Senior CSIRT Engineer — AI-Driven Incident Response

Allegro Ltd.; Poznań; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

MacBook Pro

Fringe benefits plan

English classes

Training budget

Volunteer day off

Social events

Job summary

Allegro Ltd. is seeking a Senior Security Engineer to own incident response in a high-scale cloud/on-prem environment. You will lead threat hunting, SIEM/Ticketing, SOAR automation, and EDR/XDR tooling to protect Allegro’s massive marketplace.

You will work in a hybrid role with teams in Warsaw, Poznań and Toruń, contributing to security engineering, incident response and AI-assisted defense strategies.

Qualifications

• Experience in SOC, CERT or CSIRT teams.
• Experience using SOAR, EDR/XDR and SIEM systems.
• Knowledge of current offensive and defensive security threats.
• Hands‑on with large-scale IT infrastructure and DevOps culture.

Responsibilities

• Monitor and triage security incidents 24/7 on-call rotation.
• Investigate and respond to endpoint and server threats.
• Analyze and mitigate phishing campaigns targeting Allegro brands.
• Detect and respond to network-layer attacks (DDoS, password spraying, bot scanning).
• Perform digital forensics and log correlation across multiple data sources.
• Enrich and correlate IOCs using threat intelligence platforms.
• Investigate identity-related risks and anomalous user behavior.
• Document findings with root cause analysis and remediation recommendations.
• Coordinate remediation actions with IT and business teams.
• Continuously improve detection capabilities and update threat intel.
• Collaborate with brand protection and external partners.

Skills

SOC experience

SOAR

EDR/XDR

SIEM

Threat intelligence

Incident response

Automation & AI

DevOps culture

Linux

Windows

MacOS

Tools

SOAR

EDR/XDR

SIEM

Job description

Allegro Ltd. is seeking a Senior Security Engineer to own incident response in a high-scale cloud/on-prem environment. You will lead threat hunting, SIEM/Ticketing, SOAR automation, and EDR/XDR tooling to protect Allegro’s massive marketplace.

You will work in a hybrid role with teams in Warsaw, Poznań and Toruń, contributing to security engineering, incident response and AI-assisted defense strategies.