{"id":2504572,"url":"https://alion.io/job/asana-senior-security-engineer-threat-response-2","title":"Senior Security Engineer, Threat Response","company":{"id":4507,"name":"Asana","domain":"asana.com","url":"https://alion.io/company/asana","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":76,"open_postings":20,"ghost_share":0,"stale_share":0.95,"repost_share":0,"time_to_fill_p50_days":41,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":31900,"max":36250,"currency":"PLN","period":"month","gross":true,"usd_annual":112020},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Asana","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"JavaScript","optional":false},{"name":"npm","optional":false},{"name":"Okta","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"TypeScript","optional":false},{"name":"Elastic SIEM","optional":true},{"name":"Git","optional":true},{"name":"Rest API","optional":true},{"name":"SentinelOne","optional":true},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-06-02T14:54:14Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-22T22:31:25Z","board_verified":true,"closed_at":null,"days_open":142,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":141},"description":"Our Security team keeps Asana's employees, users, and customers safe, by proactively addressing threats and fostering a culture of security throughout our product and operations. \nWe are looking for a savvy Security Engineer to join our Blue Team in Warsaw. You will be a foundational member of the security presence in our Warsaw innovation hub, partnering directly with IT, infrastructure, and product teams to ensure we have robust detection and response capabilities. Detection and response here leans on engineering practice. We are investing in automation and detection-as-code to cut down on manual triage, and we are looking for someone comfortable writing and reviewing code as part of that work.\nThis role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements.\nWe offer a Contract of Employment (UoP) for our employees in Poland.\nWhat you'll achieve:\nLead detection, analysis, and response across our cloud and SaaS environments, identity providers, endpoints, and the software supply chain, ensuring timely and effective remediation of security incidents.\n Investigate and remediate security incidents across cloud infrastructure (AWS/GCP/Azure), identity providers (e.g., Okta), and SaaS environments.\n Investigate and contain software supply chain and CI/CD incidents, from unauthorized changes in build environments to suspect third-party dependencies (e.g., npm, PyPI).\n Help build and maintain our detection-as-code infrastructure (e.g., Panther), SOAR automation, and response playbooks, treating detection logic as tested, version-controlled production code.\nUtilize and optimize security tools such as Panther for SIEM, CrowdStrike for endpoint detection and response, and other security platforms.\nConduct proactive threat hunting and operationalize threat intelligence across cloud, endpoint, and identity telemetry to catch threats beyond standard SIEM alerting.\nConduct forensic analysis during security incidents to understand the scope and impact of incidents.\nCollaborate with engineering teams to integrate security best practices into development processes and provide guidance on secure configurations.\nDevelop and deliver training to educate engineers on security operations and incident response best practices.\nAbout you:\n7+ years of experience in threat detection, security operations, or incident response, including investigating incidents across cloud platforms, identity providers, and SaaS applications, with practical knowledge of audit logging and IAM.\n Proficient in Python (Bash, Go, or JavaScript/TypeScript is a plus) for security scripting and automation, with hands-on experience across REST APIs, Git workflows, and PR-based code reviews.\n Hands-on experience investigating software supply chain threats, with fluency in auditing modern developer ecosystems (e.g., npm, PyPI), build logs, and CI/CD pipelines.\nFamiliarity with \"Detection as Code\" methodologies, including test-driven detection logic and rule management through CI/CD pipelines.\n Strong experience with SIEM platforms (e.g., Panther, Splunk, Elastic Security) for log analysis, alert correlation, and dashboard creation.\n Deep working knowledge of endpoint detection and response (EDR) tools (e.g., CrowdStrike, SentinelOne) with specialized expertise in macOS endpoint security, telemetry, and threat detection capabilities.\nExperience performing digital forensics and root-cause analysis to determine incident scope and impact.\n Familiarity with common attack techniques, tactics, and procedures (TTPs) and frameworks like MITRE ATT&CK.\nCollaborative and pragmatic, with strong communication skills across technical and non-technical partners, committed to building robust defenses and helping engineers do their best, most secure work.\nDemonstrated curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making.\nWhat we offer:\nGenerous, transparent and fair compensation system (base salary and RSUs).\nContract of Employment (and the option of 50% tax deductible costs for author’s rights usage in respect of applicable roles).\nHealth insurance with dental and travel coverage (Lux Med).\nBreakfast and lunch catering on the days that you work from the office.\nVacation allowance.\nCareer growth budget.\nHome office setup budget.\nGym/Fitness card.\nFertility healthcare and family-forming support with Carrot.\nMental Health Support in Modern Health.\nGroup life insurance.\nMacBooks with all necessary accessories\nFor this role, the estimated base salary range is between 31,900 - 36,250 PLN gross per month (subject to all taxes and necessary deductions). The actual base salary will vary based on various factors, including market and individual qualifications objectively assessed during the interview process. The listed range above is a guideline, and the base salary range for this role may be modified. In addition to base salary, your compensation package may include additional components such as equity and sales incentive pay (for most sales roles), and benefits. If you're interviewing for this role, speak with your recruiter to learn more about the total compensation and benefits\nfor this role.\nAbout us\nAsana is a leading platform for human + AI collaboration. Millions of teams around the world rely on Asana to achieve their most important goals, faster. Asana has been named to Fortune's Best Workplaces for 7+ years and recognized by Fast Company, Forbes, and Gartner for excellence in workplace culture and innovation. We offer an exceptional office-centric culture while adopting the best elements of hybrid models to ensure that every one of our global team members can work together effortlessly. With 13+ offices all over the world, we are always looking for individuals who care about building technology that drives positive change in the world and a culture where everyone feels that they belong.\nWe believe in supporting people to do their best work and thrive. Our goal is to ensure that Asana upholds an environment where all people feel that they are respected and valued, whether they are applying for an open position or working at the company. We provide equal employment opportunities to all applicants without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by law.\nJoin Asana’s Talent Network to stay up to date on job opportunities and life at Asana.","description_format":"text","description_chars":6823,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Health insurance","Home office","Life insurance"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["AI Agents","Project & Work Management Software"],"lifecycle":[{"event":"open","at":"2026-10-14T07:10:37Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.4,"p_room":0.28,"age_days":141,"expected_fill_days":41,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":112020,"is_top_pay":false},"html_url":"https://alion.io/job/asana-senior-security-engineer-threat-response-2","json_url":"https://alion.io/job/asana-senior-security-engineer-threat-response-2.json","meta":{"generated_at":"2026-10-23T01:01:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1704,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4507},"rest":"https://alion.io/mcp/rest/get_company?id=4507"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fasana-senior-security-engineer-threat-response-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fasana-senior-security-engineer-threat-response-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fasana-senior-security-engineer-threat-response-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/asana-senior-security-engineer-threat-response-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fasana-senior-security-engineer-threat-response-2"}]}