Mid Cybersecurity Engineer - CSIRT

Location: Hybrid model in Warsaw, Poznań or Toruń, Poland; flexible working hours and 30 days of occasional remote work

Company

hirify.global operates a high-scale online marketplace with more than 1,000 microservices, high-throughput data infrastructure and production machine learning systems.

What you will do

• Monitor and triage real-time security incidents from EDR/XDR, SIEM and other detection platforms as part of a 24/7 on-call rotation.
• Investigate endpoint, server, identity, phishing and network-layer threats, including DDoS attempts, password spraying, bot scanning and account takeovers.
• Perform digital forensics and correlate Active Directory, endpoint, server, proxy, DNS, VPN and DHCP logs to reconstruct attack timelines and root causes.
• Enrich and correlate indicators of compromise using threat intelligence platforms and internal asset inventories.
• Document incidents with evidence, root cause analysis, MITRE ATT&CK mapping and remediation recommendations.
• Coordinate remediation with IT, infrastructure, business, brand protection and external partner teams while improving detection rules and threat intelligence.

Requirements

• Experience working in SOC, CERT or CSIRT teams and handling security incidents end to end, from investigation and evidence collection to reporting and remediation guidance.
• Hands-on experience with SOAR, EDR/XDR and SIEM systems.
• Knowledge of current offensive and defensive security threats and experience designing, implementing, developing or maintaining security-enhancing solutions.
• Experience with modern large-scale IT infrastructure and understanding of DevOps culture.
• Familiarity with Linux systems including Ubuntu/Debian, Windows and macOS.
• Ability to communicate and collaborate effectively across organizational areas and levels.
• Independent, self-driven approach with continuous learning in a rapidly changing threat landscape.
• Interest in automation and AI-assisted techniques for incident response, detection-rule tuning and defensive innovation, including adopting and securing AI technologies.
• English at least B2 level; willingness to develop soft skills through retrospectives and cross-team collaboration.

Culture & Benefits

• Hybrid work with flexible start time between 7:00 and 9:00 a.m., plus 30 days of occasional remote work.
• Annual performance- and company-results-based bonus.
• Employee contract, well-equipped offices and modern work equipment including a MacBook Pro or equivalent Dell device.
• Cafeteria benefits including medical, sports, lunch packages, insurance and purchase vouchers.
• Paid job-specific English classes, training budget, internal learning platform, hackathons and inter-team tourism.
• Additional volunteering day, social events and an autonomous team culture focused on knowledge sharing and continuous development.

Hiring process

• Submit a CV to apply.