{"id":2114414,"url":"https://alion.io/job/spyrosoft-cyber-detection-response-engineering-lead-expert-2","title":"Cyber Detection & Response Engineering Lead Expert","company":{"id":933,"name":"Spyrosoft","domain":"spyro-soft.com","url":"https://alion.io/company/spyrosoft","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":{"grade":"A","score":92,"open_postings":88,"ghost_share":0,"stale_share":0.511,"repost_share":0,"time_to_fill_p50_days":16,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Wrocław, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":56000,"max_usd":99000,"period":"year","method":"role_seniority_country_cell","sample_n":10},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"NIST CSF","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SQL","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"IBM QRadar","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-09-30T14:04:11Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-27T00:53:18Z","board_verified":true,"closed_at":null,"days_open":26,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":25},"description":"Tech Stack:\nSecurity Operations & Detection\nSIEM: Microsoft Sentinel, Splunk, IBM QRadar, ArcSight or similar\n\nSOAR platforms\n\nEDR & XDR technologies\n\nThreat detection & monitoring solutions\n\nLog management & security analytics platforms\n\nCloud Security\nMicrosoft Azure, AWS, GCP\n\nCloud-native security monitoring solutions\n\nFrameworks & Methodologies\nMITRE ATT&CK\n\nNIST Cybersecurity Framework (NIST CSF)\n\nIncident Response methodologies\n\nSOC & CSIRT operating models\n\nScripting & Query Languages\nKQL, SPL, SQL, Python, PowerShell\n\nOther automation and scripting technologies\n\nRequired Qualifications:\nExtensive experience within Cyber Detection & Response, Security Operations, Incident Response, or related cybersecurity consulting services.\n\nHands-on expertise across multiple CDR domains, including security monitoring, detection engineering, incident response, security automation, governance, and SOC or CSIRT transformation initiatives.\n\nProven experience leading cybersecurity programs, projects, workstreams, or multidisciplinary delivery teams.\n\nStrong understanding of security operations processes, detection lifecycle management, security data management, and incident handling procedures.\n\nAbility to design end-to-end security solutions aligned with organizational objectives, operational requirements, and cyber risk considerations.\n\nPractical understanding of the application of AI within cybersecurity, including benefits, limitations, risks, governance requirements, validation processes, and responsible use.\n\nExperience supporting business development activities such as proposals, RFP responses, solution architecture, effort estimation, and client presentations.\n\nExcellent communication and stakeholder management skills, with the ability to engage effectively with both technical specialists and executive leadership.\n\nStrong analytical thinking, problem-solving capabilities, and a continuous improvement mindset.\n\nProfessional proficiency in English (C1).\n\nNice to Have:\nExperience implementing SOAR solutions and security workflow automation.\n\nKnowledge of security integrations and API-based automation.\n\nExperience with cloud-native security monitoring solutions.\n\nUnderstanding of AI-enabled capabilities within SIEM, SOAR, EDR, and XDR platforms.\n\nFamiliarity with industry-recognized frameworks such as MITRE ATT&CK and NIST CSF.\n\nRelevant cybersecurity certifications.\n\nPrevious experience in a consulting environment.\n\nProfessional proficiency in German, French, or Spanish.\n\nProject Description:\nWe are seeking an experienced Cyber Detection & Response Engineering Lead Expert to join our Cybersecurity Detection & Response (CDR) practice.\nIn this role, you will lead the design, implementation, and continuous improvement of advanced security monitoring, detection engineering, incident response, and automation capabilities across diverse technology environments.\nAs a senior cybersecurity professional, you will work closely with clients, delivery teams, and stakeholders to develop scalable security operations capabilities, drive SOC/CSIRT transformations, and implement innovative detection and response solutions leveraging modern security platforms and AI-enabled technologies.\nScope of Services:\nDesign and deliver solutions across security monitoring, detection engineering, incident response, security operations, and security automation.\n\nLead complex Cyber Detection & Response engagements and provide technical direction to multidisciplinary delivery teams.\n\nAssess existing SOC and CSIRT capabilities, identify improvement opportunities, and define target operating models and transformation roadmaps.\n\nDevelop and enhance threat detection capabilities through detection use cases, correlation rules, monitoring strategies, and response procedures.\n\nSupport the implementation, migration, integration, and optimization of SIEM, SOAR, EDR, XDR, and log management platforms.\n\nApply AI-enabled cybersecurity capabilities to improve threat detection, alert triage, investigation processes, and security automation while ensuring proper validation, governance, and human oversight.\n\nTranslate business objectives, operational challenges, and security risks into practical solution architectures and delivery plans.\n\nFacilitate workshops, technical discussions, and executive presentations for business and technical stakeholders.\n\nProvide mentorship and technical coaching to consultants and engineers, supporting their professional and technical development.\n\nContribute to proposals, RFP responses, effort estimations, solution design activities, and client-facing discussions.\n\nDevelop reusable methodologies, frameworks, accelerators, and service offerings that enhance delivery quality and consistency across projects.","description_format":"text","description_chars":4771,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"French","level":"Advanced (C1)","optional":true},{"language":"Spanish","level":"Advanced (C1)","optional":true},{"language":"German","level":"Advanced (C1)","optional":true},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-10-08T23:15:03Z"}],"visa":[],"liveness":{"score":22,"band":"cold","label":"Long shot","p_open":1,"p_active":0.483,"p_room":0.45,"age_days":25,"expected_fill_days":16,"reasons":["conf:3","stale_co","velocity","win:tail"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/spyrosoft-cyber-detection-response-engineering-lead-expert-2","json_url":"https://alion.io/job/spyrosoft-cyber-detection-response-engineering-lead-expert-2.json","meta":{"generated_at":"2026-10-27T04:23:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3947,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":933},"rest":"https://alion.io/mcp/rest/get_company?id=933"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fspyrosoft-cyber-detection-response-engineering-lead-expert-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fspyrosoft-cyber-detection-response-engineering-lead-expert-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fspyrosoft-cyber-detection-response-engineering-lead-expert-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/spyrosoft-cyber-detection-response-engineering-lead-expert-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fspyrosoft-cyber-detection-response-engineering-lead-expert-2"}]}