SOC Security Operations Engineer I — Poland

SHEIN; Kąty Wrocławskie; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Private medical care (Luxmed)

Life & health insurance

Multisport card

Lunch subsidies

Free parking

Training resources

Team-building activities

Job summary

SHEIN is seeking a SOC Security Operations Engineer to monitor, detect, investigate, and respond to security threats across IT and business systems. You will help build and improve detection and response capabilities within a follow-the-sun operating model, coordinating with Europe and APAC teams.

The role requires 5+ years in security operations, strong Python skills, and a practical understanding of intrusion techniques, log analysis, and web security; you will drive remediation and automation

Qualifications

• Bachelor's degree in Cyber security, Computer Science, or a related field with at least five years of hands-on security operations/incident response experience.
• Solid understanding of common attack techniques and defense strategies with core SOC skills in intrusion detection, malware analysis, log analysis, and threat hunting.
• Familiarity with log and alert analysis across OS, network protocols, cloud platforms, and security tooling, ability to distinguish real attacks from false positives.
• Proven security operations or incident response experience, able to perform alert analysis, attack-chain reconstruction, risk classification, remediation recommendations, post-incident reports, and detection-rule tuning.
• Working knowledge of web security vulnerabilities, with capability in pen testing, code review, or interface security testing, assess risks in backends, API gateways, authentication, and data flows.
• Proficiency in Python to write security detection scripts, log-analysis tools, and automation/triage utilities.
• Good English or Chinese reading, writing, and communication skills; able to work with cross-regional Europe/APAC teams and support global SOC shift work.

Responsibilities

• Own day-to-day SOC operations (24/7), building and running risk identification, monitoring, alerting, response, and post‑incident review.
• Contribute to the SOC roadmap and standards, drive detection rules, alert triage, incident response, knowledge management, and metrics.
• Monitor and triage security alerts focusing on intrusions, malware, anomalous logins, lateral movement, data exfiltration, and privilege abuse.
• Build and operate detection and response capabilities, including rules, use cases, SOPs, and automated remediation workflows.
• Perform pre‑production security assessments for third-party components and open-source software, delivering risk conclusions and remediation recommendations.
• Lead intrusion detection and incident response activities, including attack-chain reconstruction, impact analysis, and root-cause analysis.
• Stay current with threat intelligence and translate insights into operational detection rules and automation aligned to SOC scenarios.
• Collaborate with application, data security, platform engineering, IT, and business teams to improve security operations maturity.

Skills

Python proficiency

SOC operations

Threat hunting

Log analysis

Incident response

Cross-regional collaboration

English/Chinese communication

Education

Bachelor's degree in Cyber security or Computer Science

Tools

Security tooling

Job description

SHEIN is seeking a SOC Security Operations Engineer to monitor, detect, investigate, and respond to security threats across IT and business systems. You will help build and improve detection and response capabilities within a follow-the-sun operating model, coordinating with Europe and APAC teams.

The role requires 5+ years in security operations, strong Python skills, and a practical understanding of intrusion techniques, log analysis, and web security; you will drive remediation and automation