Lead Cloud Security & Incident Response Engineer

Gainsight; Wrocław; Hybrid; PLN 279,000 - 318,000; Full time

Benefits offered by this job

Private medical care

Multisport Card

Remote work options

Equity program

Annual bonus

Recharge Holidays

Job summary

Gainsight is seeking a Lead Security Operations Engineer in Wroclaw, Poland to mature our security program. You will own detection strategy, lead major incidents, and mentor analysts in a cloud-first environment, collaborating with DevOps, Engineering, and IT.

The role emphasizes incident response leadership, detection across SIEM/EDR/SOAR, and cloud security architecture with opportunities to influence controls from design to deployment.

Qualifications

• 6+ years of experience in security operations with escalating responsibility.
• Proven experience leading or mentoring a team with technical guidance.
• Deep expertise with SIEM, EDR and SOAR platforms; hands-on rule-writing and automation.
• Strong incident response leadership, end-to-end management of high-severity events.
• Solid understanding of cloud security (AWS/Azure/GCP) and CI/CD integration.
• Scripting or automation proficiency to scale response workflows.
• Familiarity with MITRE ATT&CK and translating findings into detection logic.
• Excellent communication for executives and technical teams during incidents.

Responsibilities

• Own detection strategy and respond to major incidents end-to-end.
• Lead incident response for significant security events and document findings.
• Embed security controls into infrastructure, CI/CD pipelines, and design.
• Mentor analysts and engineers to improve team depth and independence.
• Translate technical findings into actionable insights for leadership.

Skills

Incident response leadership

Cloud security architecture

Detection engineering

Scripting (Python/PowerShell)

MITRE ATT&CK

Executive communication

Mentoring

Tools

SIEM

EDR

SOAR

Job description

Gainsight is seeking a Lead Security Operations Engineer in Wroclaw, Poland to mature our security program. You will own detection strategy, lead major incidents, and mentor analysts in a cloud-first environment, collaborating with DevOps, Engineering, and IT.

The role emphasizes incident response leadership, detection across SIEM/EDR/SOAR, and cloud security architecture with opportunities to influence controls from design to deployment.