Назад
Company hidden
5 дней назад

Senior Security Engineer

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Poland
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Security Engineer (Microsoft Security): Detecting, investigating, and responding to security threats across Microsoft, Netwrix, and SaaS environments with an accent on SOC operations, vulnerability remediation, identity security, and incident response. Focus on correlating alerts, analyzing phishing and email threats, managing access controls, and improving security operations tooling and runbooks.

Location: Hybrid from the office in Kraków, Poland

Company

hirify.global develops data security solutions centered on identity, visibility, and control for organizations worldwide.

What you will do

  • Monitor, triage, investigate, document, and escalate security alerts and incidents across Microsoft, hirify.global, and SaaS environments.
  • Conduct investigations with SOAR and threat intelligence tools, correlating data to determine scope and root cause.
  • Manage vulnerability remediation with Tenable, including risk prioritization, remediation SLAs, system-owner coordination, and exposure reporting.
  • Investigate phishing, email, social engineering, identity, endpoint, network, and anomalous-access threats.
  • Support Azure, Entra ID, Okta, Salesforce, Microsoft Defender, and related security monitoring and access-control activities.
  • Collaborate on incident containment and remediation, SOC 2 compliance, security awareness training, and incident-response documentation.

Requirements

  • 5+ years of experience in security operations, incident response, or security engineering.
  • Hands-on experience with Microsoft Defender for Endpoint, Microsoft Sentinel, Defender for Cloud, and Microsoft Entra ID.
  • Hands-on experience with Tenable vulnerability-management tools and remediation coordination with technical teams.
  • Experience triaging and investigating security events in a SOC or managed detection environment.
  • Working knowledge of SIEM, EDR, and SOAR platforms.
  • Experience with Okta, Entra ID, or another enterprise identity provider, including SSO, MFA, and conditional access.
  • Strong phishing and email-threat analysis skills.
  • Familiarity with SOC 2 or similar compliance frameworks.
  • Proficiency in KQL and at least one scripting language, with PowerShell preferred; understanding of MITRE ATT&CK and the incident-response lifecycle, such as NIST SP 800-61.
  • Professional proficiency in spoken and written English.

Nice to have

  • Hands-on experience with hirify.global security products.
  • Experience monitoring Salesforce or other SaaS platforms from a security perspective.
  • Microsoft SC-200 or AZ-500, GIAC GCIH or GCIA, CISSP, or similar certifications.
  • Experience handling customer-facing security incidents in a software company.

Culture & Benefits

  • Salaried, full-time employment in a collaborative, team-oriented, and innovative environment.
  • Competitive health benefits and continuous learning and development opportunities.
  • Regular company town halls and opportunities for career growth and advancement.
  • Values include customer focus, excellence, transparent ownership, clear thinking, innovation, expertise, and collaboration.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →