Senior Security Engineer, Threat Response

Asana; Województwo mazowieckie; Hybrid; PLN 120,000 - 180,000; Full time

Job summary

Asana is seeking a Security Engineer to join the Blue Team in Warsaw. You will be a foundational member of the security presence, partnering with IT, infrastructure, and product teams to ensure robust detection and response capabilities.

The role emphasizes detection-as-code, automation, and secure configurations. You will write and review code as part of security automation, contribute to Panther-based SIEM and SOAR workflows, and educate engineers on best practices.

Responsibilities

• Lead detection, analysis, and response across cloud, endpoints, and SaaS environments.
• Investigate and remediate incidents in cloud infrastructure (AWS/GCP/Azure) and identity providers like Okta.
• Contain software supply chain and CI/CD incidents from unauthorized changes in build environments and dependencies.

Job description

About Asana

Asana is a leading platform for human + AI collaboration. Millions of teams around the world rely on Asana to achieve their most important goals, faster. Asana has been named to Fortune's Best Workplaces for 7+ years and recognized by Fast Company, Forbes, and Gartner for excellence in workplace culture and innovation. We offer an exceptional office-centric culture while adopting the best elements of hybrid models to ensure that every one of our global team members can work together effortlessly.

Role Overview

Our Security team keeps Asana's employees, users, and customers safe, by proactively addressing threats and fostering a culture of security throughout our product and operations. We are looking for a savvy Security Engineer to join our Blue Team in Warsaw. You will be a foundational member of the security presence in our Warsaw innovation hub, partnering directly with IT, infrastructure, and product teams to ensure we have robust detection and response capabilities. Detection and response here leans on engineering practice. We are investing in automation and detection-as-code to cut down on manual triage, and we are looking for someone comfortable writing and reviewing code as part of that work. This role is based in our Warsaw office with an office-centric hybrid schedule.

What you'll achieve:

• Lead detection, analysis, and response across our cloud and SaaS environments, identity providers, endpoints, and the software supply chain, ensuring timely and effective remediation of security incidents.
• Investigate and remediate security incidents across cloud infrastructure (AWS/GCP/Azure), identity providers (e.g., Okta), and SaaS environments.
• Investigate and contain software supply chain and CI/CD incidents, from unauthorized changes in build environments to suspect third-party dependencies (e.g., npm, PyPI).
• Help build and maintain our detection-as-code infrastructure (e.g., Panther), SOAR automation, and response playbooks, treating detection logic as tested, version-controlled production code.
• Utilize and optimize security tools such as Panther for SIEM, CrowdStrike for endpoint detection and response, and other security platforms.
• Conduct proactive threat hunting and operationalize threat intelligence across cloud, endpoint, and identity telemetry to catch threats beyond standard SIEM alerting.
• Conduct forensic analysis during security incidents to understand the scope and impact of incidents.
• Collaborate with engineering teams to integrate security best practices into development processes and provide guidance on secure configurations.
• Develop and deliver training to educate engineers on security operations and incident response best practices.