Lead Incident Response Engineer, Security Operations

Coreweave; Warszawa; On-site; PLN 273,000 - 365,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Pension Plan

Life Insurance

Critical Illness Cover

Employee Assistance Programme

Tuition Reimbursement

Innovative disruption culture

Job summary

CoreWeave in Warsaw, Poland is seeking a Security Operations Engineer II to join our 24x7 Security Operations team. You will lead initial triage, escalation and incident response efforts across Linux, MacOS and Kubernetes environments.

You will work with SIEM, EDR and other tools, conduct post-incident reviews, and mentor junior engineers while continually improving detection and response capabilities to defend our enterprise.

Qualifications

• Degree in Computer Science, Computer Engineering, Cyber Security, Information Technology or similar experience.
• 5+ years of experience in forensics, incident response, or security operations, or related fields.
• Strong experience with Linux and MacOS systems, including deep knowledge of system internals, logging, and forensic artifacts.
• Experience with Kubernetes and familiarity with securing containerized environments.
• Experience with modern security tools and platforms such as SIEM, EDR, IDS/IPS, and firewalls.
• Strong understanding of network protocols, firewalls, VPNs, proxies, and other security technologies.
• Strong analytical skills with the ability to handle and interpret large amounts of data.
• Excellent communication and collaboration skills, with the ability to work effectively in high-pressure situations.

Responsibilities

• Be part of a 24/7/365 SOC, with rotating on-call for overnights/weekends.
• Investigate security incidents, create detections, analyze, contain, and remediate across Linux, MacOS, and Kubernetes environments.
• Utilize SIEM, EDR, and other security tooling to detect, investigate, and respond in real-time.
• Conduct post-incident reviews, providing insights and recommendations for improving defenses.
• Collaborate with threat intel & detection engineering teams to identify emerging threats.
• Serve as the technical lead for SOC response workflows, guiding junior engineers and improving tooling and processes.
• Keep up-to-date with industry best practices and threat landscape trends to enhance incident response capabilities.

Skills

Security Operations

Incident response

Linux

MacOS

Kubernetes

SIEM/EDR

Network security

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM

EDR

IDS/IPS

Firewalls

Job description

CoreWeave in Warsaw, Poland is seeking a Security Operations Engineer II to join our 24x7 Security Operations team. You will lead initial triage, escalation and incident response efforts across Linux, MacOS and Kubernetes environments.

You will work with SIEM, EDR and other tools, conduct post-incident reviews, and mentor junior engineers while continually improving detection and response capabilities to defend our enterprise.