Hands-On Cybersecurity Operations Engineer

UBQ; Warszawa; Remote; PLN 180,000 - 240,000; Full time

Job summary

UBQ.io in Warszawa, Poland is seeking a hands-on Cybersecurity Operations Engineer to implement and tune security tooling across EDR, SSE, SIEM, and WAF in production while aligning with MITRE ATT&CK. You will hunt threats, investigate incidents end-to-end, write detections, and collaborate with IT and security teams to strengthen the organization’s security posture.

Ideal candidate has 3+ years of hands-on experience in SOC, zero-trust concepts, and strong communication skills; security

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field.
• At least 3 years hands-on experience with EDR, SSE, SIEM, and WAF.
• Experience deploying and tuning security platforms in production.
• SOC experience with hands-on implementation is a plus.
• Hands-on experience writing and tuning detections and threat hunts.
• Familiarity with MITRE ATT&CK framework and zero trust principles.
• Certifications such as Security+, GCIA, GCIH, OSCP are a plus.
• Excellent communication and collaboration skills.

Responsibilities

• Implement, configure, and maintain EDR, SSE, SIEM, and WAF platforms.
• Tune detections, write rules, and optimize responses.
• Lead threat-hunting activities across endpoints, network, and logs.
• Investigate incidents end-to-end from triage to containment.
• Develop and maintain incident response playbooks and docs.
• Collaborate with IT, infrastructure, and applications teams to embed security controls.
• Evaluate new security tooling and ensure proper documentation.
• Map coverage to frameworks like MITRE ATT&CK.

Skills

EDR

SSE

SIEM

WAF

Threat hunting

MITRE ATT&CK

Zero Trust

Security certifications

Education

Bachelor's degree in IT or Cybersecurity

Tools

EDR platforms

SIEM tools

WAF tooling

ZTNA/SWG

Job description

UBQ.io in Warszawa, Poland is seeking a hands-on Cybersecurity Operations Engineer to implement and tune security tooling across EDR, SSE, SIEM, and WAF in production while aligning with MITRE ATT&CK. You will hunt threats, investigate incidents end-to-end, write detections, and collaborate with IT and security teams to strengthen the organization’s security posture.

Ideal candidate has 3+ years of hands-on experience in SOC, zero-trust concepts, and strong communication skills; security