Senior Security Engineer

Please note: for this position, we are only considering candidates who are already based in Croatia.

At ReversingLabs, we provide the world’s largest threat intelligence repository to protect software development and power advanced security solutions, keeping leading cybersecurity organizations and Fortune 500 enterprises informed and ahead of threats. Only ReversingLabs delivers the software package analysis speed and depth needed to protect against software supply chain risk.

Our vision is clear: to arm every company with end-to-end insights so that development teams release securely, IT purchases safely, and the SOC can effectively detect, isolate, and respond. We are seeking extraordinary talent for this game-changing opportunity to help forge this transformational journey at ReversingLabs.

Why this role is different

At ReversingLabs, security is not a side function; it's what the whole company does. You'll protect an organization where people understand threats deeply, so security conversations start from shared ground rather than from scratch. You'll work alongside threat researchers and malware analysts who study attackers every day, and you can draw on their insight when you investigate.

The role

Our IT Security team protects ReversingLabs' people, systems, and data: our corporate environment, our cloud infrastructure, and the services behind our products. We're looking for a senior security engineer with a strong security operations background: someone who can run an investigation end to end, build the detections that catch the next attack, and strengthen the controls around them. You’ll play a key role in our security operations and help shape the security strategy of a growing global company. You’ll report to our Security Engineering Lead and work closely with IT, our Platform/SRE team, and engineering teams across the company.

What you'll do

Detect and respond

• Lead security investigations and incidents end to end: triage, scoping, containment, eradication, and recovery, followed by blameless post-incident reviews.
• Run and improve our SIEM, monitoring, and alerting: shape what we log, build and tune detections mapped to MITRE ATT&CK, and keep false positives low.
• Hunt proactively for threats across endpoints, identities, network, and cloud, using threat intelligence, including our own.
• Write and improve incident response playbooks.

Harden and prevent

• Manage and improve our security controls: EDR, firewalls, IDS/IPS, email security, and identity and access management.
• Run vulnerability assessments and drive remediation with IT and engineering teams, prioritizing by real-world exploitability.
• Secure our cloud and container environments together with the Platform team.
• Give security guidance in projects early, while design decisions are still cheap to change.

Govern and assure

• Keep our security policies and guidelines practical, and make sure we follow them.
• Take part in risk assessments and vendor security assessments, and support internal and external audits.

What we're looking for

• 5+ years in security operations roles
• Hands-on experience in incident response, from first alert to post-incident review.
• Strong experience with SIEM platforms, including writing and tuning detections.
• Hands-on experience with EDR, IDS/IPS, firewalls, and vulnerability scanners.
• Deep understanding of networking and operating systems (Windows, Linux, macOS), and of how attackers move through them.
• Practical experience with MITRE ATT&CK and with incident response frameworks.
• An AI-forward mindset: you use AI tools to work faster and smarter, and you understand the new security risks they bring.
• Scripting skills in Python, PowerShell, or Bash to automate analysis and response.
• The ability to understand complex environments from top to bottom, and to explain risk clearly to engineers and non-engineers alike.
• A degree in computer science or a related field, or equivalent practical experience.
• Clear written and spoken English.

Nice to have

• Application security experience, including WAFs and protecting internet-facing applications at scale
• Container and Kubernetes security
• Cloud security experience, ideally in AWS
• Digital forensics or malware analysis experience
• Security certifications such as CISSP, CISM, GCIH, GCIA, or Security+
• Experience supporting compliance frameworks such as ISO 27001 or SOC 2

Benefits

• Hybrid work options (paid accommodation & transportation to Zagreb during onboarding for remote employees)
• Flexible working hours
• Generous compensation and a bonus system based on annual performance
• Hefty personal education budget and possibility to attend leading conferences and seminars in the field
• Company library and possibility to order books of choice via Amazon
• Permanent contract in a fast-growing global company with Fortune 500 & governmental agencies as clients
• Challenging projects in a dynamic, collaborative team
• Great career advancement opportunities - clear goals & internal promotions
• Employee referral bonus program, EUR 1,060 net for junior position, EUR 2,123 net for mid to senior positions, and EUR 2,654 net for principal/managerial positions
• Multisport card, annual health checkup, newborn child allowance, rent-cost, and 3rd pillar pension benefits
• Wellness Weekends - quarterly, company-wide three day weekend, starting with a company paid Friday off for all employees
• Fully covered car garage in Radnička for all employees

About ReversingLabs

ReversingLabs is the leader in software supply chain security, helping the world's most security-conscious organizations detect and respond to threats hidden inside software. Our platform is trusted by Fortune 500 companies, government agencies, and security teams globally. We're a company that takes the work seriously and takes care of the people doing it.

🌐 Careers Page · 💼 LinkedIn · 🔍 Our Technology

#LI-MV1