MDR Automation Engineer

Varonis; Kraków; On-site; PLN 210,000 - 270,000; Full time

Job summary

Varonis MDR is seeking an MDR Security Engineer to own and scale the automation layer powering our global MDR operations. This role builds production-grade automation systems that reduce manual workload, improve detection quality, and enable consistent incident response.

The ideal candidate is a hands-on engineer with strong experience in SOAR platforms, security operations, and automation design, capable of driving measurable improvements in efficiency across a high-volume SOC environment.

Qualifications

• 4+ years of experience in Security Operations, MDR, Incident Response, or Security Engineering.
• 2–3+ years of hands-on experience with SOAR platforms and security automation.
• Proven experience owning and operating production-grade automation workflows in a SOC/MDR environment.
• Strong understanding of SOC operations, alert triage, escalation workflows, and incident response.
• Experience with enterprise security technologies (SIEM, SOAR, EDR/XDR, IAM/AD).
• Strong scripting/development skills (Python, PowerShell, Bash) and experience building APIs and integrations.
• Experience with CI/CD, version control (Git), and deploying automation at scale.
• Strong analytical thinking and problem-solving skills with the ability to translate complex workflows into automation.
• Excellent communication and collaboration skills across engineering and operations teams.

Responsibilities

• Upkeep SOAR playbooks, workflows, and integrations across the MDR platform.
• Build and operate production-grade automation systems for alert triage, enrichment, investigation, and response.
• Define and drive automation strategy by scaling high-impact SOC processes.
• Develop integrations across SIEM, EDR/XDR, identity, cloud, and ticketing systems via APIs.
• Partner with MDR analysts, IR, threat hunters, and engineering to translate workflows into automation.
• Improve detection and response quality through automation of enrichment, investigation, and containment.
• Contribute to incident response and RCAs by tooling that speeds investigations.
• Evaluate and implement new automation capabilities, including AI-assisted workflows.

Skills

SOAR platforms

Security operations

Automation design

SIEM

EDR/XDR

Identity

Cloud security

APIs & scripting

Python

PowerShell

Bash

CI/CD

Git

Tools

SIEM

SOAR

Git

Job description

Varonis MDR is seeking an MDR Security Engineer to own and scale the automation layer powering our global MDR operations. This role builds production-grade automation systems that reduce manual workload, improve detection quality, and enable consistent incident response.

The ideal candidate is a hands-on engineer with strong experience in SOAR platforms, security operations, and automation design, capable of driving measurable improvements in efficiency across a high-volume SOC environment.