MDR Security Operations Lead

Varonis; Kraków; On-site; PLN 180,000 - 280,000; Full time

Job summary

Varonis MDR team leads a 24/7 security operations program to detect and respond to data threats. The MDR Team Lead oversees analysts, coordinates investigations, and ensures SLAs are met while guiding training and development.

The role emphasizes escalation management, cross-functional collaboration with Product Support, PM, and Engineering, and the continuous improvement of threat detection playbooks and runbooks.

Qualifications

• 4+ years in cybersecurity operations in a global company.
• 2+ years of experience leading a team.
• Degree or cybersecurity certification.
• Experience delivering security operations services meeting SLAs.
• Knowledge of network-based, host-based, data-based, and identity security tools.
• Strong problem-solving, analytical thinking, and communication skills.
• Attention to detail and ability to deliver autonomously.

Responsibilities

• Technical and operational escalation point for investigations and the MDR service.
• Coordinate investigative efforts with customers and internal teams.
• Document findings and track in CRM.
• Lead or attend customer calls and represent the MDR service.
• Recruitment and onboarding of new team members.
• Continuously train the team to maintain MDR capabilities.
• Conduct regular performance reviews and SWOT analyses.
• Collaborate with Product Support, Product Management and Engineering.
• Oversee development and modification of threat detection systems, playbooks, and runbooks.

Skills

Team leadership

Cybersecurity operations

Analytical thinking

English communication

Education

Cybersecurity degree or cert

Tools

Firewall / IDS

EDR / AV

DLP / DSPM

PAM / IAM

Job description

Varonis MDR team leads a 24/7 security operations program to detect and respond to data threats. The MDR Team Lead oversees analysts, coordinates investigations, and ensures SLAs are met while guiding training and development.

The role emphasizes escalation management, cross-functional collaboration with Product Support, PM, and Engineering, and the continuous improvement of threat detection playbooks and runbooks.