Apply now »

Security Expert

Aggregate function:  Shared Services
Business Area:  Technology _VOIS
Posting Country:  Romania
Date Posted:  18 Oct 2026
Full Time / Part Time:  Full Time
Contract Type:  Permanent

At Vodafone, we’re working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this. 

We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together.

With us, you can be truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.

Who we are

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation.
As the largest shared services organisation in the global telco industry with 30,000 FTE, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in-house and 3rd party capability.
We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal.
#VOIS #BeUnrivalled #CreateTheFuture

About this Role

We are seeking an experienced Cyber Security Operations Centre (CSOC) Security Analyst to provide advanced security analysis and contribute to the success of the Cyber Security Operations Centre. This role focuses on identifying and validating cyber threats through detailed analysis of security events, logs, alerts, firewall activity and other telemetry sources using a broad range of cyber defence technologies. The successful candidate will investigate complex threats, support incident response activities, perform threat hunting and forensic analysis, and help improve detection capabilities through automation, fine-tuning and optimisation initiatives. This position is based in Bucharest and follows a hybrid working model.

What you’ll do

Monitor and analyse security events from multiple sources, including SIEM platforms, intrusion detection systems, firewall logs and Windows and Unix system logs.
Investigate, analyse security alerts to determine their validity, priority, potential impact and appropriate response.
Identify, categorise, prioritise and investigate Events of Interest (EOIs).
Create and support security incidents end-to-end, following established incident management processes.
Document security events, investigations and incident analysis in the relevant incident management systems through to case closure.
Perform historical analysis and digital forensic activities using available CSOC tools.
Conduct threat hunting and analyse security data to identify suspicious activity, threats and vulnerabilities.
Support incident response activities and collaborate with Cyber Defence Analysts, incident managers and local market CSIRT teams.
Define technical and functional requirements that enable other teams to improve security detection and address identified vulnerabilities.
Develop or adapt scripts and automation using technologies such as Python, PowerShell, Java, JavaScript, Ruby and KSQL, or suitable alternatives.
Contribute to the development and optimisation of detection use cases, including testing and fine-tuning.
Proactively identify opportunities to reduce alert volumes and improve security monitoring efficiency.
Build and maintain operational knowledge through SOPs, KEDB documentation, knowledge articles, processes and procedures.
Contribute to measures designed to reduce spam and phishing alerts.
Participate in daily operational calls and provide support for on-call activities when required.
Communicate security threats, malware behaviour, investigation findings and associated business risks clearly to relevant stakeholders.

Who you are

You have 5+ years of relevant experience in Cyber Security, Security Operations Centres, SIEM, security event and alert analysis, or security incident investigation and management.
You have hands-on experience in a Cyber Security Operations Centre and understand security monitoring, event analysis and triage.
You have strong knowledge of networking and cyber security concepts, threats and attack techniques.
You have experience with SIEM technologies such as Microsoft Sentinel, Splunk, Google Chronicle, ArcSight, Elastic or ELK.
You can follow established security triage playbooks while applying analytical judgement to investigations.
You have experience analysing security events and alerts from SIEM, network and host-based intrusion detection systems, firewalls and operating systems.
You understand incident response, threat hunting, security monitoring and risk mitigation.
You have programming or scripting exposure using technologies such as Python, PowerShell, Java, JavaScript, Ruby or KSQL.
You can translate investigation findings and vulnerabilities into clear technical or functional requirements.
You have strong analytical and communication skills and can work effectively with global teams.
You are comfortable working in a security operations environment where priorities can change quickly during security incidents.
You are motivated to continuously develop your cyber security knowledge and apply learning about emerging threats to day-to-day investigations.
You hold a degree in Computer Science, Information Technology, Engineering or a related discipline.
Industry-recognised cyber security certifications such as CEH, CCNA Cyber Ops or CompTIA Security+ are relevant to the role.

Not a perfect fit?

Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit best.

What's in it for you

- Hybrid way of working: 2 days per week/ 8 per month
- Medical and dental services
- Life and hospitalization insurance
- Dedicated employee phone subscription
- Take control of your benefits and choose any of the below options: MEAL TICKETS/ PRIVATE PENSION/VACATION VOUCHERS/ CULTURAL VOUCHERS within the budget.
- Special discounts for gyms and retailers
- Annual Company Bonus
- Ongoing Education – we continuously invest in you to ensure you have everything needed to excel on the job and enhance your skills
- You get to work with tried and trusted web-technology
- We let you write your own story by planning vacations: go for a trip, experience new things, have fun and enjoy your 23 days off.
- Special Paternal Program - 4 months of paid paternity leave

What skills you will learn

Advanced SIEM investigation and security event analysis.
Cyber security incident investigation and response.
Threat hunting and security monitoring.
Detection use-case development, testing and fine-tuning.
Security automation and scripting.
Digital forensic and historical security analysis.
Translating security vulnerabilities into technical and functional requirements.
Cross-functional collaboration within a global Cyber Security Operations Centre environment.

VOIS Equal Opportunity Employer Commitment

Vodafone recognises and celebrates the value of diversity in building a workforce that reflects the customers and communities it serves. No form of discrimination is tolerated. This includes, but is not limited to, discrimination based on race, colour, age, veteran status, gender identity, gender expression, sexual orientation, pregnancy, maternity or parental status, ethnicity, disability, religion or belief, political affiliation, trade union membership, nationality, citizenship, indigenous status, medical condition, HIV status, neurodiversity, social origin, cultural background, marital or civil partnership status, or socio-economic background. 

Join Us

At Vodafone, we’re working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this.
We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together.
With us, you can truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.

Alert

Apply for Vodafone jobs only through the official Vodafone Careers website to avoid job scams and fraud.
#JDEnhancedByTARA

Vodafone is committed to attracting, developing and retaining the very best people by offering a motivating and inclusive workplace in which talent is truly recognised and rewarded. We are committed to promoting Inclusion for All with the belief that diversity plays an important role in the success of our business. We actively encourage everyone to consider becoming a part of our journey.

Apply now »