Senior Detection & Response Engineer - Hybrid SOC

GamblingCareers.com; Kraków; Hybrid; PLN 120,000 - 180,000; Full time

Job summary

Aristocrat is seeking a Senior Detection & Response Engineer to strengthen our Security Operations team in Kraków. The role focuses on detection engineering, security automation, and improving operational processes within a hybrid SOC model.

You will develop detections across SIEM/EDR, map techniques to MITRE ATT&CK, and collaborate with MSSP and IT teams to improve detection and response capabilities. The three-day-a-week on-site requirement emphasizes a strong Kraków presence.

Qualifications

• Experience improving threat detection, security operations, or incident response in production
• Hands-on detection engineering experience
• Ability to create, tune, and maintain detections, searches, analytics, or threat hunting content

Responsibilities

• Develop, tune, and maintain detections, correlation rules, analytics, searches, and threat content across SIEM/EDR/identity/email/SaaS
• Identify detection gaps and develop new detection use cases
• Improve detection quality and alert fidelity
• Map detections to attacker techniques and MITRE ATT&CK
• Design, build, and maintain security automation workflows using Tines and other approved platforms
• Build integrations using APIs and workflow automation
• Automate repetitive tasks to improve investigation/response efficiency
• Collaborate with threat analysts, MSSP, and incident responders to improve operations
• Contribute to operational improvements that accelerate detection and response

Skills

Threat detection improvement

Detection engineering

Automation workflows

Security operations experience

Collaboration across teams

Tools

Tines

SOAR platforms

APIs

Job description

Aristocrat is seeking a Senior Detection & Response Engineer to strengthen our Security Operations team in Kraków. The role focuses on detection engineering, security automation, and improving operational processes within a hybrid SOC model.

You will develop detections across SIEM/EDR, map techniques to MITRE ATT&CK, and collaborate with MSSP and IT teams to improve detection and response capabilities. The three-day-a-week on-site requirement emphasizes a strong Kraków presence.