Senior XDR Engineer - AI-Driven Security & Deployment

EY; Województwo pomorskie; Hybrid; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Private healthcare with preventiveExa

EY Badges – global certification

Career Counselor

Job summary

EY Poland is seeking an experienced Cybersecurity Engineer to design and implement enterprise XDR architectures and lead deployments of CrowdStrike Falcon XDR and Microsoft Defender XDR. You will integrate endpoints, cloud workloads, identities, and security tools while advancing clients’ security operations maturity.

Join a global cybersecurity practice working across industries on complex projects, with hybrid/remote options and opportunities for professional growth and EY Badges

Qualifications

• 4+ years of experience in Cybersecurity Engineering, Security Operations, Detection Engineering, or Security Consulting.
• Hands-on experience with at least one of CrowdStrike Falcon or Microsoft Defender XDR.
• Strong understanding of cybersecurity operations and threat detection principles.
• Experience with XDR/EDR/SIEM/SOC technologies.
• Knowledge of incident detection and response processes.
• Understanding of network security concepts and common attack techniques.
• Experience integrating security technologies and working with APIs.
• Knowledge of Windows, Linux, and cloud environments.
• Ability to analyze security events and design detection logic.
• Strong communication and stakeholder management skills.
• Very good command of English and Polish (B2/C1).

Responsibilities

• Design and implement enterprise XDR architectures.
• Lead deployments of CrowdStrike Falcon XDR and Microsoft Defender XDR solutions.
• Integrate endpoints, cloud workloads, identities, email security, and third-party tools into XDR ecosystems.
• Develop onboarding strategies and deployment roadmaps for enterprise environments.
• Fine-tune detection logic, correlation rules, security policies, and response workflows.
• Support clients in improving XDR maturity and transforming their security operations capabilities.
• Improve detection coverage and threat visibility across complex IT environments.
• Design and implement use cases, detection content, and security response automation.
• Optimize and operationalize security monitoring capabilities.
• Conduct health assessments and recommend improvements for existing security platforms.
• Collaborate with SOC teams to enhance threat hunting, incident response, and investigation processes.
• Design integrations using APIs and automation frameworks.
• Support platform upgrades, migrations, and cybersecurity transformation initiatives.
• Prepare technical documentation, operating procedures, and architecture diagrams.
• Advise clients on security best practices and platform optimization.
• Participate in projects related to SIEM & Security Analytics, AI Security, Cloud Security, and SASE/SSE technologies.

Skills

CrowdStrike Falcon

Microsoft Defender XDR

XDR/EDR/SIEM/SOC

APIs & integrations

Windows/Linux/cloud

Threat detection principles

Security operations

English & Polish proficiency

Job description

EY Poland is seeking an experienced Cybersecurity Engineer to design and implement enterprise XDR architectures and lead deployments of CrowdStrike Falcon XDR and Microsoft Defender XDR. You will integrate endpoints, cloud workloads, identities, and security tools while advancing clients’ security operations maturity.

Join a global cybersecurity practice working across industries on complex projects, with hybrid/remote options and opportunities for professional growth and EY Badges