Security Engineer

About the role

Datatonic, Google Cloud's partner in AI, is hiring its first dedicated Security Engineer in Zagreb. The role strengthens security operations and takes ownership of key risks and controls, improving monitoring, detection, data protection and automation. It is an internal position focused on securing the company's own IT systems and infrastructure, combining technical security engineering with practical compliance ownership of ISO 27001 and UK Cyber Essentials controls.

Key responsibilities

• Improve and tune SIEM detection rules and alerting workflows, and enhance DLP and secure web gateway controls
• Monitor and remediate findings from CASB and ISPM platforms, and investigate security alerts and incidents with root cause analysis
• Support vulnerability management across cloud, endpoints and SaaS platforms, and maintain incident response procedures including playbooks and tabletop exercises
• Provide security input on enterprise technology decisions, automate security workflows and reporting, and use AI tools responsibly to improve investigations and documentation
• Own selected ISO 27001 controls, maintain evidence for audits and track control gaps
• Support risk assessments, access reviews and vendor security assessments, and communicate technical risk to non-technical stakeholders

Required profile

• 5-7 years of hands-on information security experience
• Incident response and security investigation experience
• Experience supporting ISO 27001 or similar frameworks, including control ownership and audit readiness
• Ability to take ownership of security controls and drive measurable improvements independently
• Fluent English, able to communicate with technical and non-technical audiences

Required skills

• Operating and tuning ISPM, SIEM, DLP, CASB, EDR and related platforms
• Zero Trust principles, cloud logging and telemetry pipelines
• Scripting with Python, Bash or similar; automation and AI enablement
• Nice to have: Google Cloud, Terraform or Pulumi, ISO audit preparation, CompTIA Security+ or Google Professional Cloud Security Engineer certification

What we offer

• 27 days of vacation
• Supplementary and additional health insurance
• 50% covered MultiSport membership
• Hybrid working model