IT Security Engineer

Job description:

Job Description

We are seeking a technically skilled and detail-oriented
Security Engineer in Bucharest
to lead the implementation and ongoing management of our Mobile Device Management (MDM) platform, while gradually expanding into Data Loss Prevention (DLP) initiatives.

Rompetrol,
part of
KMG International,
is the place where thousands of minds and over 200 specializations spread throughout 11 countries are connecting to each other to create the energy we all need to get further. We believe that through trial and perseverance, true ambition is inspired, and success achieved. With this reasoning, we intend to welcome you to our Rompetrol family and help you reach your full potential.

So, are you ready to fuel your career, in a diverse and fulfilling environment?

Your new role:
This role is responsible for securing endpoints, mobile devices, and sensitive data across the enterprise environment by enforcing strong controls, supporting compliance, and enabling secure business operations.The ideal candidate will be hands-on with endpoint security tooling and policy enforcement, particularly within the Microsoft 365 ecosystem, including Intune (MDM) and Microsoft Purview (DLP), or possess equivalent experience with other MDM and DLP platforms.They will play a key role in day-to-day security operations and in ensuring the long-term 

stability and effectiveness of our data protection measures.

Activities going to help you shine:

Mobile Device Management (Primary Focus):

• Deploy, manage, and maintain MDM solutions (e.g., Microsoft Intune) to enforce security baselines across mobile and endpoint devices.
• Define, implement and monitor policies for encryption, authentication, device compliance, and application control.
• Coordinate with IT and HR for secure device provisioning, onboarding, and decommissioning.
• Configure remote wipe, secure access, and mobile identity controls in coordination with IAM team.
• Support BYOD policies while minimizing risk and business disruption.
• Monitor compliance dashboards, investigate alerts, and remediate issues.
• Data Loss Prevention (Secondary / Growth Area):Act as the technical lead for the design and implementation of DLP solutions (e.g., Microsoft Purview, Symantec DLP, Forcepoint).
• Work closely with compliance, governance, and GDPR specialists to translate regulatory and policy requirements into technical controls and configurations.
• Implement and fine-tune data classification rules and protection policies for high-sensitivity data (e.g., executives, finance, legal).
• Monitor and investigate DLP incidents, working with stakeholders to resolve alerts and reduce false positives.
• Support user awareness efforts by providing technical insights and guidance to promote secure data handling practices.

Job Summary

The fuel needed to go further with us:

• Bachelor's degree in Cybersecurity, Information Technology, or a related field (or equivalent experience).
• 3–5+ years of hands-on experience in security engineering, with a focus on endpoint and data protection.
• Proficiency with MDM solutions such as Microsoft Intune, JAMF, or Workspace ONE.
• Experience with DLP platforms like Microsoft Purview, Symantec DLP, or Forcepoint.
• Familiarity with Azure AD, Conditional Access, SSO/MFA, and identity integration concepts.
• High level understanding of common compliance standards (e.g., NIS2, GDPR, ISO
• Scripting or automation experience (e.g., PowerShell, Python) is a plus.
• Preferred certifications: SC-400, SC-300, Security+ or equivalent.
• Strong analytical and troubleshooting skills, with clear communication and crossteam collaboration abilities.

You will be supplied with:

• Meal tickets
• Vacation bonus
• The number of your vacation days increase according to your seniority so that you'll enjoy more free time.
• Access to private medical system (medical package) and special subscription rates for family members
• On site medical assistance
• Life and medical insurance
• Free days and financial support for personal events (marriage, childbirth, loss of a close relative)
• Study leave
• Christmas/1st of June celebration with a special gift for children
• Partners' discounts
• Access to training programs
• Supportive and professional teams and environment
• Bookster (borrow books for free, delivered in the office)
• Fuel discount in our gas stations with RompetrolGo+ card
• Short working schedule on Friday
• Flexible working program
• Hybrid schedule: 4 days at the office, 1 day remote

What you need to do now:

If you are interested in this role, go to "apply now" to send an updated copy of your resume.

Fuel your career and start a new journey with us
#GetFurtherWithUs