Security Engineer

Softlanding; Polska; Hybrid; PLN 120,000 - 160,000; Full time

Job summary

Softlanding is seeking a Security Engineer to provide technical leadership across security engineering, monitoring, detection and incident response.

The role focuses on strengthening security controls, managing vulnerabilities, leading investigations and delivering scalable automation while advising stakeholders on security risks and best practices.

Qualifications

• Hands-on experience in security engineering or security operations.
• Proven incident response and investigations experience.
• Strong detection engineering across SIEM/IDS and telemetry sources.
• Experience with Splunk or comparable platforms.
• Knowledge of security architecture, vulnerability management and risk remediation.
• Proficiency in scripting, automation and system integration.
• Strong stakeholder communication, risk assessment and decision-making skills.
• Experience mentoring colleagues and developing security policies and guidance.
• Ability to manage vendors and continuously improve security controls.

Responsibilities

• Develop, tune and maintain SIEM and IDS detections and improve threat visibility.
• Lead complex security investigations, containment and remediation.
• Design, implement and support secure controls and guidance.
• Assess vulnerabilities and prioritise remediation across IT.
• Develop maintainable scripts and automated workflows.
• Advise on access controls, policies and standards.
• Mentor engineers and produce technical guidance and playbooks.
• Improve security awareness through metrics and communications.
• Manage security vendor relationships, evaluations and renewals.
• Apply threat intelligence and industry practices to enhance capabilities.

Skills

Security engineering

Incident response

SIEM

Splunk

Automation scripting

Vendor management

Mentoring

Stakeholder communication

Technical leadership

Tools

Splunk

IDS/IPS

Automation tools

Job description

The Security Engineer provides technical leadership across security engineering, monitoring, detection and incident response. The role focuses on strengthening security controls, managing vulnerabilities, leading complex investigations and delivering scalable automation while advising stakeholders on security risks and best practices.

Key Responsibilities

• Security Monitoring & Detection: Develop, tune and maintain SIEM and IDS detections, including Splunk use cases, to improve threat visibility and reduce false positives.
• Incident Response: Lead complex security investigations, coordinate incident containment and remediation, and drive post-incident improvements.
• Security Engineering & Architecture: Design, implement and support secure, resilient security controls and provide risk-based technical guidance.
• Vulnerability Management: Assess vulnerabilities, prioritise risks and implement practical remediation strategies across the IT environment.
• Automation & Scripting: Develop maintainable scripts, integrations and automated workflows to improve security operations and efficiency.
• Risk & Governance: Advise on access controls, security exceptions, architecture decisions, policies and technical standards.
• Leadership & Mentoring: Mentor engineers, provide specialist consultancy and develop technical documentation, guidance and playbooks.
• Security Awareness: Improve security awareness through metrics, feedback and targeted communications.
• Vendor Management: Manage security vendor relationships, product evaluations, due diligence and renewals.
• Continuous Improvement: Apply emerging threat intelligence, vulnerabilities and industry practices to enhance security capabilities.

Essential Skills and Experience

• Extensive hands‑on experience in security engineering or security operations.
• Proven expertise in complex incident response and security investigations.
• Strong detection engineering skills across SIEM, IDS and multiple telemetry sources.
• Experience with Splunk or comparable security monitoring platforms.
• Knowledge of security architecture, vulnerability management and risk remediation.
• Proficiency in scripting, automation and system integration.
• Strong stakeholder communication, risk assessment and decision‑making skills.
• Experience mentoring colleagues and developing security policies, procedures and technical guidance.
• Ability to manage vendors and continuously improve security controls.

Desirable Skills

• Experience across endpoint, network, identity, cloud, web and data protection security.
• Knowledge of threat hunting, threat intelligence and security frameworks.
• Relevant security certifications or equivalent practical expertise.

Key Objectives and Competencies

Performance objectives will be agreed through the review process and may include detection effectiveness, incident response outcomes, vulnerability remediation, automation efficiency, security control maturity, stakeholder engagement, mentoring, security awareness and vendor performance.

The successful candidate will demonstrate strong technical leadership, sound risk judgement, clear communication, continuous learning and a commitment to maintaining secure, resilient and supportable systems.