Senior Global SOC Security Operations Engineer

SHEIN; Wrocław; On-site; PLN 140,000 - 200,000; Full time

Job summary

SHEIN is seeking a SOC Security Operations Engineer in Wrocław to monitor, detect, investigate, and respond to security threats across IT systems. You will help build detection and response capabilities and support round-the-clock operations.

The role requires 5+ years in security operations, strong intrusion detection and log analysis skills, and proficiency in Python for automation. English or Chinese communication is valuable for cross-regional collaboration.

Qualifications

• Bachelor's degree or higher in cyber security, CS, or related field.
• At least five years hands-on security operations, SOC, or incident response.
• Solid understanding of attack techniques and defense strategies, with SOC skills.
• Experience with log/alert analysis across OS, networks, and cloud.
• Ability to perform alert analysis, attack-chain reconstruction, and remediation.
• Experience with web security vulnerabilities, app security testing, and API security.
• Proficient in Python for scripting security detections and automation.
• Strong English or Chinese reading/writing for cross-regional collaboration.

Responsibilities

• Own day-to-day security operations, providing 24/7 coverage.
• Develop and maintain detection rules, SOPs, and automation workflows.
• Monitor, triage, and respond to security alerts and incidents.
• Conduct intrusion analysis, forensics, and root-cause investigations.
• Collaborate with app security, data security, and IT teams.
• Perform pre-production security assessments of third-party components.
• Translate threat intelligence into actionable detection rules.

Skills

SOC operations

Incident response

Threat hunting

Log analysis

Malware analysis

Intrusion detection

Python scripting

Cross-regional collaboration

Education

Bachelor's degree in Cyber security or related field

Tools

Security tooling

Job description

SHEIN is seeking a SOC Security Operations Engineer in Wrocław to monitor, detect, investigate, and respond to security threats across IT systems. You will help build detection and response capabilities and support round-the-clock operations.

The role requires 5+ years in security operations, strong intrusion detection and log analysis skills, and proficiency in Python for automation. English or Chinese communication is valuable for cross-regional collaboration.