT teams during security investigations and incident management activities.
-Participate in operational reviews, daily stand-ups and continuous service improvement initiatives.
-Create and maintain knowledge articles, standard operating procedures, known error databases and security documentation.

Who you are

-You have 5+ years of experience in Cyber Security Operations, Security Monitoring, SIEM operations, alert analysis and security incident investigation.
-You possess strong knowledge of networking and cyber security concepts.
-You have hands-on experience with SIEM technologies such as Splunk, Microsoft Sentinel, ArcSight, Elastic/ELK, Google Chronicle or similar platforms.
-You hold, or are working towards, recognised industry certifications such as CEH, CCNA Cyber Ops or CompTIA Security+.
-You demonstrate strong analytical, communication and problem-solving skills.
-You have experience analysing security events across network, endpoint, cloud and infrastructure environments.
-You understand cyber threats, attack techniques, threat hunting methodologies and incident response processes.
-You have experience supporting global stakeholders and customers.
-You hold a degree in Computer Science, Information Technology, Engineering or a related discipline.
-You are self-motivated, collaborative and committed to continuous learning within cyber security.

Not a perfect fit?

Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit best.

What's in it for you

- Hybrid way of working: 2 days per week/ 8 per month
- Medical and dental services
- Life and hospitalization insurance
- Dedicated employee phone subscription
- Take control of your benefits and choose any of the below options: MEAL TICKETS/ PRIVATE PENSION/VACATION VOUCHERS/ CULTURAL VOUCHERS within the budget.
- Special discounts for gyms and retailers
- Annual Company Bonus
- Ongoing Education – we continuously invest in you to ensure you have everything needed to excel on the job and enhance your skills
- You get to work with tried and trusted web-technology
- We let you write your own story by planning vacations: go for a trip, experience new things, have fun and enjoy your 23 days off.
- Special Paternal Program - 4 months of paid paternity leave

What skills you will learn

-Advanced threat detection and investigation techniques.
-Cyber threat hunting and digital forensic analysis.
-SIEM optimisation and detection engineering practices.
-Security automation and orchestration using SOAR capabilities.
-Security scripting and automation development using multiple programming languages.
-Incident response management and global stakeholder engagement.

VOIS Equal Opportunity Employer Commitment

Vodafone recognises and celebrates the value of diversity in building a workforce that reflects the customers and communities it serves. No form of discrimination is tolerated. This includes, but is not limited to, discrimination based on race, colour, age, veteran status, gender identity, gender expression, sexual orientation, pregnancy, maternity or parental status, ethnicity, disability, religion or belief, political affiliation, trade union membership, nationality, citizenship, indigenous status, medical condition, HIV status, neurodiversity, social origin, cultural background, marital or civil partnership status, or socio-economic background. 

Join Us

At Vodafone, we’re working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this.
We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together.
With us, you can truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.

Alert

Apply for Vodafone jobs only through the official Vodafone Careers website to avoid job scams and fraud.
#JDEnhancedByTARA

Follow us on social media

LinkedIn: https://www.linkedin.com/company/vois/
Facebook: https://www.facebook.com/voisglobal
Instagram: https://www.instagram.com/voisglobal/