1 день назад
Senior or Lead Security Engineer (Detection & Response)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior or Lead Security Engineer (Detection & Response) (AWS/AI): Building next-generation security monitoring, detection, and response systems across cloud, identity, endpoints, SaaS, networks, and data centers with an accent on telemetry, high-signal detections, and incident response. Focus on threat hunting, automating investigations and response, and developing AI-assisted security agents and workflows.
Location: Remote in Poland or France
Company
is an AI-first energy company developing solar, battery, generation, grid infrastructure, real-time power trading, and distributed energy solutions.
What you will do
- Own security monitoring and detection across AWS, identity, endpoints, SaaS, networks, and data center environments.
- Build and improve telemetry, logging pipelines, detection coverage, and detection-as-code capabilities.
- Lead security investigations and incident response from detection through containment, recovery, and post-mortem.
- Proactively hunt threats, identify visibility and control gaps, and develop incident response playbooks.
- Automate detection, investigation, and response workflows using scripting, AI, and emerging tools.
- Work with IT and Engineering to address security findings, improve system design, and develop internal AI agents and security bots.
Requirements
- Significant hands-on experience in detection engineering, security engineering, incident response, threat hunting, or a similar technical role.
- Strong understanding of cloud environments, ideally AWS, networking fundamentals, attacker tradecraft, and lateral movement.
- Experience investigating real security incidents and owning resolution through completion.
- Strong scripting or programming skills, ideally Python, with a focus on automating repetitive work.
- Experience with SIEM, EDR, SOAR, or equivalent security monitoring and response tooling.
- Ability to work autonomously, collaborate with IT and Engineering, and experiment with AI-assisted security workflows.
Nice to have
- AWS security telemetry experience with CloudTrail, GuardDuty, VPC Flow Logs, and IAM.
- Experience with Sigma, Git-based detections, automated testing, CrowdStrike, SentinelOne, Defender, or comparable tools.
- Experience in network security monitoring, digital forensics, threat intelligence, purple teaming, or security validation.
- Experience securing data centers, colocation environments, OOB networks, or BMC/IPMI.
- Background in energy, trading, fintech, critical infrastructure, or other high-value-target environments.
Culture & Benefits
- Fully remote work for employees based in Poland or France.
- Competitive salary with equity eligibility and a biannual bonus scheme.
- Fully expensed technology matched to role requirements.
- Private health insurance.
- Benefits vary by location; breakfast and dinner allowances are available for office-based employees.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
4 дня назад
Security Operations Engineer (Detection Engineering)
Anthropic
23 часа назад
Senior/Staff Security Engineer, Detection & Response (AI)
7 дней назад
Senior Security Engineer, Detection & Response
2 дня назад
Security Engineer, Detection & Response (AI)
4 дня назад
Incident Response Lead (Cybersecurity)
140 000 - 150 000$
3 дня назад