Security Operations

• Build and maintain security automation workflows using Tines and other approved automation platforms to improve investigation, containment, and response processes.
• Develop, tune, and optimize detections, correlation logic, searches, and analytics across SIEM, EDR, cloud, identity, email, and SaaS security platforms, including identifying detection gaps and opportunities for improved coverage.
• Develop and operationalize AI-enabled workflows that improve analyst efficiency and response effectiveness.
• Build automations and integrations using no-code and low-code platforms, APIs, and security tooling to eliminate repetitive manual work.
• Assist advanced investigations and response activities through detection engineering, automation, and technical analysis.
• Seek opportunities to raise detection quality, minimize alert noise, quicken response, and strengthen operational consistency among threat analysts, external security partners, and automated processes.
• Collaborate with Security Operations, Security Engineering, IT, and Product Security teams to improve detection and response capabilities.
• Measure and continuously boost the efficiency of detections, workflows, and operational processes.

Senior Detection & Response Engineer – L3 Security Operations

• Support the operational activities of the security team by monitoring IT infrastructure
• Analyzing and triaging alerts generated by SIEM and EDR systems
• Escalating incidents in accordance with established procedures
• Analyzing malware payloads, identifying Indicators of Compromise (IoCs)
• Performing behavioral analysis of users and systems to detect anomalies and unauthorized activity
• Actively support the team in the area of AI-driven threat hunting by participating in proactive threat hunting using AI-based tools
• Documenting findings while recommending new detection rules

Junior SOC Security Engineer

• Responsible for the tools, configuration, administration and related processes around Security Information and Event Management.
• Responsible for Web application firewall and related prevention, detection and mitigation of DDoS attack.
• Performs regular firewall audits in line with our procedures. Provides the appropriate documentation, supporting evidence and follow up on identified issues requiring remediation.
• Responsible for tooling, processes and follow up actions related to our vulnerability scanning and external port scanning needs and practices.
• Handles the identification, planning and implementation of cloud hardening needs. Works collaboratively with Operations and other internal teams to communicate, document and implement.
• Performs security incident analysis, response and remediation.
• Participates in design and implementation of security automation workflows.
• Maintain the technical documentation of processes and procedures.
• Perform scripting duties in Bash and Python.
• Maintain an advanced level of knowledge of JAMF Cloud Services and related products.
• Other duties and special projects as assigned.

Security Operations Engineer I

• Assist in operational delivery for all Assa Abloy IT Infrastructure services globally
• Manage incidents, requests, and act on monitoring alerts
• Develop services through teamwork with internal teams and external partners
• Suggest improvements to key global Group Center services
• Partner with internal customers and external strategic stakeholders
• Contribute to driving a standard, secure network infrastructure design and architecture
• Ensure that processes and routines are clearly defined and documentation is accurately updated
• Work as a team with internal and external experts to continuously improve security and optimize operations
• Develop, implement, and monitor relevant metrics for operations, and provide reports to customers
• Process, organize, assess, and assist in contextualizing incident indicators
• Profile adversaries and develop collection and exploitation strategies to meet intelligence requirements
• Participate in Cyber Security projects within the organization
• Monitor and manage applications within the Cyber Security scope
• Review collected logs to identify potential issues and improve infrastructure performance

Security Operations jobs in Poland

See all jobs on JobTailor

Senior Detection & Response Engineer – L3 Security Operations

Junior SOC Security Engineer

Security Operations Engineer I

Senior Security Operations Engineer – Endpoint Protection