Senior XDR Architect | Cybersecurity Engineer

EY; Kraków; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Health insurance

EY Badges

Career development program

Flexible hybrid/remote work

Professional training and certificates

Job summary

EY Poland is seeking an experienced Cybersecurity Engineer to design and implement enterprise XDR architectures. You will lead deployments of CrowdStrike Falcon XDR and Microsoft Defender XDR, integrating endpoints, cloud workloads, identities, and security tools while refining detection logic and response workflows.

You will collaborate with SOC teams, support client transformations, and prepare architecture documentation. Strong English/Polish and 4+ years of relevant experience are required.

Qualifications

• 4+ years of experience in Cybersecurity Engineering, Security Operations, Detection Engineering, or Security Consulting.
• Hands-on experience with CrowdStrike Falcon or Microsoft Defender XDR.
• Knowledge of SIEM, EDR, SOC technologies and threat detection principles.
• Strong English and Polish language skills (B2/C1).

Responsibilities

• Design and implement enterprise XDR architectures.
• Lead deployments of CrowdStrike Falcon XDR and Microsoft Defender XDR.
• Integrate endpoints, cloud workloads, identities, email security, and third-party tools into XDR ecosystems.
• Develop onboarding strategies and deployment roadmaps for enterprise environments.
• Fine-tune detection logic, correlation rules, security policies, and response workflows.
• Support clients in improving XDR maturity and transforming security operations.
• Collaborate with SOC teams to enhance threat hunting and incident response.
• Prepare technical documentation and architecture diagrams.

Skills

Cybersecurity expertise

Security monitoring

Threat detection

Tools

CrowdStrike Falcon

Microsoft Defender XDR

Job description

EY Poland is seeking an experienced Cybersecurity Engineer to design and implement enterprise XDR architectures. You will lead deployments of CrowdStrike Falcon XDR and Microsoft Defender XDR, integrating endpoints, cloud workloads, identities, and security tools while refining detection logic and response workflows.

You will collaborate with SOC teams, support client transformations, and prepare architecture documentation. Strong English/Polish and 4+ years of relevant experience are required.