Cyber Detection & Response Engineering Lead

This is a fully remote position, open to applicants in Poland.

📋 Description

• Design and implement solutions in the areas of security monitoring, detection engineering, incident response, security operations, and security automation.

• Lead intricate Cyber Detection & Response projects and offer technical guidance to multidisciplinary delivery teams.

• Evaluate SOC and CSIRT capabilities, pinpoint areas for improvement, and establish target operating models along with transformation roadmaps.

• Develop and enhance threat detection abilities by creating use cases, correlation rules, monitoring strategies, and response procedures.

• Assist in the implementation, migration, integration, and optimization of SIEM, SOAR, EDR, XDR, and log management platforms.

• Utilize AI-driven cybersecurity capabilities to enhance threat detection, alert triage, investigation processes, and security automation while ensuring validation, governance, and human oversight.

• Convert business objectives, operational challenges, and security risks into solution architectures and implementation plans.

• Conduct workshops, technical discussions, and executive presentations.

• Mentor and provide technical coaching to consultants and engineers.

• Contribute to proposals, RFP responses, effort estimations, solution design, and client-facing interactions.

• Create reusable methodologies, frameworks, accelerators, and service offerings.

⛳️ Requirements

• Extensive background in Cyber Detection & Response, Security Operations, Incident Response, or related cybersecurity consulting services.

• Practical expertise in security monitoring, detection engineering, incident response, security automation, governance, and SOC or CSIRT transformation initiatives.

• Demonstrated ability to lead cybersecurity programs, projects, workstreams, or multidisciplinary delivery teams.

• Strong comprehension of security operations processes, detection lifecycle management, security data management, and incident handling procedures.

• Capacity to design comprehensive security solutions that align with organizational goals, operational needs, and cyber risk factors.

• Practical knowledge of AI applications in cybersecurity, including their benefits, limitations, risks, governance requirements, validation processes, and ethical use.

• Experience in supporting proposals, RFP responses, solution architecture, effort estimation, and client presentations.

• Exceptional communication and stakeholder management abilities.

• Strong analytical thinking, problem-solving skills, and a commitment to continuous improvement.

• Professional proficiency in English (C1).

• Familiarity with SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar, ArcSight, or similar.

• Experience with SOAR, EDR/XDR, threat detection, log management, cloud security, and security analytics platforms.

• Knowledge of Microsoft Azure, AWS, or GCP.

• Understanding of KQL, SPL, SQL, Python, PowerShell, or other automation and scripting technologies.

• Nice to have: experience with SOAR implementation, security integrations and API-based automation, cloud-native monitoring, AI-enabled security capabilities, MITRE ATT&CK, NIST CSF, cybersecurity certifications, consulting experience, and proficiency in German, French, or Spanish.

🏝️ Benefits

• Comprehensive health and wellness programs.

• Opportunities for professional development and training.

• Flexible work arrangements to promote work-life balance.

• Collaborative and innovative work environment.

• Competitive compensation and performance-based bonuses.