Security Operations Lead - 24x7 Incident Response

Usermind; Kraków; Hybrid; PLN 210,000 - 360,000; Full time

Benefits offered by this job

Annual Leave 20–26 days

Private Medical Insurance

Commuter Assistance

Savings Plan

Engineer Development program

Job summary

Qualtrics Kraków is seeking a Senior Lead of CDU Operations to helm the 24x7 Security Operations Center, detecting, triaging, and responding to threats across our global environment. You will mentor analysts, own metrics, and drive incident response playbooks.

This hands-on leadership role blends strategy with practical coaching, shaping security posture and partnering with Threat Intelligence, Detection Engineering, IT, Legal, and Product teams.

Qualifications

• 7+ years in security operations or incident response.
• 4+ years in people management or team leadership.
• Experience running 24x7 CDU function (in-house, hybrid, or MSSP).
• Strong grounding in SIEM/SOAR, EDR/XDR, and cloud security monitoring.
• Experience coordinating with legal, communications, and exec stakeholders.

Responsibilities

• Lead and manage the Security Operations Center (24x7).
• Hire, coach, and develop CDU analysts and incident responders.
• Mentor through 1-on-1 coaching and drills; build skill matrices.
• Own CDU metrics (MTTD, MTTR, alert volume) and report to leadership.
• Drive automation and playbooks with detection engineering and threat intel teams.
• Coordinate with cross-functional teams during high-severity incidents.

Skills

Cybersecurity operations

SIEM/SOAR

EDR/XDR

Cloud security monitoring

Incident response

Tools

Crowdstrike

Daylight AI Triage

Wiz

Splunk

Arnica

AWS

Job description

Qualtrics Kraków is seeking a Senior Lead of CDU Operations to helm the 24x7 Security Operations Center, detecting, triaging, and responding to threats across our global environment. You will mentor analysts, own metrics, and drive incident response playbooks.

This hands-on leadership role blends strategy with practical coaching, shaping security posture and partnering with Threat Intelligence, Detection Engineering, IT, Legal, and Product teams.