Senior Detection & Response Engineer

Aristocrat Gaming; Kraków; Hybrid; PLN 260,000 - 360,000; Full time

Benefits offered by this job

Hybrid work model

Robust benefits package

Global career opportunities

Job summary

Aristocrat Gaming is seeking a Senior Detection & Response Engineer to join our Security Operations team in Kraków. This hybrid role requires three days on-site and involves enhancing detection and response through engineering, automation, and process improvements.

You will collaborate with Security Operations, Security Engineering, MSSP partners, and IT teams to strengthen threat detection, investigate incidents, and drive automation initiatives that improve analyst efficiency.

Qualifications

• Experience improving threat detection, security operations, incident response, or related cybersecurity capabilities in a production environment.
• Hands-on Detection Engineering experience.
• Strong ability to create, tune, and maintain detections, searches, analytics, or threat hunting content using security-focused query languages.
• Experience building and maintaining automated security workflows using Tines, SOAR platforms, or similar platforms.
• Experience designing, building, or maintaining automation workflows rather than solely operating within automated environments.
• Experience integrating systems via APIs, automation platforms, or platform-native capabilities.
• Solid understanding of threat detection, security investigations, and incident response concepts in a Tier 3 SOC.
• Ability to translate operational challenges into scalable detections, automations, and workflow improvements.
• Strong collaboration skills across Security Operations, Engineering, IT, and MSSP environments.

Responsibilities

• Develop, tune, and maintain detections, correlation rules, analytics, searches, and threat detection content across SIEM, EDR, identity, email, SaaS, and security monitoring platforms.
• Identify detection gaps and develop new detection use cases to improve security coverage.
• Improve detection quality, reduce false positives, and enhance alert fidelity.
• Map detections and use cases to attacker techniques and security frameworks such as MITRE ATT&CK.
• Design, build, and maintain security automation workflows using Tines and other approved platforms.
• Build integrations using APIs, workflow automation tools, and platform-native capabilities.
• Automate repetitive operational tasks to improve investigation and response efficiency.
• Continuously identify opportunities to streamline security processes through automation.
• Support security investigations and response activities through detection engineering, automation, and technical analysis.
• Collaborate with threat analysts, MSSP partners, and incident responders to improve operational effectiveness.
• Contribute to operational improvements that accelerate detection, investigation, and response activities.
• Assist in measuring and improving the effectiveness of detections, automations, and operational workflows.

Skills

Detection Engineering

Security Automation

Incident Response

Threat Hunting

APIs & Integrations

SOAR / Automation Platforms

MITRE ATT&CK

Collaboration

Security Monitoring

Tools

Tines

SIEM

EDR

Job description

Aristocrat is seeking a Senior Detection & Response Engineer to join our Security Operations team.

In this role, you will help strengthen Aristocrat’s detection and response capabilities through detection engineering, security automation, and operational process improvement.

You will work within a hybrid Security Operations Center (SOC) model. You will collaborate closely with teams responsible for Security Operations, the Security Engineering group, MSSP partners, and other technical teams. Together, you will improve our ability to detect, investigate, and respond to security threats.

Please note: this role follows a hybrid working model and requires onsite attendance at our Kraków office three days per week.

What You’ll Do

Detection Engineering

• Develop, tune, and maintain detections, correlation rules, analytics, searches, and threat detection content across SIEM, EDR, identity, email, SaaS, and security monitoring platforms.
• Identify detection gaps and develop new detection use cases to improve security coverage.
• Improve detection quality, reduce false positives, and enhance alert fidelity.
• Map detections and use cases to attacker techniques and security frameworks such as MITRE ATT&CK.

Security Automation

• Design, build, and maintain security automation workflows using Tines and other approved automation platforms.
• Build integrations using APIs, workflow automation tools, and platform-native capabilities.
• Automate repetitive operational tasks to improve investigation and response efficiency.
• Continuously identify opportunities to streamline security processes through automation.

Security Operations & Incident Response

• Support security investigations and response activities through detection engineering, automation, and technical analysis.
• Collaborate with threat analysts, MSSP partners, and incident responders to improve operational effectiveness.
• Contribute to operational improvements that accelerate detection, investigation, and response activities.
• Assist in measuring and improving the effectiveness of detections, automations, and operational workflows.

Collaboration & Innovation

• Partner with Security Operations, Security Engineering, IT, and Product Security teams to improve detection and response capabilities.
• Evaluate and adopt emerging technologies and capabilities that improve analyst efficiency and operational effectiveness.
• Contribute to the continual evolution of Aristocrat’s Security Operations program.

What We’re Looking For

• Experience improving threat detection, security operations, incident response, or related cybersecurity capabilities in a production environment.

• Hands-on Detection Engineering experience

• Strong ability to create, tune, andmaintaindetections, searches, analytics, or threat hunting content using security-focused query languages.

• Experience building andmaintainingsecurity automations using Tines, SOAR platforms, or similar workflow automation technologies.

• Experience designing, building, ormaintainingautomation workflows rather than solelyoperatingwithin automated environments.

• Experience integrating systems via APIs, automation platforms, or platform-native capabilities.

• Solid understanding of threat detection, security investigations, and incident response concepts expected within a Tier 3 Security Operations environment.

• Ability to translate operational challenges into scalable detections, automations, and workflow improvements.

• Strong collaboration skills and experience working across Security Operations, Engineering, IT, and MSSP environments.

What Success Looks Like

• Owning and improving detection content and security analytics

• Increasing detection coverage across the environment.

• Reducing operational inefficiencies through automation.

• Supporting Security Operations teams with effective detections and workflows.

• Driving measurable improvements in detection and response effectiveness.

• Contributing as a senior technical member of the Security Operations function.

Why Aristocrat?

Aristocrat is a world leader in gaming content and technology, and a top-tier publisher of free-to-play mobile games. We deliver great performance for our B2B customers and bring joy to the lives of the millions of people who love to play our casino and mobile games. And while we focus on fun, we never forget our responsibilities. We strive to lead the way in responsible gameplay, and to lift the bar in company governance, employee wellbeing and sustainability. We’re a diverse business united by shared values and an inspiring mission to bring joy to life through the power of play.

We aim to create an environment where individual differences are valued, and all employees have the opportunity to realize their potential. We welcome and encourage applications from all people regardless of age, gender, race, ethnicity, cultural background, disability status or LGBTQ+ identity. EEO M/F/D/V

• World Leader in Gaming Entertainment

• Robust benefits package

• Global career opportunities

Our Values

• All about the Player

• Talent Unleashed

• Collective Brilliance

• Good Business Good Citizen

Travel Expectations

None

Additional Information

At this time, we are unable to sponsor work visas for this position. Candidates must be authorized to work in the job posting location for this position on a full-time basis without the need for current or future visa sponsorship.