{"id":4290871,"url":"https://alion.io/job/zalando-cybersecurity-engineer-all-genders","title":"Cybersecurity Engineer (all genders)","company":{"id":139,"name":"Zalando","domain":"zalando.com","url":"https://alion.io/company/zalando","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":45,"ghost_share":0,"stale_share":0.733,"repost_share":0.022,"time_to_fill_p50_days":19,"computed_at":"2026-11-15T07:52:55Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bucharest, Romania"],"countries":["RO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Google Workspace","optional":false},{"name":"Kubernetes","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-11-12T00:00:00Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-15T03:26:17Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"THE ROLE & THE TEAM\nZalando Bucharest is our newest site designed to consolidate and scale expert services, ensuring operational excellence as we evolve our global footprint.\nSecurity Incidents have a high potential to cause a severe business impact on the organization. Therefore having a strong Cybersecurity Engineer on the 1st level is crucial for SOC as they form the first line of defence against cyber threats, often being the first to detect anomalies and potential attacks.\nIn this role, you will be working diligently on the 1st level to monitor, identify, investigate and respond to security threats. Your passion for cybersecurity, combined with your ability to collaborate with and communicate effectively, will be instrumental in the integrity of our digital assets.\nINCLUSIVE BY DESIGN\nAt Zalando, our vision is to be the leading pan-European ecosystem for fashion and lifestyle e-commerce - one that is inclusive by design. We only assess candidates based on qualifications, merit, and business needs. We welcome applications from people of all gender identities, sexual orientations, personal expressions, racial identities, ethnicities, religious beliefs, and disability statuses. We only want to know why you’re great for this role, so please avoid including your picture, age, and marital status in your CV as well.\nWe want to provide you with a great candidate experience. Please feel free to inform us of any accommodations you may need, so we can best support and assist you throughout the hiring process.\ndo.BETTER - our diversity & inclusion strategy: https://jobs.zalando.com/en/our-culture/diversity-and-inclusion\nWHAT WE’D LOVE YOU TO DO (AND LOVE DOING)\nMonitor & Respond to Threats: You’ll actively identify, investigate, and respond to security threats and system anomalies, acting as a core technical anchor within the SOC.\nSupport Incident Response Operations: In the event of major incidents, you’ll support our CSIRT’s response activities, collaborating with dedicated task forces through the entire Security Incident Lifecycle.\nManage Stakeholder Communications: You’ll handle interactions on incoming security tickets, serving as a reliable point of contact to keep technical and intermediate stakeholders clearly updated throughout the resolution process.\nDocument Investigations: You’ll maintain high operational standard records by documenting security cases in tickets and authoring forensic incident investigation reports.\nDrive Security Optimization: When not responding to active threats, you’ll continuously improve our monitoring coverage, engage in proactive threat hunting, curate operational playbooks, and participate in advanced security education.\nWE’D LOVE TO MEET YOU IF\nYou Have Proven SOC Experience: You bring professional experience (ideally 1+ years) working in a SOC or a CSIRT environment, and you are fully comfortable handling structured on-call responsibilities outside of core business hours.\nYou Understand Detection & Analysis Tools: You possess a strong foundational knowledge of security monitoring, including practical, hands-on exposure to enterprise SIEM platforms and endpoint detection and response (EDR) tools.\nYou Know Cloud & Environment Security: You bring a practical understanding of protecting assets on AWS, working with Kubernetes deployments in AWS, and monitoring Google Workspace or similar corporate cloud environments.\nYou Leverage Frameworks & Scripting: You possess a clear operational understanding of the MITRE ATT&CK Framework and use scripting languages (such as Python, PowerShell, or Bash) to automate tasks and streamline security operations.\nYou Are a Reliable Communicator: You possess good verbal and written communication skills in English, with a track record of writing structured technical reports and routine handling stakeholder interactions.\nOUR OFFER\nAs we build our new office in Bucharest, we are committed to providing a competitive benefits package tailored to local market practices. Please ask your Talent Acquisition Partner to learn more\nabout what we plan to offer at the start:\n22 days of holiday a year, increasing up to 25 days depending on your tenure (every 3 years)\nPrivate medical coverage with options to add your family\nDaily meal allowance of 30 RON per working day\nSubsidy of public transport ticket\nOffice-first working model (at least 3 days a week","description_format":"text","description_chars":4378,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","E-commerce Platforms","Marketplaces"],"lifecycle":[{"event":"open","at":"2026-11-13T23:17:38Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":3,"expected_fill_days":19,"reasons":["conf:4","stale_co","velocity","win:early","comp:junior,brand"],"computed_at":"2026-11-15T07:52:55Z"},"pay":null,"html_url":"https://alion.io/job/zalando-cybersecurity-engineer-all-genders","json_url":"https://alion.io/job/zalando-cybersecurity-engineer-all-genders.json","meta":{"generated_at":"2026-11-15T12:08:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1883,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":139},"rest":"https://alion.io/mcp/rest/get_company?id=139"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzalando-cybersecurity-engineer-all-genders"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzalando-cybersecurity-engineer-all-genders"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzalando-cybersecurity-engineer-all-genders"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zalando-cybersecurity-engineer-all-genders\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzalando-cybersecurity-engineer-all-genders"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4290871}},{"tool":"search_jobs","arguments":{"company":"zalando.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4290871},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}