Security Engineer — Hybrid: Incident Response & Vulnerability

Red Global; Warszawa; Hybrid; PLN 140,000 - 220,000; Full time

Benefits offered by this job

Hybrid work model (3 days on-site)

Stable employment contract

Competitive salary

Job summary

Red Global is seeking an experienced IT Security Engineer to reinforce our security posture across on-prem and cloud environments. The role emphasizes hands-on technical security controls, incident response, and vulnerability management in a hybrid work setting with on-site days in Warsaw.

The successful candidate will have strong experience in SIEM/EDR, IAM, endpoint and cloud security, and possess a practical track record in enterprise security operations.

Qualifications

• Extensive enterprise IT security experience is required.
• Experience implementing and maintaining security controls across servers, networks, cloud, and endpoints.
• Knowledge of risk management, audit evidence collection, and major security standards is preferred.

Responsibilities

• Implement, maintain, and enhance security controls across servers, networks, cloud services, and endpoints.
• Monitor security events, analyze alerts, and coordinate rapid response actions.
• Lead investigations for security incidents, perform RCA, and implement preventive measures.
• Manage end-to-end vulnerability management: identify, assess, prioritize, remediate, and report.
• Enforce system hardening, secure baselines, and patch compliance across on-prem and cloud.
• Support security assessments, audits, and risk-reduction initiatives.
• Collaborate with IT architects, platform engineers, and vendors to ensure security-by-design.
• Automate monitoring, alert handling, and incident response processes.

Skills

IT security engineering

SecOps

Endpoint security

IAM

Cloud security

Vulnerability management

SIEM/EDR

Log analysis

English fluency

Tools

SIEM tooling

EDR tooling

Job description

Red Global is seeking an experienced IT Security Engineer to reinforce our security posture across on-prem and cloud environments. The role emphasizes hands-on technical security controls, incident response, and vulnerability management in a hybrid work setting with on-site days in Warsaw.

The successful candidate will have strong experience in SIEM/EDR, IAM, endpoint and cloud security, and possess a practical track record in enterprise security operations.