Senior XDR Architect & Security Operations Lead

EY; Łódź; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Flexible work model

Private healthcare

Life insurance

Education support

EY Badges

Job summary

EY Poland is seeking a cybersecurity engineering professional to help design, implement, and optimize XDR architectures across international projects. You will deploy CrowdStrike Falcon XDR and Microsoft Defender XDR, integrating endpoints, cloud workloads, identities, and security tools.

You will refine detection logic and workflows while advising on security best practices. The role offers a flexible, hybrid/remote working model across Poland, with opportunities to grow through EY Badges,

Qualifications

• 4+ years of experience in Cybersecurity Engineering, Security Operations, Detection Engineering, or Security Consulting.
• Hands-on experience with CrowdStrike Falcon or Microsoft Defender XDR.
• Strong understanding of cybersecurity operations and threat detection principles.

Responsibilities

• Design and implement enterprise XDR architectures.
• Lead deployments of CrowdStrike Falcon XDR and Microsoft Defender XDR solutions.
• Integrate endpoints, cloud workloads, identities, email security, and third-party security tools into XDR ecosystems.
• Develop onboarding strategies and deployment roadmaps for enterprise environments.
• Fine-tune detection logic, correlation rules, security policies, and response workflows.
• Support clients in improving XDR maturity and transforming their security operations capabilities.
• Improve detection coverage and threat visibility across complex IT environments.
• Design integrations using APIs and automation frameworks.

Skills

Cybersecurity concepts

Threat detection

Security operations

APIs integration

Bilingual EN/PL

Tools

CrowdStrike Falcon

Microsoft Defender XDR

Job description

EY Poland is seeking a cybersecurity engineering professional to help design, implement, and optimize XDR architectures across international projects. You will deploy CrowdStrike Falcon XDR and Microsoft Defender XDR, integrating endpoints, cloud workloads, identities, and security tools.

You will refine detection logic and workflows while advising on security best practices. The role offers a flexible, hybrid/remote working model across Poland, with opportunities to grow through EY Badges,