About us
Navixy (by SquareGPS) is a growing international SaaS company specializing in IoT solutions for fleet management and GPS tracking. Our platform processes over 1 billion events daily, serving more than 30,000 vehicle fleets and 700 system integrators across 130 countries. We provide infrastructure, mobile apps, and analytics tools that help companies make data-driven decisions about their assets and operations. Our engineering culture values technical excellence, continuous learning, and pragmatic innovation.
We’re looking for a Data Security Engineer to help Navixy manage data security challenges and organize employee access to systems.
Position overview
As the Data Security Engineer you will focus on designing and implementing our cybersecurity roadmap through best practices for data protection. As well as ensuring compliance with relevant security certifications and regulations, making necessary changes to maintain requirements.
You’ll be a part of our IT Operations and Security department and collaborate with cross-functional teams to uphold high security and compliance standards across our infrastructure. This is a hybrid role based in Belgrade, Serbia, at our office in Knez Mihailova.
Key responsibilities
- Own and prioritize the security strategy for the company’s infrastructure, ensuring alignment with business objectives and regulatory requirements.
- Collaborate with stakeholders, including technical teams and external partners, to define and refine security requirements.
- Develop and implement security policies and technical controls to safeguard both cloud-based and on-premises systems.
- Ensure all processes and infrastructure are aligned with relevant regulations and security standards (e.g., ISO 27001, SOC 2, GDPR).
- Monitor emerging security threats and analyze vulnerabilities to proactively identify risks and implement mitigation strategies.
- Manage monitoring tools (SIEM, IDS/IPS) and coordinate response efforts for security incidents, assisting with post-incident analysis.
- Develop and maintain access control protocols, ensuring the integrity of identity and access management (IAM) solutions.
- Assist in creating security awareness training programs and share best practices across the company to strengthen the organization’s overall security posture.
- Communicate security updates and key initiatives clearly across the organization to ensure alignment and awareness.
Required qualifications
- Fluency in Russian and English (B2/C1level) is required
- 3+ years of practical experience in cybersecurity, information security, or a similar role.
- Bachelor’s degree (or equivalent experience) in Computer Science, Information Security, or related field.
- Familiarity with security frameworks and regulations (e.g., ISO 27001, SOC 2, GDPR).
- Familiarity with anti DDos protection best practices and tools.
- Hands-on experience with cloud computing platforms (AWS).
- Skilled in Linux system administration.
- Security certifications such as CISSP, CISM, CEH, or CompTIA Security+ are a plus (but not required).
- Containerization/orchestration (Kubernetes) is a plus.
- Familiarity with audit and compliance processes, including documentation and reporting.
- Detail-oriented and organized, with the ability to prioritize tasks effectively.
- Work Environment: Enjoy a hybrid work setup with 4 days remote and 1 day in our Belgrade office, based on a 40-hour workweek.
- Compensation: Competitive USD-based salary, with a performance bonus and holiday bonus. Payments are made twice a month.
- Professional Development: We invest in your growth with access to workshops, conferences, and industry courses, plus resources like an extensive digital library and language classes (English or Spanish).
- Health & Wellness: Receive mental health support through the “Yasno” service.
- Career Growth: Join a company culture centered on open feedback and growth, offering both vertical and horizontal progression opportunities.
- Impactful Work: See your contributions directly, with timely feedback from teammates, managers, and HR.
- Vibrant Culture: Participate in online and offline events, team-building activities, and knowledge-sharing sessions with an international team that connects beyond work.
- Paid Time Off: 21 days of PTO, 6 paid sick days, plus additional paid holidays.
- Employment Contract: Secure contract with our international entity via Deel.