Information Technology Security Engineer

ASBIS; Polska; A distancia; PLN 240.000 - 360.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Work-from-home option

International career opportunities

Competitive salary package

Descripción de la vacante

ASBIS is seeking a hands-on Senior Security Engineer to design and run a Group-wide SOC, improving detections, hardening systems, and coordinating audits. You will work with MDR/MSSP partners, build detections, and lead internal security initiatives.

Ideal candidates have 5+ years in technical security, 2+ years in SOC, strong Python/PowerShell skills, and deep Microsoft security knowledge, with English documentation provided in a global setting. Remote work options are available.

Formación

• At least 5+ years in technical security with 2+ years in SOC or incident response.
• Built or led a SOC or security monitoring process.
• Deep knowledge of Microsoft security: Entra ID, CA, PIM, Intune, Defender XDR, M365 logs, KQL.
• Experience with Active Directory hardening and attack paths.
• Windows forensics, EDR telemetry, vulnerability scanners, CIS benchmarks.
• Scripting in Python/PowerShell; Git.
• Familiarity with ISO/IEC 27001:2022, NIS2, GDPR incident notification.
• English at least B2+ for documentation.

Responsabilidades

• Design the SOC architecture and operating model, tune the SIEM.
• Write and maintain detections (KQL, Sigma, Wazuh rules), reduce false positives.
• Harden Microsoft 365, Entra ID, AD, Windows/Linux servers, network, backups.
• Own vulnerability scanning and pentest follow-up with IT teams.
• Plan and perform internal IT controls audits; track findings as actions.
• Manage security vendors (MDR/MSSP, pentesters) to SLAs.
• Automate SOC tasks (Python/PowerShell, SOAR, AI-assisted triage).

Conocimientos

SOC leadership

Security engineering

Python

PowerShell

KQL

Sigma

Wazuh

Microsoft security

English communication

Herramientas

Wazuh

Microsoft Sentinel

SIEM

Descripción del empleo

With over 2600 employees in 28 subsidiaries across the EMEA region, ASBIS is a pre-eminent global value add distributor, OEM, and solutions provider. We are distinguished by our in-depth industry insight and 32+ years of experience as a reliable global partner for clients and suppliers.

We are proud of being one of the certified companies by Great Place to Work®, the global authority on workplace culture, as we believe that our true asset is people. ASBIS invests a lot to create a workplace where every employee has consistently positive experience, professional growth, and appropriate support to unlock their potential and build a future with the Company.

Whatever your area of expertise and specialization, you will find a range of career opportunities at ASBIS.

About the position:

We are building an ISO/IEC 27001-aligned information security management system, integrated with our ISO 9001 quality system, and preparing for NIS2. This isthe first dedicated security engineering role in the Group: you will design and run a single Group-wide SOC, raise our

technical security controls, and run internal technical security audits. It is a hands-on lead role: you build much of it yourself, then grow it with partners (MDR/MSSP) and, later, a team.

What You'll Do:

• Design the SOC architecture and operating model; select and tune the SIEM (Wazuh /Microsoft Sentinel underevaluation).
• Write and maintain detections (KQL, Sigma, Wazuh rules); reduce false positives.
• Harden Microsoft 365, Entra ID, Active Directory, Windows/Linux servers, network and backup.
• Own vulnerability scanning and pentest follow-up with IT teams.
• Plan and perform internal technical audits of IT controls; turn findings into tracked actions. Audits of controls you built are performed independently.
• Manage security vendors (MDR/MSSP, pentesters) against SLAs.
• Automate SOC work (Python / PowerShell, SOAR, AIassisted triage within Group AI policy).

Must have:

• 5+ years in technical security, incl. 2+ years in SOC, detection engineering or incident response.
• Has built (not only operated) a SOC, SIEM or security monitoring process.
• Deep Microsoft security: Entra ID, Conditional Access, PIM, Intune, Defender XDR, M365 audit logs, KQL.
• Active Directory attack paths and hardening (tiering, BloodHound / PingCastle).
• Windows forensics and EDR telemetry; vulnerability scanners; CIS benchmarks.
• Scripting in Python and/or PowerShell; Git.
• Working knowledge of ISO/IEC 27001:2022 Annex A, NIS2 and GDPR incident notification.
• English B2+ (all documentation in English).

Nice to have:

• ISO 27001 internal / certification audit experience; multicountry group.
• Certifications: SC-200 / SC-300, GCIH / GCFA, BTL, OSCP /
• CRTO, ISO 27001 LA.

We offer:

• Work for a financially strong, fast-growing multinational company.
• Access to continuous professional development: training, certification programs, events, and team buildings.
• Competitive salary package and motivation scheme.
• Work-from-home option.
• International career opportunities.

We are on a mission to bring technology to everyone and are looking for new colleagues. Are you the one?

By applying for the above position, you will confirm that you have reviewed and agreed to our Privacy Notice https://www.asbis.com/privacy-policy