Senior Security Engineer

Netwrix Corporation; Kraków; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Career Growth

Team Collaboration

Company Town Halls

Job summary

Netwrix Corporation in Kraków is seeking a Senior Security Analyst/Engineer to detect, investigate, and respond to threats across our Microsoft, Netwrix, and SaaS environments. You will triage alerts, lead investigations end-to-end, and mature security tooling and processes.

This hybrid role sits in Kraków with close collaboration across IT and DevOps teams. Ideal candidates have 5+ years in security operations, hands-on Defender/Sentinel/Entra ID experience, and strong scripting (PowerShell).

Qualifications

• 5+ years of experience in security operations, incident response, or security engineering.
• Hands-on with Defender for Endpoint, Sentinel, Defender for Cloud, and Entra ID.
• Hands-on with Tenable for vulnerability management and remediation.
• Experience triaging security events in a SOC or managed detection environment.
• Knowledge of SIEM, EDR, and SOAR platforms.
• Experience with Okta/Entra ID and SSO, MFA, + conditional access.
• Strong phishing and email threat analysis skills.
• Familiarity with SOC 2 or similar frameworks.
• Proficiency in PowerShell and at least one scripting language.
• Understanding of MITRE ATT&CK and NIST 800-61 lifecycle.
• Professional proficiency in English, written and spoken.

Responsibilities

• Monitor, triage, and investigate security alerts and incidents using Defender, Sentinel, and Netwrix tools.
• Lead investigations from detection through remediation and document findings.
• Manage vulnerability remediation with Tenable, prioritizing risk and SLAs.
• Investigate phishing and email threats, including header/url/attachment triage.
• Support security posture of Salesforce and other SaaS with access reviews and audits.
• Manage identity and access via Okta/EntraID, including SSO and MFA tasks.
• Monitor Azure security tooling for Entra ID and Defender for Cloud.
• Oversee endpoint and network monitoring to ensure timely threat detection.
• Collaborate with IT and cross-functional teams during incidents and remediation.
• Support SOC 2 evidence collection, controls monitoring, and audits.
• Deliver security awareness training and phishing simulations.
• Maintain and improve incident response runbooks and playbooks.

Skills

Defender for Endpoint

Microsoft Sentinel

Defender for Cloud

Entra ID

Tenable

SOAR

SIEM

MFA

SSO

PowerShell

MITRE ATT&CK

Tools

Okta/EntraID

Tenable tools

Job description

At Netwrix, our mission is to revolutionize data security by placing identity at the core - providing unparalleled visibility and control. Engineered and supported by over 900 highly talented, motivated employees and hundreds of trusted partners in nearly every geography, Netwrix solutions are relied upon daily by security professionals across more than 13,500 organizations in over 100 countries around the world.

Over the past two decades, Netwrix has expanded its market presence through innovation, organic growth, and strategic acquisitions, and are proud to be backed by renowned private equity firms, TA Associates and Centerbridge Partners. Netwrix maintains a global presence, fostering a remote-first work environment while encouraging and facilitating frequent face-to-face interaction with colleagues, customers, and partners.

Position Overview

The Senior Security Analyst / Engineer will be a key member of our Information Security team, responsible for detecting, investigating, and responding to security threats across our Microsoft, Netwrix, and SaaS environments. This role combines hands-on SOC work with engineering judgment: you will triage alerts, lead investigations from detection through remediation, and help mature the processes and tooling that keep Netwrix and our customers secure. You will work closely with IT, DevOps, and cross-functional teams, and you will help shape how our security operations evolve.

This is a hybrid role from our office in Kraków.

