Senior Manager of Security Operations & Engineering

Jacobs; Kraków; Hybrid; PLN 360,000 - 540,000; Full time

Benefits offered by this job

Hybrid work model

Flexible hours

Lux Med medical care

Life insurance

Multisport card

Car/bike park sharing

Wczasy pod Gruszą

Global projects

Inclusive networks

Graduate Development Program

Language courses

Job summary

Jacobs in Kraków, Poland, is seeking a Senior Manager of Security Operations & Engineering to lead and modernize our SOC and security engineering programs. You will oversee 24/7 monitoring, incident response, and the SIEM/EDR/XDR stack while driving AI-enabled detection and automation to improve threat detection and analyst productivity.

The role requires extensive leadership experience, strong communication with executives, and a track record of delivering secure, compliant enterprise security

Qualifications

• 8+ years in Security Operations, Incident Response, or Cyber Defense, with leadership experience.
• Proven track record overseeing 24/7 SOC environments.
• Deep expertise with listed SIEM platforms and security tech stack.
• Strong knowledge of IR methodologies, MITRE ATT&CK, and ISO/NIST frameworks.
• Experience implementing automation to improve efficiency and response.

Responsibilities

• Lead and develop Security Operations and Security Engineering teams.
• Own SOC strategy, performance, and service delivery metrics.
• Oversee SIEM, SOAR, EDR/XDR, threat intel, and vulnerability mgmt.
• Drive detection engineering and log onboarding.
• Define SOC automation and AI strategy.
• Escalate major incidents and coordinate cross-functional responses.
• Monitor KPIs, SLAs, and operational performance.
• Manage vendor relationships and platform investments.
• Partner with Security Architecture, Risk, Compliance, Engineering, Data teams.
• Stay informed on cyber threats and AI advances.

Skills

Security Operations

Incident Response

Security Engineering

SIEM

SOAR

EDR/XDR

Threat Intelligence

MITRE ATT&CK

NIST 27001

AI & Automation

Leadership

Vendor Management

Cloud Security

Communication

Education

Bachelor's degree in Cybersecurity, Computer Science, or related field

Tools

Splunk

Microsoft Sentinel

QRadar

Google Chronicle

Exabeam

SOAR platforms

EDR/XDR tools

Job description

At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission-critical outcomes, operational advancement, scientific discovery and cutting-edge manufacturing, turning abstract ideas into realities that transform the world for good.

Your impact

At Jacobs, we are dedicated to pushing the boundaries of innovation and delivering exceptional solutions to our clients. As a leader in our industry, we recognize the critical importance of synergies between cybersecurity, infrastructure, data, applications, and cloud technologies in today's digital landscape.

As Senior Manager of Security Operations & Engineering, you will own the overall performance of the Jacobs Security Operations function - providing technical and managerial leadership over the SOC Manager (who runs 24x7 monitoring, detection, and incident response through a team of cybersecurity analysts) and the Tier 3 Operations Engineering team (who own the SIEM platform and the underlying security technology stack). This role bridges operational security leadership with deep technical engineering oversight and is charged with modernizing SOC capabilities through the strategic integration of AI and automation, while ensuring the fundamentals of SOC operations (monitoring, triage, incident response, documentation, and metrics) remain strong day to day.

The ideal candidate is not just an operator of security tools but a builder of next-generation SOC capability - someone who can evaluate, pilot, and operationalize AI-driven detection, triage, and response capabilities while maintaining the rigor, compliance, and reliability required of a mission-critical security function.

