Security Operations & Detection Engineer

Keepit; Kraków; On-site; PLN 140,000 - 210,000; Full time

Benefits offered by this job

Official employment – Umowa o pracę

4 vacation days extra per year

3 days sick leave per year

Health and Life Insurance

Employee Capital Plan (PPK)

Multisport card

Training and meetups covered

English-speaking club

Polish language classes

Internet and glasses reimbursement

Cosy Krakow city centre office

Job summary

Keepit is seeking a Security Operations Specialist to ensure rapid incident response and to develop new detection logic for our SIEM. You will collaborate with engineering, product, and operations teams to promote strong security culture and documentation of detection logic and playbooks.

The role covers incident detection and response, SIEM engineering, Linux hardening, network analysis, and risk management, with bonuses for automation and EDR/XDR expertise.

Qualifications

• IT security background (education or experience).
• 2+ years experience in a Security Operations Center.
• Strong interest in emerging threats and technologies in cybersecurity.
• Experience with incident response and SIEM solutions.
• Experience developing detection logic.
• Experience working in Linux environments.
• Speaks and writes English.

Responsibilities

• Incident detection, analysis, and response.
• SIEM detection engineering and alert tuning.
• Linux system hardening and security monitoring.
• Network traffic analysis and security monitoring.
• Security documentation, playbooks, and procedures.
• Threat modelling.
• Risk management.

Skills

SOC experience

Incident response

SIEM

Linux

Threat modelling

English proficiency

Tools

EDR/XDR

CI/CD tools

Job description

Keepit is seeking a Security Operations Specialist to ensure rapid incident response and to develop new detection logic for our SIEM. You will collaborate with engineering, product, and operations teams to promote strong security culture and documentation of detection logic and playbooks.

The role covers incident detection and response, SIEM engineering, Linux hardening, network analysis, and risk management, with bonuses for automation and EDR/XDR expertise.