Senior Security Engineer: Threat Detection & Response

Netwrix Corporation; Kraków; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Career Growth

Team Collaboration

Company Town Halls

Job summary

Netwrix Corporation in Kraków is seeking a Senior Security Analyst/Engineer to detect, investigate, and respond to threats across our Microsoft, Netwrix, and SaaS environments. You will triage alerts, lead investigations end-to-end, and mature security tooling and processes.

This hybrid role sits in Kraków with close collaboration across IT and DevOps teams. Ideal candidates have 5+ years in security operations, hands-on Defender/Sentinel/Entra ID experience, and strong scripting (PowerShell).

Qualifications

• 5+ years of experience in security operations, incident response, or security engineering.
• Hands-on with Defender for Endpoint, Sentinel, Defender for Cloud, and Entra ID.
• Hands-on with Tenable for vulnerability management and remediation.
• Experience triaging security events in a SOC or managed detection environment.
• Knowledge of SIEM, EDR, and SOAR platforms.
• Experience with Okta/Entra ID and SSO, MFA, + conditional access.
• Strong phishing and email threat analysis skills.
• Familiarity with SOC 2 or similar frameworks.
• Proficiency in PowerShell and at least one scripting language.
• Understanding of MITRE ATT&CK and NIST 800-61 lifecycle.
• Professional proficiency in English, written and spoken.

Responsibilities

• Monitor, triage, and investigate security alerts and incidents using Defender, Sentinel, and Netwrix tools.
• Lead investigations from detection through remediation and document findings.
• Manage vulnerability remediation with Tenable, prioritizing risk and SLAs.
• Investigate phishing and email threats, including header/url/attachment triage.
• Support security posture of Salesforce and other SaaS with access reviews and audits.
• Manage identity and access via Okta/EntraID, including SSO and MFA tasks.
• Monitor Azure security tooling for Entra ID and Defender for Cloud.
• Oversee endpoint and network monitoring to ensure timely threat detection.
• Collaborate with IT and cross-functional teams during incidents and remediation.
• Support SOC 2 evidence collection, controls monitoring, and audits.
• Deliver security awareness training and phishing simulations.
• Maintain and improve incident response runbooks and playbooks.

Skills

Defender for Endpoint

Microsoft Sentinel

Defender for Cloud

Entra ID

Tenable

SOAR

SIEM

MFA

SSO

PowerShell

MITRE ATT&CK

Tools

Okta/EntraID

Tenable tools

Job description

Netwrix Corporation in Kraków is seeking a Senior Security Analyst/Engineer to detect, investigate, and respond to threats across our Microsoft, Netwrix, and SaaS environments. You will triage alerts, lead investigations end-to-end, and mature security tooling and processes.

This hybrid role sits in Kraków with close collaboration across IT and DevOps teams. Ideal candidates have 5+ years in security operations, hands-on Defender/Sentinel/Entra ID experience, and strong scripting (PowerShell).