Senior Security Operations & Incident Lead

Qualtrics; Kraków; On-site; PLN 180,000 - 240,000; Full time

Job summary

Qualtrics is seeking a Senior InfoSec Engineer to support the CDU Operations team, enhancing detection and response capabilities across our global environment. This hands-on role involves guiding strategy while actively managing incidents with the security team.

You will lead 24x7 monitoring, develop runbooks, and collaborate with Threat Intelligence, IT, Legal, and Product teams to close visibility gaps. Strong expertise in SIEM/SOAR, EDR/XDR, and cloud security is required.

Qualifications

• 5+ years in security operations and incident response.
• 2+ years in a people-management or team-lead role.
• Experience scaling a 24x7 CDU function (in-house, hybrid, or MSSP).
• Strong grounding in SIEM/SOAR platforms, EDR/XDR, and cloud security.

Responsibilities

• Respond in a Tier 2 role including 24x7 monitoring, detection, triage, and incident response.
• Develop CDU metrics and KPIs and report on program health to security leadership.
• Drive improvement of detection logic, playbooks, and automation with relevant teams.
• Serve as escalation point and incident commander for high-severity security incidents.

Skills

Security operations

Incident response

Team leadership

24x7 operations

Tools

CrowdStrike

Splunk

SOAR

EDR/XDR

Job description

Qualtrics is seeking a Senior InfoSec Engineer to support the CDU Operations team, enhancing detection and response capabilities across our global environment. This hands-on role involves guiding strategy while actively managing incidents with the security team.

You will lead 24x7 monitoring, develop runbooks, and collaborate with Threat Intelligence, IT, Legal, and Product teams to close visibility gaps. Strong expertise in SIEM/SOAR, EDR/XDR, and cloud security is required.