Please note: for this position, we are only considering candidates who are already based in Croatia.
At ReversingLabs, we provide the world’s largest threat intelligence repository to protect software development and power advanced security solutions, keeping leading cybersecurity organizations and Fortune 500 enterprises informed and ahead of threats. Only ReversingLabs delivers the software package analysis speed and depth needed to protect against software supply chain risk.
Our vision is clear: to arm every company with end-to-end insights so that development teams release securely, IT purchases safely, and the SOC can effectively detect, isolate, and respond. We are seeking extraordinary talent for this game-changing opportunity to help forge this transformational journey at ReversingLabs.
Why this role is different
At ReversingLabs, security is not a side function; it's what the whole company does. You'll protect an organization where people understand threats deeply, so security conversations start from shared ground rather than from scratch. You'll work alongside threat researchers and malware analysts who study attackers every day, and you can draw on their insight when you investigate.
The role
Our IT Security team protects ReversingLabs' people, systems, and data: our corporate environment, our cloud infrastructure, and the services behind our products. We're looking for a senior security engineer with a strong security operations background: someone who can run an investigation end to end, build the detections that catch the next attack, and strengthen the controls around them. You’ll play a key role in our security operations and help shape the security strategy of a growing global company. You’ll report to our Security Engineering Lead and work closely with IT, our Platform/SRE team, and engineering teams across the company.
What you'll do
Detect and respond
Lead security investigations and incidents end to end: triage, scoping, containment, eradication, and recovery, followed by blameless post-incident reviews.
Run and improve our SIEM, monitoring, and alerting: shape what we log, build and tune detections mapped to MITRE ATT&CK, and keep false positives low.
Hunt proactively for threats across endpoints, identities, network, and cloud, using threat intelligence, including our own.
Write and improve incident response playbooks.
Harden and prevent
Manage and improve our security controls: EDR, firewalls, IDS/IPS, email security, and identity and access management.
Run vulnerability assessments and drive remediation with IT and engineering teams, prioritizing by real-world exploitability.
Secure our cloud and container environments together with the Platform team.
Give security guidance in projects early, while design decisions are still cheap to change.
Govern and assure
Keep our security policies and guidelines practical, and make sure we follow them.
Take part in risk assessments and vendor security assessments, and support internal and external audits.
What we're looking for
5+ years in security operations roles
Hands-on experience in incident response, from first alert to post-incident review.
Strong experience with SIEM platforms, including writing and tuning detections.
Hands-on experience with EDR, IDS/IPS, firewalls, and vulnerability scanners.
Deep understanding of networking and operating systems (Windows, Linux, macOS), and of how attackers move through them.
Practical experience with MITRE ATT&CK and with incident response frameworks.
An AI-forward mindset: you use AI tools to work faster and smarter, and you understand the new security risks they bring.
Scripting skills in Python, PowerShell, or Bash to automate analysis and response.
The ability to understand complex environments from top to bottom, and to explain risk clearly to engineers and non-engineers alike.
A degree in computer science or a related field, or equivalent practical experience.
Clear written and spoken English.
Nice to…