Senior Security Ops Lead - Incident Response & Cloud

Jobtailor; Wrocław; On-site; PLN 180,000 - 240,000; Full time

Job summary

Jobtailor is seeking a senior Security Operations lead in Wroclaw to own and mature the detection strategy, drive incident response from triage to remediation, and report clearly to technical and non-technical stakeholders.

You will work with DevOps and Engineering to embed security controls in CI/CD, mentor analysts, and develop automation across SIEM, EDR, and SOAR in a cloud-first environment.

Qualifications

• 6+ years of security operations experience with progression from triage to detection engineering
• Proven experience leading or mentoring a team, formally or informally
• Deep expertise with SIEM, EDR, and SOAR platforms, including hands-on rule-writing, tuning, and automation
• Strong incident response leadership experience managing complex or high-severity incidents end-to-end
• Solid understanding of cloud security architecture in AWS, Azure, or GCP environments
• Experience embedding security into CI/CD pipelines and infrastructure with DevOps/Engineering
• Scripting or automation proficiency in Python or PowerShell
• Familiarity with MITRE ATT&CK techniques and attacker TTPs
• Excellent communication skills for briefing executives and technical teams
• Up to 10–20% travel
• Nice-to-have: cloud-native detection, container security, threat intel platforms, threat hunting, purple team, certs, network security, vulnerability management, DLP/insider threat detection

Responsibilities

• Own and mature the security operations detection strategy
• Lead major incident response from triage through remediation and post-incident review
• Conduct host, network, and memory forensics
• Produce clear reporting for technical and non-technical stakeholders
• Collaborate with DevOps/Engineering to embed security controls in CI/CD pipelines and system design
• Mentor analysts and engineers to deepen their technical depth
• Translate technical findings into actionable insights for executives and customers
• Assess, select, and integrate SIEM, EDR, SOAR, and cloud-native tools
• Work cross-functionally in a cloud-first environment with DevOps, Engineering, and IT

Skills

Security operations leadership

Incident response management

SIEM, EDR, SOAR expertise

Cloud security architecture

Python/PowerShell scripting

Tools

SIEM

EDR

SOAR

Cloud-Native Security Tools

CI/CD tooling

Job description

Jobtailor is seeking a senior Security Operations lead in Wroclaw to own and mature the detection strategy, drive incident response from triage to remediation, and report clearly to technical and non-technical stakeholders.

You will work with DevOps and Engineering to embed security controls in CI/CD, mentor analysts, and develop automation across SIEM, EDR, and SOAR in a cloud-first environment.