Senior Cybersecurity XDR Architect | Hybrid/Remote

EY; Wrocław; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid/Remote options

EY Badges

Career Counselor

Private healthcare

Job summary

EY Poland is seeking an experienced Cybersecurity Engineer to design and implement enterprise XDR architectures and lead deployments of CrowdStrike Falcon XDR and Microsoft Defender XDR. You will integrate endpoints, cloud workloads, identities, and security tools, while developing onboarding roadmaps for large environments.

You will fine‑tune detection logic, security policies, and response workflows, helping clients mature their security operations.

Qualifications

• 4+ years of experience in Cybersecurity Engineering, Security Operations, Detection Engineering, or Security Consulting.
• Hands-on with CrowdStrike Falcon or Microsoft Defender XDR.
• Strong understanding of cybersecurity operations and threat detection principles.
• Experience with XDR, EDR, SIEM, or SOC technologies.
• Knowledge of incident detection and response processes.
• Understanding of network security concepts and common attack techniques.
• Experience integrating security technologies and APIs.
• Knowledge of Windows, Linux, and cloud environments.
• Ability to analyze security events and design detection logic.
• Strong communication and stakeholder management skills.
• Very good command of English and Polish (B2/C1).

Responsibilities

• Design and implement enterprise XDR architectures.
• Lead deployments of CrowdStrike Falcon XDR and Microsoft Defender XDR.
• Integrate endpoints, cloud workloads, identities, email security, and third‑party tools into XDR ecosystems.
• Develop onboarding strategies and deployment roadmaps for enterprise environments.
• Fine-tune detection logic, correlation rules, security policies, and response workflows.
• Support clients in improving XDR maturity and transforming security operations.
• Improve detection coverage and threat visibility across complex IT environments.
• Design use cases, detection content, and security response automation.
• Optimize and operationalize security monitoring capabilities.
• Prepare technical documentation and architecture diagrams.
• Advise clients on security best practices and platform optimization.
• Collaborate with SOC teams to enhance threat hunting, incident response, and investigation processes.
• Design integrations using APIs and automation frameworks.
• Support platform upgrades, migrations, and cybersecurity transformation initiatives.

Skills

XDR design

Security Operations

Threat detection

Incident analysis

Threat hunting

Stakeholder management

English & Polish

Tools

CrowdStrike Falcon

Microsoft Defender XDR

Job description

EY Poland is seeking an experienced Cybersecurity Engineer to design and implement enterprise XDR architectures and lead deployments of CrowdStrike Falcon XDR and Microsoft Defender XDR. You will integrate endpoints, cloud workloads, identities, and security tools, while developing onboarding roadmaps for large environments.

You will fine‑tune detection logic, security policies, and response workflows, helping clients mature their security operations.