Senior Security Operations Leader

DOU; Wrocław; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Competitive compensation

Annual leave (20 or 26 days)

Private medical cover

Learning Hub

Gym & fitness membership

Multisport membership

Job summary

ARRISE is seeking an experienced Security Operations professional to join our global team in Wroclaw. You will drive incident response, threat hunting, and detection engineering across AWS, Azure, GCP, and on-prem systems, building robust playbooks and automations.

You’ll mentor analysts, report findings to stakeholders, and help reduce mean time to detect and respond. The role emphasizes proactive threat hunting, cloud security, and AI-enabled security workflows, with strong focus on detection

Qualifications

• 5+ years of experience in Security Operations, Incident Response, Threat Hunting, or Threat Detection, with enterprise SIEM work.
• Experience with SIEM query languages and developing or tuning SIEM/EDR detections.
• Knowledge of SOAR and vulnerability management technologies.
• Experience investigating incidents across AWS, Azure, GCP, and Microsoft 365.
• Experience with Linux; understanding Windows and container security concepts.
• Ability to operationalize threat intel into detection and response activities.
• Familiarity with Cyber Kill Chain and NIST CSF principles.
• Scripting experience with Python, PowerShell, or Bash.
• Strong analytical, investigative, and stakeholder-management skills.

Responsibilities

• Lead investigations into complex security incidents, including containment, eradication, and recovery.
• Coordinate cross-functional response activities and document lessons learned.
• Monitor, triage, and investigate alerts from SIEM, EDR, cloud, and other security platforms.
• Correlate telemetry to identify threats and improve visibility.
• Develop cloud-focused detection use cases and incident response procedures.
• Identify automation opportunities to improve SOC efficiency.
• Communicate findings and risks to technical and non-technical stakeholders.
• Mentor junior analysts and contribute to training.
• Track vulnerability remediation and provide risk-based prioritization.

Skills

Security Operations

Incident Response

Threat Hunting

Threat Detection

SIEM

EDR

SOAR

Python scripting

Cloud security

Linux

Windows security

Threat intelligence

Communication

Tools

Siem tooling

SOAR platforms

Job description

ARRISE is seeking an experienced Security Operations professional to join our global team in Wroclaw. You will drive incident response, threat hunting, and detection engineering across AWS, Azure, GCP, and on-prem systems, building robust playbooks and automations.

You’ll mentor analysts, report findings to stakeholders, and help reduce mean time to detect and respond. The role emphasizes proactive threat hunting, cloud security, and AI-enabled security workflows, with strong focus on detection