Senior Security Operations Lead - IR & Threat Hunting

ARRISE; Polska; On-site; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Competitive compensation

Annual leave

Private medical cover

Learning Hub

Gym membership

Job summary

ARRISE is seeking an experienced Security Operations professional to lead complex incident investigations, coordinate cross-functional response, and improve detection across SIEM, EDR, and cloud platforms. The role emphasizes automation, mentoring, and clear reporting to stakeholders.

You will work with Linux/Windows environments, develop detections, and drive vulnerability management and threat intelligence integration to strengthen overall security posture.

Qualifications

• 5+ years of experience in Security Operations, Incident Response, Threat Hunting, or Threat Detection.
• Experience with SIEM query languages and developing or tuning SIEM and EDR detections.
• Working knowledge of SOAR and vulnerability management technologies.

Responsibilities

• Lead investigations into complex security incidents including containment, eradication, recovery, and root cause analysis.
• Coordinate cross-functional response activities and document lessons learned.
• Monitor, triage, and investigate alerts from SIEM, EDR, cloud, and other security platforms.
• Correlate endpoint, network, identity, cloud, and application telemetry to identify security threats.
• Develop and tune SIEM and EDR detections to improve accuracy.
• Investigate cloud security events across AWS, Azure, and GCP.
• Drive security automation and use scripting to streamline workflows.
• Mentor junior analysts and contribute to training and drills.
• Communicate findings and risks to technical and executive stakeholders.
• Track vulnerability remediation and prioritize actions.

Skills

Security Operations

Incident Response

Threat Hunting

Threat Detection

SIEM platforms

SOAR

Vulnerability management

Python

PowerShell

Bash

Linux

Windows

Communication

Stakeholder management

Tools

SIEM

EDR

SOAR

Cloud security tools

Python

PowerShell

Bash

Job description

ARRISE is seeking an experienced Security Operations professional to lead complex incident investigations, coordinate cross-functional response, and improve detection across SIEM, EDR, and cloud platforms. The role emphasizes automation, mentoring, and clear reporting to stakeholders.

You will work with Linux/Windows environments, develop detections, and drive vulnerability management and threat intelligence integration to strengthen overall security posture.