{"id":3958296,"url":"https://alion.io/job/netwrix-corporation-senior-security-engineer","title":"Senior Security Engineer","company":{"id":449943,"name":"Netwrix Corporation","domain":"netwrix.com","url":"https://alion.io/company/netwrix-corporation","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":{"grade":"B","score":79,"open_postings":6,"ghost_share":0,"stale_share":0.833,"repost_share":0,"time_to_fill_p50_days":36,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kraków, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Okta","optional":false},{"name":"PowerShell","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-11-06T09:30:52Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-09T10:02:26Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"About Us\nAt Netwrix, our mission is to revolutionize data security by placing identity at the core - providing unparalleled visibility and control. Engineered and supported by over 900 highly talented, motivated employees and hundreds of trusted partners in nearly every geography, Netwrix solutions are relied upon daily by security professionals across more than 13,500 organizations in over 100 countries around the world.\nOver the past two decades, Netwrix has expanded its market presence through innovation, organic growth, and strategic acquisitions, and are proud to be backed by renowned private equity firms, TA Associates and Centerbridge Partners. Netwrix maintains a global presence, fostering a remote-first work environment while encouraging and facilitating frequent face-to-face interaction with colleagues, customers, and partners.\nPosition Overview\nThe Senior Security Analyst / Engineer will be a key member of our Information Security team, responsible for detecting, investigating, and responding to security threats across our Microsoft, Netwrix, and SaaS environments. This role combines hands-on SOC work with engineering judgment: you will triage alerts, lead investigations from detection through remediation, and help mature the processes and tooling that keep Netwrix and our customers secure. You will work closely with IT, DevOps, and cross-functional teams, and you will help shape how our security operations evolve.\nThis is a hybrid role from our office in Kraków.\nResponsibilities:\nMonitor, triage, and investigate security alerts and incidents using Microsoft Defender, Sentinel, and Netwrix tools, escalating and documenting findings per SOC procedures.\nConduct investigations using SOAR and threat intelligence tooling, correlating alerts across data sources to determine scope and root cause.\nManage vulnerability remediation using Tenable, prioritizing findings by risk, tracking remediation SLAs with system owners, and reporting exposure trends to leadership.\nInvestigate and remediate phishing reports and other email and social engineering threats, including header analysis, URL and attachment triage, and user communication.\nSupport and monitor corporate resources and applications (such as Salesforce) from a security perspective, including access reviews, anomalous activity detection, permission and role audits, and data exposure risk.\nManage and monitor identity and access through Okta/EntraID, including SSO, MFA, conditional access, anomalous login detection, and access reviews.\nMonitor Azure security tooling and configurations, including Entra ID, Microsoft Defender for Cloud, and logging and alerting.\nOversee endpoint and network monitoring tools to ensure coverage and timely detection of threats.\nCollaborate with IT and cross-functional teams during security incidents, from detection through containment and remediation.\nSupport SOC 2 compliance efforts, including evidence collection, control monitoring, audit preparation, and remediation tracking.\nDevelop and deliver security awareness training to employees, including phishing simulations, best practices, and policy education.\nMaintain and improve incident response runbooks, playbooks, and documentation.\nQualifications:\n5+ years of experience in security operations, incident response, or security engineering.\nHands-on experience with Microsoft Defender for Endpoint, Microsoft Sentinel, Defender for Cloud, and Microsoft Entra ID.\nHands-on experience with Tenable tools for vulnerability management and working with technical teams on remediation steps.\nExperience triaging and investigating security events in a SOC or managed detection environment.\nWorking knowledge of SIEM, EDR, and SOAR platforms.\nExperience with Okta/Entra ID or another enterprise identity provider, including SSO, MFA, and conditional access.\nStrong phishing and email threat analysis skills.\nFamiliarity with SOC 2 or similar compliance frameworks.\nProficiency in KQL and at least one scripting language (PowerShell preferred).\nUnderstanding of the MITRE ATT&CK framework and the incident response lifecycle (NIST SP 800-61 or equivalent).\nProfessional proficiency in English, written and spoken.\nNice to Have:\nHands-on experience with Netwrix security products.\nExperience monitoring Salesforce or other SaaS platforms from a security perspective.\nCertifications such as Microsoft SC-200 or AZ-500, GIAC GCIH or GCIA, or CISSP.\nExperience handling customer-facing security incidents in a software company.\nOur Values\nAt Netwrix, our values guide every action:\nNext-Level Customer Focus -Customers first, always. We listen, protect, and go the extra mile- because their success is our mission.\nExcellence - We set high standards and take pride in delivering exceptional results. We celebrate wins, seek constant improvement, and address shortcomings professionally.\nTransparent Ownership - We celebrate our successes, own up to our mistakes, communicate openly, and face challenges head-on with a genuine commitment to doing the right thing.\nWinning with Clear Thinking - We value clarity, find straightforward solutions to complex problems, and make swift, effective decisions.\nRelentless Innovation - We continually seek better ways to serve our customers and stay ahead. We foster creative thinking, and we embrace new approaches. \nIndustry-Leading Expertise - We take pride in our expertise and continuously seek to learn and share knowledge, striving to be the trusted experts our customers rely on.\neXceptional Together - We believe in the power of collaboration and diverse perspectives. By valuing each other’s strengths, we achieve outcomes that surpass individual contributions.\nJoin us in a culture where integrity, respect, and hard work are foundational. Be part of a team dedicated to making a lasting impact.\nWhy You’ll Love Working at Netwrix\nCompetitive Health Benefits\nContinuous Learning and Development Opportunities\nTeam-Oriented, Collaborative, and Innovative Work Environment\nRegular Company Town Halls to Keep You Informed\nOpportunities for Career Growth and Advancement\nWe pride ourselves on a culture that truly values employee input across various backgrounds and experiences. We look forward to welcoming new talent who can help us further our mission.\nNetwrix Corporation and its wholly owned subsidiaries are Equal Opportunity Employers (EEO) and welcome all applicants for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other protected characteristic under applicable law.\nPlease let us know if you require any accommodation.","description_format":"text","description_chars":6623,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Continuous learning","Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Information Security"],"lifecycle":[{"event":"open","at":"2026-11-09T10:02:26Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":3,"expected_fill_days":36,"reasons":["conf:2","win:early"],"computed_at":"2026-11-09T12:14:09Z"},"pay":null,"html_url":"https://alion.io/job/netwrix-corporation-senior-security-engineer","json_url":"https://alion.io/job/netwrix-corporation-senior-security-engineer.json","meta":{"generated_at":"2026-11-09T12:14:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15047,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":449943},"rest":"https://alion.io/mcp/rest/get_company?id=449943"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnetwrix-corporation-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnetwrix-corporation-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnetwrix-corporation-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/netwrix-corporation-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnetwrix-corporation-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3958296}},{"tool":"search_jobs","arguments":{"company":"netwrix.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3958296},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}