AI-Driven XDR Security Engineer (Hybrid/Remote)

EY; Warszawa; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Flexible working model

Hybrid and remote work options

Professional development programs

Private healthcare

Job summary

EY Poland seeks a Security Engineer EDR to design and implement enterprise XDR architectures and lead deployments of CrowdStrike Falcon XDR and Microsoft Defender XDR. You will integrate endpoints, cloud workloads, identities, and security tools into cohesive XDR ecosystems.

The role involves coordinating with SOC teams, improving detection coverage, and advising clients on security best practices across AI security, cloud security, and SASE/SSE domains.

Qualifications

• 4+ years in Cybersecurity Engineering, Security Operations, Detection Engineering, or Security Consulting.
• Hands-on with CrowdStrike Falcon or Microsoft Defender XDR.
• Experience with XDR/EDR/SIEM/SOC technologies.
• Knowledge of incident detection and response processes.
• Strong Windows/Linux and cloud environment understanding.

Responsibilities

• Design and implement enterprise XDR architectures.
• Lead deployments of CrowdStrike Falcon XDR and Microsoft Defender XDR.
• Integrate endpoints, cloud workloads, identities, email security, and third-party tools into XDR.
• Develop onboarding strategies and deployment roadmaps for enterprises.
• Fine-tune detection logic, policies, and response workflows.
• Support clients in improving XDR maturity and security operations.
• Collaborate with SOC to enhance threat hunting and incident response.
• Create documentation, procedures, and architecture diagrams.

Skills

Communication

Stakeholder management

Threat detection

Education

CISSP

GCIH

GCIA

Security+

Tools

CrowdStrike Falcon

Microsoft Defender XDR

Job description

EY Poland seeks a Security Engineer EDR to design and implement enterprise XDR architectures and lead deployments of CrowdStrike Falcon XDR and Microsoft Defender XDR. You will integrate endpoints, cloud workloads, identities, and security tools into cohesive XDR ecosystems.

The role involves coordinating with SOC teams, improving detection coverage, and advising clients on security best practices across AI security, cloud security, and SASE/SSE domains.