Назад
Company hidden
10 дней назад

Senior Detection & Response Engineer (Cybersecurity)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Poland
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Detection & Response Engineer (Cybersecurity): Developing and improving security detections, analytics, and automation workflows for Aristocrat's Security Operations function with an accent on detection engineering, incident response, and API-driven security automation. Focus on reducing false positives, expanding threat coverage, integrating security platforms, and improving investigation and response efficiency in a Tier 3 SOC environment.

Location: Hybrid in Kraków, Poland, with onsite attendance at the Kraków office three days per week

Company

hirify.global operates a Security Operations function focused on improving enterprise threat detection, investigation, and response capabilities.

What you will do

  • Develop, tune, and maintain detections, correlation rules, analytics, searches, and threat detection content across SIEM, EDR, identity, email, SaaS, and security monitoring platforms.
  • Identify detection gaps, create new use cases, map detections to MITRE ATT&CK, and improve alert fidelity while reducing false positives.
  • Design, build, and maintain security automation workflows using Tines, SOAR platforms, APIs, and platform-native capabilities.
  • Support security investigations and incident response through technical analysis, detection engineering, and automation.
  • Collaborate with Security Operations, Security Engineering, IT, Product Security, MSSP partners, threat analysts, and incident responders.
  • Measure and improve the effectiveness of detections, automations, and operational workflows.

Requirements

  • Senior-level experience improving threat detection, security operations, incident response, or related cybersecurity capabilities in a production environment.
  • Hands-on detection engineering experience, including creating, tuning, and maintaining detections, searches, analytics, or threat hunting content with security-focused query languages.
  • Experience building and maintaining security automations with Tines, SOAR platforms, or similar workflow automation technologies.
  • Experience designing, building, or maintaining automation workflows and integrating systems through APIs or automation platforms.
  • Strong understanding of threat detection, security investigations, and incident response in a Tier 3 Security Operations environment.
  • Ability to work onsite in the Kraków office three days per week.

Culture & Benefits

  • Collaboration across Security Operations, Security Engineering, IT, Product Security, and MSSP partners.
  • Opportunity to evaluate and adopt technologies that improve analyst efficiency and operational effectiveness.
  • Potential eligibility for annual bonuses and incentives.
  • Potential health and wellbeing benefits, paid time off, retirement plans, insurance coverage, and local or statutory benefits.
  • Compensation and benefits are determined based on skills, experience, qualifications, and location.

Hiring process

  • Specific compensation and benefits details are discussed during the recruitment process.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →