Staff InfoSec Engineer - Security Operations Lead (Hybrid)

Qualtrics; Kraków; On-site; PLN 200,000 - 320,000; Full time

Benefits offered by this job

Annual Leave 20/26 days

Private Medical Insurance

Commuter Assistance

QED PROGRAM

Wellness stipend

Experience bonus

Group Life & Income Protection

Free breakfasts/lunches in office

Job summary

Qualtrics is seeking a Staff InfoSec Engineer in Kraków to lead the CDU Operations and drive detection and incident response across our global environment. You will own day-to-day leadership of the team, mentor analysts, and mature our capabilities while remaining hands-on to guide strategy and manage incidents.

You will oversee 24x7 security operations, develop playbooks, and collaborate with Threat Intelligence, IT, and Product teams to reduce risk.

Qualifications

• 7+ years in security operations
• 4+ years in a people-management or team-lead role
• Experience running 24x7 CDU function (in-house, hybrid, or MSSP)
• Strong communication skills—translate technical detail to risk language for leadership
• Experience with cloud environments (AWS, Azure, or GCP) and SaaS security operations

Responsibilities

• Lead and manage the Security Operations Center, 24x7 monitoring, detection, triage, and incident response.
• Hire, coach, and develop CDU analysts; build on-call culture.
• Provide hands-on credibility; coach, run drills, and build skill matrices for staff.
• Own CDU metrics and KPIs; report program health to security leadership.
• Drive improvements in detection logic, playbooks, and automation with engineering/threat intel teams.
• Escalation point and incident commander for high-severity incidents; coordinate cross-functional response.
• Partner with Threat Intelligence, Detection Engineering, IT, Legal, and Product/Engineering to close visibility gaps.
• Manage relationships with MSSP or co-managed CDU partners; ensure SLAs and quality.
• Evaluate CDU tooling (SIEM, SOAR, EDR, XDR) and drive automation to reduce analyst toil.
• Own CDU-related audits, compliance, and customer trust requirements (SOC 2, ISO 27001, FedRAMP as applicable).
• Build/maintain incident response runbooks, tabletop exercises, and post-incident reviews.
• Participate in on-call rotation during major security events.

Skills

Security operations leadership

Incident response

Threat detection & response

Cloud security monitoring

MITRE ATT&CK

Education

Bachelor's degree in CS or related field

Tools

SIEM

SOAR

EDR

XDR

Job description

Qualtrics is seeking a Staff InfoSec Engineer in Kraków to lead the CDU Operations and drive detection and incident response across our global environment. You will own day-to-day leadership of the team, mentor analysts, and mature our capabilities while remaining hands-on to guide strategy and manage incidents.

You will oversee 24x7 security operations, develop playbooks, and collaborate with Threat Intelligence, IT, and Product teams to reduce risk.