Security Operations Specialist

Keepit; Kraków; On-site; PLN 140,000 - 210,000; Full time

Benefits offered by this job

Official employment – Umowa o pracę

4 vacation days extra per year

3 days sick leave per year

Health and Life Insurance

Employee Capital Plan (PPK)

Multisport card

Training and meetups covered

English-speaking club

Polish language classes

Internet and glasses reimbursement

Cosy Krakow city centre office

Job summary

Keepit is seeking a Security Operations Specialist to ensure rapid incident response and to develop new detection logic for our SIEM. You will collaborate with engineering, product, and operations teams to promote strong security culture and documentation of detection logic and playbooks.

The role covers incident detection and response, SIEM engineering, Linux hardening, network analysis, and risk management, with bonuses for automation and EDR/XDR expertise.

Qualifications

• IT security background (education or experience).
• 2+ years experience in a Security Operations Center.
• Strong interest in emerging threats and technologies in cybersecurity.
• Experience with incident response and SIEM solutions.
• Experience developing detection logic.
• Experience working in Linux environments.
• Speaks and writes English.

Responsibilities

• Incident detection, analysis, and response.
• SIEM detection engineering and alert tuning.
• Linux system hardening and security monitoring.
• Network traffic analysis and security monitoring.
• Security documentation, playbooks, and procedures.
• Threat modelling.
• Risk management.

Skills

SOC experience

Incident response

SIEM

Linux

Threat modelling

English proficiency

Tools

EDR/XDR

CI/CD tools

Job description

About The Role

In the role of a Security Operations Specialist, your primary responsibility is to ensure a prompt response to incidents. In addition, you will be responsible for developing new detection logic for our SIEM and, more broadly, helping promote a strong security culture across the company. You will work closely with engineering, product, operations, and internal penetrations teams.

In the role of a Security Operations Specialist, your primary responsibility is to ensure a prompt response to incidents. In addition, you will be responsible for developing new detection logic for our SIEM and, more broadly, helping promote a strong security culture across the company. You will work closely with engineering, product, operations, and internal penetrations teams. All specialists contribute to the development of detection logic for our systems through a internally developed, structured workflow aligned with standard procedures and a detection-as-code framework. Clear and accurate documentation of detection logic and playbooks is a critical part of our work. Applicants are therefore expected to have well-defined skills in documenting their work.

Key Responsibilities:

• Incident detection, analysis, and response
• SIEM detection engineering and alert tuning
• Linux system hardening and security monitoring
• Network traffic analysis and security monitoring
• Security documentation, playbooks, and procedures
• Threat modelling
• Risk management

Bonus:

• Automation and scripting (CI/CD workflows)
• Endpoint security (EDR/XDR)

About You

Must-haves:

• IT security background (security related education or experience)
• 2+ years experience working in a Security Operations Cetner
• Has a strong interest in emerging threats and technologies within cybersecurity.
• Experience working with incident response and SIEM solutions
• Experience developing detection logic
• Experience working in Linux environments
• Speaks and writes English

Finally, and most importantly, you need to be curious and willing to adapt and learn about new and/or proprietary systems to truly succeed in this role.

About Us

Our platform provides customers with an immutable, historical archive of their data in systems such as Microsoft 365, Google Workspace, Salesforce, Entra ID, Dynamics 365, and Zendesk. We protect our customers against everything, from ransomware to simple accidents. We pride ourselves on backing up hundreds of petabytes of data in a performant, reliable, and predictable way.

As we collaborate across locations, English is our primary language. Please submit your CV in English to support the review process.

We offer:

• Official employment – Umowa o pracę contract
• 4 additional working days of vacation leave per full calendar year
• 3 days of internal sick leave without a doctor`s note
• Health and Life Insurance
• Employee Capital Plan (PPK)
• Multisport card compensation
• Coverage of professional training sessions, meetups, etc.
• English-speaking club with native speakers
• Polish language classes
• Internet and Glasses reimbursement
• Cosy office in Krakow city centre (Długa, 72) with beverages, fruit, and cookies
• Winter and summer parties, events, team-buildings

We kindly ask you not to provide us with any sensitive categories of personal data when applying for a job with us. When applying for the vacancy, Keepit will process your personal data, and therefore we recommend that you also read our privacy policy, which describes our processing of personal data and your rights as a data subject. If you notice any misconduct or irregularities that fall within the scope of our whistleblowing procedure, please click here to report them.