Senior Security Operations Engineer (Remote, Poland)
This role sits within the security operations team of a publicly listed company that builds connected platforms for industries that run on physical operations, such as transportation, construction, agriculture and field services. The team works as a global group and this position is part of its EMEA coverage, so working hours are aligned to the UK time zone. You will combine hands-on incident response leadership with building the tooling and runbooks that make the team more effective.
What you'll do
- Monitor security events and provide technical analysis on alerts
- Act as Incident Commander for information security incidents, setting response strategy and driving each case through to closure with regular updates to stakeholders
- Lead digital forensic and insider threat investigations in support of HR, Legal, Compliance and Information Security
- Build scripts, automated workflows and integrations that support investigations and security operations
- Create and maintain runbooks and help refine response processes
- Take part in a weekend on-call rotation, including occasional out-of-hours response to high-severity incidents
What you need
- 5+ years of experience in security incident response, including acting as a lead during incidents and coordinating across teams
- Strong Python skills for building investigation tools and scripts
- Practical knowledge of forensics and analysis on macOS, Windows and Linux, plus experience with SIEM log review
- Experience with cloud architecture and security on AWS or GCP
- Ability to explain findings and strategy clearly to technical staff, executives and legal teams, and to mentor other engineers
- Residence in Poland is required; working hours follow UK time
- Preferred: 2+ years on insider threat or employee investigations, a degree in a related field or equivalent experience, GCIH or similar certification, familiarity with NIST CSF, ISO 27001 or FedRAMP
How to apply
Sign up free on i'llTip to see the employer's details and apply. i'llTip's AI can tailor your résumé to this job, and you'll get alerts for similar roles.
Apply on i'llTipGet the Android appGet the iPhone appMore Cybersecurity & Data Protection jobs
Cybersecurity Engineer (Remote - US only)
This is a remote cybersecurity role with a UX research technology company that sells a SaaS platform to large consumer and enterprise brands. You will join the cybersecurity team, reporting to the VP of Compliance and In…
Senior SOC Analyst
This is a senior, onsite role in Lagos for an experienced security professional who will lead day-to-day security monitoring and incident response. The work centres on spotting and investigating cyber threats, strengthen…
Senior Infrastructure Security Engineer (Remote - Americas and EMEA)
The employer does not permit permanent work from a number of countries, so confirm your country is eligible before applying. A fast-growing, remote-first software company is hiring a senior engineer to help maintain and …
GRC Analyst (Remote - Worldwide)
Candidates can apply from any country. This role sits within the compliance and security team of a fast-growing developer tools company with a fully remote, globally distributed workforce. You will help make risk managem…
Cyber Security Analyst
A remote, full-time role for a Cyber Security Analyst with a business and technology education organisation. The analyst will protect digital systems, networks and information from cyber threats, monitoring security even…