Responsibilities

• Lead and develop Security Operations and Security Engineering teams, ensuring effective 24/7 monitoring, incident response, escalation management, and continuous service improvement.
• Own the strategy, performance, and operational excellence of the organization's SOC, including staffing, talent development, process optimization, and service delivery metrics.
• Oversee the security technology ecosystem, including SIEM, SOAR, EDR/XDR, threat intelligence, vulnerability management, and related monitoring platforms.
• Drive detection engineering initiatives by improving detection coverage, log onboarding, content management, threat hunting capabilities, and security monitoring effectiveness.
• Define and execute the SOC automation and AI strategy, leveraging emerging technologies to improve threat detection, investigation, response, and analyst productivity.
• Serve as an escalation point for major security incidents, coordinating response efforts across security, engineering, IT, and business stakeholders.
• Establish and monitor operational KPIs, SLAs, and performance metrics to continually improve security operations and incident response outcomes.
• Manage vendor relationships, technology roadmaps, budgets, and platform investments to ensure scalable and cost-effective security operations.
• Partner closely with Security Architecture, Risk, Compliance, Engineering, and Data teams to maintain strong security controls, governance, and regulatory readiness.
• Stay informed on emerging cyber threats, industry trends, and AI advancements, driving innovation across security operations.

Here’s what you’ll need

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• 8+ years of experience in Security Operations, Incident Response, Security Engineering, or Cyber Defense, including leadership experience managing operational and/or engineering teams.
• Proven experience leading 24/7 SOC environments and overseeing both security analysts and engineering-focused teams.
• Deep expertise with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, Google Chronicle, or Exabeam, including administration, architecture, and detection content development.
• Strong knowledge of security operations technologies including SOAR, EDR/XDR, NDR, IDS/IPS, threat intelligence platforms, vulnerability management solutions, and cloud security tooling.
• Solid understanding of incident response methodologies, threat hunting, detection engineering, MITRE ATT&CK, and security frameworks such as NIST and ISO 27001.
• Experience implementing security automation and orchestration initiatives to improve operational efficiency and response effectiveness.
• Experience defining technology roadmaps, managing vendors, budgets, and enterprise security platforms.
• Excellent stakeholder management and communication skills, with the ability to translate technical concepts into business impact and executive-level reporting.
• Strong leadership capabilities with experience mentoring teams, driving organizational change, and fostering a culture of continuous improvement.
• Experience working in complex, global, or highly regulated enterprise environments.

Nice to have

• Experience implementing AI and machine learning capabilities within security operations, including anomaly detection, AI-assisted investigations, automated threat triage, or intelligent response workflows.
• Familiarity with generative AI and LLM-based security use cases, including analyst copilots, investigation summarization, natural-language querying, and automated reporting.
• Understanding of AI governance, model risk, explainability, data privacy, and security-specific AI threats such as prompt injection or data poisoning.
• Relevant certifications such as CISSP, CISM, GIAC, GSOC, Splunk, Microsoft Sentinel (SC-200), cloud security certifications (AWS/Azure/GCP), or project/program management certifications (PMP, Agile/Scrum).

We offer

• Rewarding employment - full-time employment with a salary that matches your qualifications
• Hybrid work model - enjoy the flexibility of working mainly from home
• Flexible hours - start your day anytime between 730 and 1000 AM
• Comprehensive benefits, including Lux Med medical care, psychological support, life insurance, My Benefit cafeteria system, Multisport card co-financing, and a car/bike park sharing system
• Co-financed holidays - enjoy "Wczasy pod Gruszą" for a well-deserved break
• Global projects - engage in exciting international projects
• Inclusive networks - join our diverse employee networks like Women's Network, OneWorld, PRISM, Careers Network, Green Team, SpeakUp, Collectively, and more
• Continuous learning - participate in our Graduate Development Program, Learners’ Community, and self-learning platforms
• Language courses - enhance your skills with courses in English, German, and Polish

We know that if we are inclusive, we’re more connected, and we’re more creative. We accept people for who they are. Find out more about life at Jacobs.

As a Disability Confident employer, we will interview all disabled applicants who meet the criteria for a vacancy.

If you require further support or reasonable adjustments with regards to the recruitment process (for example, you require the application form in a different format), please contact the team [e-mail]

Your application experience is important to us, and we’re keen to adapt to make every interaction even better. If you require further support or reasonable adjustments with regards to the recruitment process (for example, you require the application form in a different format), please contact the team via Careers Support.