IT Security Engineer

IT Security Engineer

Rompetrol

Bucharest, Romania

Job Description

We are seeking a technically skilled and detail-oriented Security Engineer in Bucharest to lead the implementation and ongoing management of our Mobile Device Management (MDM) platform, while gradually expanding into Data Loss Prevention (DLP) initiatives.

Rompetrol, part of KMG International, is the place where thousands of minds and over 200 specializations spread throughout 11 countries are connecting to each other to create the energy we all need to get further. We believe that through trial and perseverance, true ambition is inspired, and success achieved. With this reasoning, we intend to welcome you to our Rompetrol family and help you reach your full potential.

So, are you ready to fuel your career, in a diverse and fulfilling environment?

Your new role: This role is responsible for securing endpoints, mobile devices, and sensitive data across the enterprise environment by enforcing strong controls, supporting compliance, and enabling secure business operations.The ideal candidate will be hands-on with endpoint security tooling and policy enforcement, particularly within the Microsoft 365 ecosystem, including Intune (MDM) and Microsoft Purview (DLP), or possess equivalent experience with other MDM and DLP platforms.They will play a key role in day-to-day security operations and in ensuring the long-term stability and effectiveness of our data protection measures.

Activities going to help you shine:

Mobile Device Management (Primary Focus):

• Deploy, manage, and maintain MDM solutions (e.g., Microsoft Intune) to enforce security baselines across mobile and endpoint devices.
• Define, implement and monitor policies for encryption, authentication, device compliance, and application control.
• Coordinate with IT and HR for secure device provisioning, onboarding, and decommissioning.
• Configure remote wipe, secure access, and mobile identity controls in coordination with IAM team.
• Support BYOD policies while minimizing risk and business disruption.
• Monitor compliance dashboards, investigate alerts, and remediate issues.
• Data Loss Prevention (Secondary/Growth Area):Act as the technical lead for the design and implementation of DLP solutions (e.g., Microsoft Purview, Symantec DLP, Forcepoint).
• Work closely with compliance, governance, and GDPR specialists to translate regulatory and policy requirements into technical controls and configurations.
• Implement and fine-tune data classification rules and protection policies for high-sensitivity data (e.g., executives, finance, legal).
• Monitor and investigate DLP incidents, working with stakeholders to resolve alerts and reduce false positives.
• Support user awareness efforts by providing technical insights and guidance to promote secure data handling practices.

Job Summary

The fuel needed to go further with us:

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field (or equivalent experience).
• 3–5+ years of hands-on experience in security engineering, with a focus on endpoint and data protection.
• Proficiency with MDM solutions such as Microsoft Intune, JAMF, or Workspace ONE.
• Experience with DLP platforms like Microsoft Purview, Symantec DLP, or Forcepoint.
• Familiarity with Azure AD, Conditional Access, SSO/MFA, and identity integration concepts.
• High level understanding of common compliance standards (e.g., NIS2, GDPR, ISO 27001).
• Scripting or automation experience (e.g., PowerShell, Python) is a plus.
• Preferred certifications: SC-400, SC-300, Security+ or equivalent.
• Strong analytical and troubleshooting skills, with clear communication and crossteam collaboration abilities.