Incident Response Engineer — SOC Cyber Security

Stefanini EMEA; Poland; On-site; PLN 180,000 - 240,000; Full time

Job summary

Stefanini Group in Poland is seeking a skilled Incident Response Engineer to join our Security Operations Center (SOC) delivering MSSP services. You will manage security incidents, develop response playbooks, and tailor configurations to client needs.

The role requires 5+ years in cybersecurity operations, experience in SOC/24/7 environments, and strong knowledge of SIEM/EDR, SentinelOne SDL, and Microsoft Entra ID.

Qualifications

• Minimum 5 years in cybersecurity operations and incident response.
• Experience in SOC/MSSP environments with 24/7 operations.
• Excellent written and spoken English.

Responsibilities

• Own assigned security alerts and incidents, providing advisory feedback.
• Lead investigation and response across endpoints, identity, network, cloud.
• Analyze indicators of compromise and adversary behaviors.
• Investigate identity sign-in activity and telemetry patterns.
• Use SDL and PowerQuery for advanced searches and threat analysis.
• Document actions, evidence, decisions, and recovery activities.

Skills

Incident response

SIEM/EDR/NDR

Threat hunting

Communication

Playbooks & documentation

Automation concepts

Team collaboration

Decision making under crisis

Education

Bachelor's degree in CS/IT/Engineering or related field

High school + Baccalaureate diploma

Tools

SentinelOne SDL

PowerQuery

Microsoft Entra ID

Job description

Stefanini Group in Poland is seeking a skilled Incident Response Engineer to join our Security Operations Center (SOC) delivering MSSP services. You will manage security incidents, develop response playbooks, and tailor configurations to client needs.

The role requires 5+ years in cybersecurity operations, experience in SOC/24/7 environments, and strong knowledge of SIEM/EDR, SentinelOne SDL, and Microsoft Entra ID.