Staff Detection Engineer, Threat Response

Decisive Point; Warszawa; Presencial; PLN 446.000 - 502.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Breakfast and lunch catering

Vacation allowance

Career growth budget

Home office setup budget

MacBooks with accessories

Gym/Fitness card

Descripción de la vacante

Asana is seeking a Staff Detection Engineer in our Warsaw hub to own threat detection logic and telemetry pipelines. You will design detections across cloud, identity, endpoints, and the software supply chain, while maturing a detection-as-code workflow in Panther and CI/CD.

Join a team that partners with incident responders and product teams to ensure fast, high-signal detections, with opportunities to apply AI tools and evolving tech. Polish contract work terms apply in Poland.

Formación

• 8+ years in detection engineering, security operations, or threat hunting.
• Strong Python skills with Git-based workflows, PR reviews, automated tests, and CI/CD.
• Deep experience with detection-as-code and CI/CD pipelines.
• Experience with SIEM platforms (Panther, Splunk, Elastic Security) and query languages.
• Understanding cloud/identity telemetry (AWS, GCP, Okta logs) and attacker activity.
• Familiarity with EDR tools (CrowdStrike, SentinelOne) and endpoint telemetry.
• Knowledge of MITRE ATT&CK and how to apply it to coverage decisions.
• Collaborative mindset with cross-functional communication and a focus on reducing noise.
• Interest in AI tools and emerging technologies to boost productivity.

Responsabilidades

• Design, build, and maintain high-fidelity detections across cloud, identity, SaaS, endpoints, and software supply chain.
• Own the detection-as-code pipeline in Panther: rules, tests, review standards, and CI/CD deployment.
• Map coverage against MITRE ATT&CK and tune detections for top threats.
• Onboard and normalize telemetry sources with infra and IT for complete logs.
• Improve alert quality, reduce false positives, and track time-to-triage.
• Validate detections against real attacker behavior through purple-team exercises and atomic tests.
• Translate incidents and threat intel into durable detections and coverage.
• Build enrichment and automation in SOAR so alerts have actionable context.

Conocimientos

Python

Git workflows

PR-based review

CI/CD

Go

Bash

JavaScript/TypeScript

Detection-as-code

SIEM

Cloud telemetry

Okta logs

EDR tools

MITRE ATT&CK

Incident response

AI tools

Herramientas

Panther

Splunk

Elastic Security

Descripción del empleo

Asana is seeking a Staff Detection Engineer in our Warsaw hub to own threat detection logic and telemetry pipelines. You will design detections across cloud, identity, endpoints, and the software supply chain, while maturing a detection-as-code workflow in Panther and CI/CD.

Join a team that partners with incident responders and product teams to ensure fast, high-signal detections, with opportunities to apply AI tools and evolving tech. Polish contract work terms apply in Poland.