• Incident Detection & Response: You will monitor our SIEM for security alerts, conduct thorough investigations into suspicious activity within our GCP environment, and coordinate the response across teams to ensure rapid resolution.

• Security Engineering: You'll actively improve our defenses by creating and tuning detection rules in Elastic, authoring clear incident response playbooks, identifying and addressing any visibility gaps, as well as, collaborating with the SOC Lead.

• Threat Intelligence Integration: You will be our link to the threat landscape, responsible for processing intelligence on adversary TTPs (Tactics, Techniques, and Procedures) and applying the MITRE ATT&CK Framework to enhance our detection capabilities.

• Automation & The Future: A key and exciting part of your role will be to help implement a new SOAR platform, directly shaping the future of our security automation.

• Core Experience: You have 2+ years of experience working in a Security Operations Center (SOC) or a similar security role.

• Technical Skills: You have hands-on experience with SIEM (security tools) and a strong understanding of cloud security, specifically in Google Cloud Platform (GCP).

• Security Knowledge: You are proficient with the MITRE ATT&CK Framework and comfortable working with threat intelligence concepts like IoCs and TTPs.

• Fluency in Polish and English 

Diverse teams really are the best teams. Research shows that some candidates may hesitate to apply for a job unless they meet every requirement. If you are excited about working with us, we encourage you to apply - even if you're not 100% sure. We are interested in getting to know you and learning about what you bring to the table.

Please note that we may close a job posting early if we receive a large number of exceptional applications.

Good luck!