Security Engineer (m/f/d) (Freelance/Service Agreement)

FlixBus; Wrocław; On-site; PLN 120,000 - 180,000; Full time

Job summary

FlixBus seeks an experienced Security Engineer on a project basis to strengthen client-side security and incident response tooling. You will collaborate with security, infrastructure, and software teams to automate workflows and improve overall security posture.

Key focus areas include email security, phishing mitigation, endpoint protection, and monitoring with Splunk/Elasticsearch/Datadog, while delivering clear runbooks and automation in Python.

Qualifications

• Experience with client security applications including email security and endpoint protection.
• Hands-on incident response and ticket handling experience.
• Strong Python automation skills with maintainable code.
• Familiarity with monitoring/SIEM tools (Splunk/Elasticsearch/Datadog).
• Excellent collaboration and communication with technical and business stakeholders.
• Professional proficiency in English (written and spoken).

Responsibilities

• Set up and configure client security tools such as email security and access management with internal team.
• Automate incident response processes and security workflows using Python to reduce manual work.
• Support incident response for client-side security events and phishing incidents across the org.
• Review existing security measures and provide concrete recommendations for detections and runbooks.

Skills

Email security

Phishing mitigation

Endpoint protection

Incident response

Service desk handling

Collaboration

English proficiency

Tools

Python

Splunk

Elasticsearch

Datadog

Job description

We are looking for an experienced Security Engineer (m/f/d) to support Flix on a project basis through a service agreement collaboration. The consultant will provide expertise in client-side security, incident response automation, and security tooling across Flix's technology environment. The collaboration will involve working with security engineers, infrastructure and software engineers, and business stakeholders to improve Flix's overall security posture and reduce manual security operations.

Scope of Services

• Set up and configure client security tools related to email security, access management, and asset protection in collaboration with the internal security team
• Automate incident response processes and repetitive security workflows using Python — including phishing triage, secret rotation, and M365/Graph automation — to reduce manual effort and increase team capacity
• Support incident response activities related to client-side security events such as account compromise and phishing incidents, collaborating with stakeholders across the organisation
• Review and assess existing security measures and contribute concrete recommendations for improving detections, response runbooks, and overall security services at Flix

About You

• Proven experience with client security applications, including email security, phishing mitigation, and endpoint protection
• Hands-on experience with incident response and service desk ticket handling
• Solid programming skills in Python with a focus on clean, maintainable automation code
• Experience with monitoring or SIEM tools such as Splunk, ElasticSearch, or Datadog
• Strong collaboration and communication skills when working with both technical and business stakeholders
• Professional proficiency in English (written and spoken)
• Cooperation based on a service agreement with independent delivery of agreed services and invoicing

At Flix, we are committed to fostering diversity and inclusion. To support this initiative, we invite all applicants to complete our demographic questions on voluntary basis. Your responses will be processed as anonymized data and not linked to your profile, and thus assessed for statistical purposes and internal research.

If you prefer not to provide this information, simply click on "I do not wish to answer." Be assured that neither the decision not to participate nor your answers will have an impact on your application, and your answers will remain anonymous and unidentifiable to you individually. The decision on your application will be made independently from your participation and the information you provide.

By submitting this application, I confirm that I have read and accept the Privacy Policy .