Senior XDR Architect & Deployment Lead (Remote)

EY; Rzeszów; Hybrid; PLN 140,000 - 210,000; Full time

Benefits offered by this job

Hybrid and remote work options

EY Badges

Career Counselor

Private healthcare

Job summary

EY Poland's Cybersecurity Engineering team is building scalable XDR solutions for international projects, leveraging CrowdStrike Falcon XDR and Microsoft Defender XDR to strengthen client security posture.

In this role you will design, implement, and optimize XDR architectures, integrate cloud workloads, endpoints, identities, and security tools, and work with SOC teams on threat hunting and incident response.

Qualifications

• 4+ years of experience in Cybersecurity Engineering, Security Operations, Detection Engineering, or Security Consulting.
• Hands-on with CrowdStrike Falcon or Microsoft Defender XDR.
• Understanding of SIEM, EDR, SOC concepts.
• Experience with APIs and cloud environments.

Responsibilities

• Design and implement enterprise XDR architectures.
• Lead deployments of CrowdStrike Falcon XDR and Microsoft Defender XDR.
• Integrate endpoints, cloud workloads, identities, email security, and third-party tools into XDR ecosystems.
• Develop onboarding strategies and deployment roadmaps for enterprise environments.
• Fine-tune detection logic, policies, and response workflows.
• Collaborate with SOC teams to enhance threat hunting and incident response.
• Prepare technical documentation and architecture diagrams.

Skills

Cybersecurity operations

Threat detection

Communication with stakeholders

English proficiency

Polish proficiency

Tools

CrowdStrike Falcon

Microsoft Defender XDR

Job description

EY Poland's Cybersecurity Engineering team is building scalable XDR solutions for international projects, leveraging CrowdStrike Falcon XDR and Microsoft Defender XDR to strengthen client security posture.

In this role you will design, implement, and optimize XDR architectures, integrate cloud workloads, endpoints, identities, and security tools, and work with SOC teams on threat hunting and incident response.