Senior Security Engineer, Threat Response

Asana; Warszawa; Hybrid; PLN 356,000 - 405,000; Full time

Benefits offered by this job

Health insurance

Breakfast catering

Gym card

MacBook + accessories

RSUs

Home office setup budget

Job summary

Asana is seeking a Security Engineer to join the Blue Team in Warsaw. You will lead detection, analysis, and response across cloud, identity providers, endpoints, and the software supply chain, implementing detection-as-code, and automating workflows.

You will collaborate with IT, infrastructure, and product teams to embed security into development processes and deliver training on security operations and incident response best practices.

Qualifications

• 7+ years in threat detection, security operations or incident response across cloud, identity and SaaS.
• Proficient in Python for security scripting and automation; REST APIs and Git workflows.
• Hands-on with software supply chain threats, audit logs, and CI/CD pipelines.
• Familiar with Detection as Code, test-driven detection logic and CI/CD rule management.
• Experience with SIEM platforms for log analysis, alerting and dashboards.
• Strong endpoint security expertise, including macOS telemetry and threat detection.

Responsibilities

• Lead detection, analysis, and response across cloud, identity, endpoints, and software supply chain.
• Investigate and remediate incidents across AWS/GCP/Azure, Okta, and SaaS environments.
• Contain software supply chain incidents and build detection-as-code infrastructure and playbooks.
• Develop and maintain detection logic as production code with version control.
• Operate security tools like Panther, CrowdStrike, and other platforms; optimize configurations.
• Conduct proactive threat hunting and forensic analysis to determine incident scope and impact.

Skills

Threat detection

Security operations

Incident response

Python scripting

REST APIs

Git workflows

CI/CD pipelines

EDR tools

MITRE ATT&CK

Tools

Panther

Splunk

Elastic Security

CrowdStrike

SentinelOne

Job description

Our Security team keeps Asana's employees, users, and customers safe, by proactively addressing threats and fostering a culture of security throughout our product and operations. We are looking for a savvy Security Engineer to join our Blue Team in Warsaw. You will be a foundational member of the security presence in our Warsaw innovation hub, partnering directly with IT, infrastructure, and product teams to ensure we have robust detection and response capabilities. Detection and response here leans on engineering practice. We are investing in automation and detection-as-code to cut down on manual triage, and we are looking for someone comfortable writing and reviewing code as part of that work. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland.

What you’ll achieve:

Lead detection, analysis, and response across our cloud and SaaS environments, identity providers, endpoints, and the software supply chain, ensuring timely and effective remediation of security incidents.

Investigate and remediate security incidents across cloud infrastructure (AWS/GCP/Azure), identity providers (e.g., Okta), and SaaS environments.

Investigate and contain software supply chain and CI/CD incidents, from unauthorized changes in build environments to suspect third-party dependencies (e.g., npm, PyPI).

Help build and maintain our detection-as-code infrastructure (e.g., Panther), SOAR automation, and response playbooks, treating detection logic as tested, version-controlled production code.

Utilize and optimize security tools such as Panther for SIEM, CrowdStrike for endpoint detection and response, and other security platforms.

Conduct proactive threat hunting and operationalize threat intelligence across cloud, endpoint, and identity telemetry to catch threats beyond standard SIEM alerting.

Conduct forensic analysis during security incidents to understand the scope and impact of incidents.

Collaborate with engineering teams to integrate security best practices into development processes and provide guidance on secure configurations.

Develop and deliver training to educate engineers on security operations and incident response best practices.

About you:

7+ years of experience in threat detection, security operations, or incident response, including investigating incidents across cloud platforms, identity providers, and SaaS applications, with practical knowledge of audit logging and IAM.

Proficient in Python (Bash, Go, or JavaScript/TypeScript is a plus) for security scripting and automation, with hands-on experience across REST APIs, Git workflows, and PR-based code reviews.

Hands-on experience investigating software supply chain threats, with fluency in auditing modern developer ecosystems (e.g., npm, PyPI), build logs, and CI/CD pipelines.

Familiarity with "Detection as Code" methodologies, including test-driven detection logic and rule management through CI/CD pipelines.

Strong experience with SIEM platforms (e.g., Panther, Splunk, Elastic Security) for log analysis, alert correlation, and dashboard creation.

Deep working knowledge of endpoint detection and response (EDR) tools (e.g., CrowdStrike, SentinelOne) with specialized expertise in macOS endpoint security, telemetry, and threat detection capabilities.

Experience performing digital forensics and root-cause analysis to determine incident scope and impact.

Familiarity with common attack techniques, tactics, and procedures (TTPs) and frameworks like MITRE ATT&CK.

Collaborative and pragmatic, with strong communication skills across technical and non-technical partners, committed to building robust defenses and helping engineers do their best, most secure work.

Demonstrated curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making.

What we offer:

• Generous, transparent and fair compensation system (base salary and RSUs).
• Contract of Employment (and the option of 50% tax deductible costs for author’s rights usage in respect of applicable roles).
• Health insurance with dental and travel coverage (Lux Med).
• Breakfast and lunch catering on the days that you work from the office.
• Vacation allowance.
• Career growth budget.
• Home office setup budget.
• Gym/Fitness card.
• Fertility healthcare and family-forming support with Carrot.
• Mental Health Support in Modern Health.
• Group life insurance.
• MacBooks with all necessary accessories.

For this role, the estimated base salary range is between 31,900 - 36,250 PLN gross per month (subject to all taxes and necessary deductions). The actual base salary will vary based on various factors, including…