Hybrid CSIRT Cybersecurity Engineer — Incident Response & Automation

Allegro.eu S.A.; Warszawa; Hybrid; PLN 260,000 - 380,000; Full time

Benefits offered by this job

MacBook Pro

Fringe benefits (cafeteria plan)

English classes

Training budget

Volunteer day off

Social events

Allegro Tech Meeting

Job summary

Allegro.eu S.A. is seeking a skilled security engineer to own and run threat intelligence, hunting, EDR, SOAR, and SIEM platforms in a high-availability global marketplace. You will deploy incident response agents and drive automated defenses across a massive cloud and on-prem environment.

Join a team with autonomy, responsible for threat detection, forensics, and remediation. The role emphasizes AI-assisted security, collaboration with IT and business teams, and continuous skill growth in a

Qualifications

• Experience in SOC/CERT/CSIRT environments.
• Experience using SOAR, EDR/XDR and SIEM systems.
• Knowledge of current offensive and defensive security threats.
• Hands-on with large-scale IT infrastructure and DevOps culture.
• Familiarity with Linux (Ubuntu/Debian), Windows and macOS.
• Designed, implemented or maintained security solutions.
• Participated in security incident handling.
• Able to communicate across organizational levels.
• Understanding IT security technologies and their business impact.
• Independent, end-to-end incident response capabilities.

Responsibilities

• Monitor and triage security incidents from EDR/XDR, SIEM, and detection platforms 24/7 on-call.
• Investigate and respond to endpoint and server threats.
• Analyze and mitigate phishing campaigns targeting Allegro brands; coordinate takedowns and enrich IOCs.
• Detect and respond to network-layer attacks including DDoS and password spraying.
• Perform forensics and log correlation across multiple data sources to reconstruct timelines.
• Enrich and correlate indicators of compromise using threat intel and asset inventories.
• Investigate identity risks such as suspected account takeovers.
• Document findings with evidence-based incident reports and MITRE ATT&CK mappings.
• Coordinate remediation actions with IT, infrastructure, and business teams.
• Continuously improve detection by tuning rules and updating threat intel.
• Collaborate with brand protection and external partners against threats to Allegro.

Skills

SOC/CSIRT

SOAR/EDR/XDR/SIEM

Threat intel

IT infra/DevOps

Linux/Windows/macOS

Security design

Incident handling

Cross-team communication

Security tools

End-to-end IR

AI/Automation

Soft skills

AI security tools

Continuous learning

English proficiency

Job description

Allegro.eu S.A. is seeking a skilled security engineer to own and run threat intelligence, hunting, EDR, SOAR, and SIEM platforms in a high-availability global marketplace. You will deploy incident response agents and drive automated defenses across a massive cloud and on-prem environment.

Join a team with autonomy, responsible for threat detection, forensics, and remediation. The role emphasizes AI-assisted security, collaboration with IT and business teams, and continuous skill growth in a