Senior Threat Detection & Response Engineer | Automation

Aristocrat Leisure; Kraków; Hybrid; PLN 240,000 - 360,000; Full time

Job summary

Aristocrat is seeking a Senior Detection & Response Engineer to join our Security Operations team in Kraków. In this role, you will strengthen detection and response capabilities through detection engineering, security automation, and operational process improvement in a hybrid SOC.

You will develop detections across SIEM, EDR, identity, and cloud, tune analytics, and build automation using Tines and APIs. Collaborate with threat intelligence, MSSP partners, and incident responders to accelerate

Qualifications

• Experience improving threat detection in production environments.
• Hands-on Detection Engineering experience with detections, analytics, and hunts.
• Experience building security automations using SOAR platforms or similar tools.
• Ability to translate operational challenges into scalable detections and automations.

Responsibilities

• Develop, tune, and maintain detections, analytics, and content across SIEM/EDR and cloud platforms.
• Identify detection gaps and create new use cases to improve coverage and reduce false positives.
• Design and build automation workflows using Tines and APIs to streamline investigations.
• Collaborate with threat analysts, MSSP partners, and incident responders to improve effectiveness.
• Measure and improve detection and automation effectiveness within Security Operations.

Skills

Threat detection

Detection engineering

Security automation

Tines / SOAR

API integrations

MITRE ATT&CK

Threat hunting content

Incident response

Cross-team collaboration

Automation workflows

Tools

SIEM

EDR

Tines

SOAR platforms

Job description

Aristocrat is seeking a Senior Detection & Response Engineer to join our Security Operations team in Kraków. In this role, you will strengthen detection and response capabilities through detection engineering, security automation, and operational process improvement in a hybrid SOC.

You will develop detections across SIEM, EDR, identity, and cloud, tune analytics, and build automation using Tines and APIs. Collaborate with threat intelligence, MSSP partners, and incident responders to accelerate