Staff Security Operations Engineer
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Staff Security Operations Engineer based in Poland.
This is a senior security engineering opportunity focused on strengthening the security and resilience of critical infrastructure and open-source ecosystems.
You’ll help design, implement, and evolve security operations practices, controls, tools, and policies across a globally distributed environment.
The role combines hands-on cyber defense, security architecture, threat intelligence, risk management, and incident response.
You’ll work on identifying sophisticated threats, containing attacks, guiding remediation, and improving security assurance through measurable practices.
The position also offers the opportunity to influence engineering teams, contribute to threat intelligence initiatives, and share security expertise with the broader community.
You’ll operate in an agile, highly technical environment where autonomy, continuous learning, and strong technical judgment are valued.
This role is particularly suited to a security professional motivated by challenging adversaries and raising the standard of security across the wider technology ecosystem.
Accountabilities
Implement and continuously evolve security operations standards, procedures, playbooks, and practices across the organization.
Analyze and improve security architecture, identifying opportunities to strengthen infrastructure, systems, and development processes.
Evaluate, select, deploy, and improve security tools, technologies, and operational practices.
Identify, investigate, contain, and support the remediation of security threats and cyber attacks.
Apply threat modelling and risk management practices to identify vulnerabilities, assess potential impact, and prioritize appropriate controls.
Lead or contribute to tabletop exercises and other security operations activities across engineering, information systems, and technical teams.
Develop and maintain security operations learning and development materials to strengthen organizational security capabilities.
Monitor and track security operations KPIs, using measurable outcomes to assess effectiveness and guide continuous improvement.
Contribute to open-source threat intelligence initiatives and share relevant security knowledge with the broader community.
Develop thought leadership through technical presentations, blog posts, whitepapers, industry events, and other professional forums.
Partner with security leadership to communicate risks, present findings, influence decisions, and drive meaningful security improvements.
Plan and deliver security operations initiatives within an agile engineering environment while managing priorities and dependencies.
Exceptional academic track record, with an undergraduate degree in Computer Science, STEM, or a compelling equivalent professional background.
Deep personal interest in cybersecurity and a demonstrated motivation to work at the forefront of security technology.
Strong experience with threat modelling and established risk management frameworks.
Strong knowledge of security architecture and modern, industry-leading security tools.
Experience consuming and contributing to threat intelligence feeds and using intelligence to inform defensive strategies.
Practical knowledge of security risk management frameworks such as NIST CSF.
Familiarity with security standards and frameworks such as ISO 27001.
Proven ability to exceed expectations, take ownership, and deliver results in technically demanding environments.
Strong analytical and problem-solving capabilities, with sound judgment when assessing security risks and responding to complex threats.
Preferred: Experience working within a Security Operations team or Security Operations Center (SOC).
Preferred: Hands-on experience with offensive or defensive security teams and practical cyber defense capabilities.
Preferred: Experience defending against advanced persistent threats, highly sophisticated adversaries, or nation-state-level actors.
Strong communication and collaboration skills, with the ability to explain complex security issues and influence technical and organizational stakeholders.
Globally distributed, remote-first working environment.
Twice-yearly in-person team sprints and opportunities to collaborate with colleagues internationally.
Annual personal learning and development budget of USD 2,000.
Annual compensation reviews based on location, experience, performance, and contribution.
Performance-driven annual bonus.
Recognition and performance rewards.
Annual holiday leave.
Maternity and paternity leave.
Employee Assistance Programme.
Opportunities to travel internationally and meet colleagues at company events.
Travel benefits such as Priority Pass and upgrades for eligible long-haul business travel.
Opportunity to work on technically challenging security initiatives with global impact.
Exposure to open-source security, threat intelligence, advanced cyber defense, and security engineering practices.