Senior Security Operations Engineer

Role overview Monitor and investigate security events as part of a security operations team, leading incident response from initial strategy through resolution. The role also covers digital forensics for employee relations, legal, compliance, and security cases, plus improving the processes and tools that support investigations. The position is open to candidates residing in Poland and includes weekend on-call coverage.

Responsibilities - Analyze security alerts and monitor events for potential threats. - Lead information security incidents and insider investigations, setting response plans, coordinating execution, and keeping stakeholders informed through closure. - Conduct digital forensic investigations and communicate findings and response guidance to technical, executive, and legal audiences. - Develop and maintain investigation runbooks, automated workflows, and operational processes. - Coordinate services, integrations, and technology implementations that strengthen incident response and insider threat capabilities. - Participate in a weekend-inclusive on-call rota and help mentor security operations colleagues.

Requirements - At least 5 years of security incident response experience. - Ability to explain investigative findings and response strategies clearly to technical teams, executive leaders, and legal stakeholders. - Proficiency in Python and ability to build scripts or tools that support investigations. - Practical experience collecting, analyzing, and reporting technical evidence, and supporting the development of other engineers in these skills.

Benefits and work setup - Candidates must reside in Poland. - Weekend on-call participation is part of the role. - The source mentions professional development support and health and parental leave plans.