SOAR Cybersecurity Engineer

Bucharest, Romania

This is Worldline.
We are the innovators at the heart of the payments technology industry, shaping how the world pays and gets paid. The solutions our people build today power the growth of millions of businesses tomorrow. From your local coffee shop to unicorns and international banks. From San Francisco to Auckland. We are in every corner of the world, in every part of commerce. And just as we help our customers accelerate their business, we are committed to helping our people accelerate their careers. Together, we shape the evolution.

The Opportunity
SOAR Engineer is a member of Cyber Platforms Team in an international context of Cyber Defense Center (CDC). The team has to implement and maintain new technologies and tools aimed at security for Worldline's defense. Develop and update Playbooks to counter latest Threat Scenarios and Attack Methods.

Day-to-Day Responsibilities

• Daily operational tasks (change management, application monitoring, application deployment)
• Develop automation playbooks using modern SOAR Platforms (e.g.: Swimlane) to support Security Operations, using scripting and programming languages (e.g. Python, PowerShell, JavaScript);
• Build new playbooks based on Use Cases and Alerts generated by SIEM and connected systems to match the new shifting of tactics and methods used by attackers;
• Be part of the design and architecture of CDC Platforms (e.g. SIEM, EDR, SOAR, VMS);
• Continuous Service Improvement for existing technologies and tools, by reviewing Use Cases, Alerts and Correlations and applying Lessons Learned;

Who Are We Looking For
We look for big thinkers. People who can drive positive change, step up and show what's next – people with passion, can-do attitude and a hunger to learn and grow. In practice this means:

• 3+ years of experience in DevSecOps.
• 3+ years of experience in programming languages (e.g. Python, PowerShell).
• 5+ years of experience in IT Delivery with a minimum of 3+ years of IT Security focus.
• Experience working in a DevOps team and a basic understanding of SecOps such as Indicators of Compromise, characterization and forensic engineering of compromised systems, operations security, compliance, mitigation, and analysis through tools that detect advanced threats.
• Knowledge of enterprise architecture designs and integrations between multiple systems that are interconnected.
• Good knowledge of Security best practices as well as the attack tactics and methods used.
• Hands on experience with SOAR technologies, developing and updating playbooks.
• Proficiency in English is mandatory.

Perks & Benefits
At Worldline you'll get the chance to be at the heart of the global payments technology industry and shape how the world pays and gets paid. On top of that, you will also:

• Hybrid Working Policy
• Meal vouchers
• Gift vouchers on the occasion of Christmas/Easter Holidays
• Private medical services
• 21 vacation days/year
• Referral bonuses for new hires recommended by you
• WFH & Flexible Working Hours
• Full access to the "Learning" platform

Shape the evolution.
We are on an exciting journey towards the next frontiers of payments technology, and we look for big thinkers, people with passion, can-do attitude and a hunger to learn and grow. Here you'll work with ambitious colleagues from around the world, take on unique challenges as a team, and make a real impact on the society. With an empowering culture, strong technology and extensive training opportunities, we help you accelerate your career - wherever you decide to go. Join our global team of 18,000 innovators and shape a tomorrow that is yours to own.

Learn more about life at Worldline at

We are proud to be an Equal Opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as an individual with a disability, or any applicable legally protected characteristics.