Responsibilities:

• Monitor, triage, and investigate security alerts and incidents using Microsoft Defender, Sentinel, and Netwrix tools, escalating and documenting findings per SOC procedures.
• Conduct investigations using SOAR and threat intelligence tooling, correlating alerts across data sources to determine scope and root cause.
• Manage vulnerability remediation using Tenable, prioritizing findings by risk, tracking remediation SLAs with system owners, and reporting exposure trends to leadership.
• Investigate and remediate phishing reports and other email and social engineering threats, including header analysis, URL and attachment triage, and user communication.
• Support and monitor corporate resources and applications (such as Salesforce) from a security perspective, including access reviews, anomalous activity detection, permission and role audits, and data exposure risk.
• Manage and monitor identity and access through Okta/EntraID, including SSO, MFA, conditional access, anomalous login detection, and access reviews.
• Monitor Azure security tooling and configurations, including Entra ID, Microsoft Defender for Cloud, and logging and alerting.
• Oversee endpoint and network monitoring tools to ensure coverage and timely detection of threats.
• Collaborate with IT and cross-functional teams during security incidents, from detection through containment and remediation.
• Support SOC 2 compliance efforts, including evidence collection, control monitoring, audit preparation, and remediation tracking.
• Develop and deliver security awareness training to employees, including phishing simulations, best practices, and policy education.
• Maintain and improve incident response runbooks, playbooks, and documentation.

Qualifications:

• 5+ years of experience in security operations, incident response, or security engineering.
• Hands-on experience with Microsoft Defender for Endpoint, Microsoft Sentinel, Defender for Cloud, and Microsoft Entra ID.
• Hands-on experience with Tenable tools for vulnerability management and working with technical teams on remediation steps.
• Experience triaging and investigating security events in a SOC or managed detection environment.
• Working knowledge of SIEM, EDR, and SOAR platforms.
• Experience with Okta/Entra ID or another enterprise identity provider, including SSO, MFA, and conditional access.
• Strong phishing and email threat analysis skills.
• Familiarity with SOC 2 or similar compliance frameworks.
• Proficiency in KQL and at least one scripting language (PowerShell preferred).
• Understanding of the MITRE ATT&CK framework and the incident response lifecycle (NIST SP 800-61 or equivalent).
• Professional proficiency in English, written and spoken.

Nice to Have:

• Hands-on experience with Netwrix security products.
• Experience monitoring Salesforce or other SaaS platforms from a security perspective.
• Certifications such as Microsoft SC-200 or AZ-500, GIAC GCIH or GCIA, or CISSP.
• Experience handling customer-facing security incidents in a software company.

Our Values

At Netwrix, our values guide every action:

• Next-Level Customer Focus -Customers first, always. We listen, protect, and go the extra mile - because their success is our mission.
• Excellence - We set high standards and take pride in delivering exceptional results. We celebrate wins, seek constant improvement, and address shortcomings professionally.
• Transparent Ownership - We celebrate our successes, own up to our mistakes, communicate openly, and face challenges face-on with a genuine commitment to doing the right thing.
• Winning with Clear Thinking - We value clarity, find straightforward solutions to complex problems, and make swift, effective decisions.
• Relentless Innovation - We continually seek better ways to serve our customers and stay ahead. We foster creative thinking, and we embrace new approaches.
• Industry-Leading Expertise - We take pride in our expertise and continuously seek to learn and share knowledge, striving to be the trusted experts our customers rely on.
• eXceptional Together - We believe in the power of collaboration and diverse perspectives. By valuing each other’s strengths, we achieve outcomes that surpass individual contributions.

Join us in a culture where integrity, respect, and hard work are foundational. Be part of a team dedicated to making a lasting impact.

Why You'll Love Working at Netwrix

• Continuous Learning and Development Opportunities
• Team-Oriented, Collaborative, and Innovative Work Environment
• Regular Company Town Halls to Keep You Informed
• Opportunities for Career Growth and Advancement

We pride ourselves on a culture that truly values employee input across various backgrounds and experiences. We look forward to welcoming new talent who can help us further our mission.

Netwrix Corporation and its wholly owned subsidiaries are Equal Opportunity Employers (EEO) and welcome all applicants for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other protected characteristic under applicable law.

Please let us know if you require any accommodation.