Technical Project Manager (Security) @ Keepit

Keepit; Kraków; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Private healthcare

Training budget

Multisport card

Bike parking

Shower

Free snacks

Free beverages

Office in Krakow city centre

Team-building events

English-speaking club

Job summary

Keepit is hiring in Kraków for a Security Operations Manager to drive daily security priorities and own the end-to-end security roadmap. You will coordinate cross-team planning, run SOC cadences, and manage vendor engagements to strengthen incident detection and response.

You will maintain SOPs, define maturity metrics, and report progress to leadership. English is the primary language, with a modern Kraków office and extensive training opportunities.

Qualifications

• 5+ years managing technical projects or programs, ideally in security, infrastructure, or IT operations.
• Own backlog and end-to-end roadmap: prioritization, dependencies, and dated commitments.
• Understanding of security operations: detection, alert triage, incident response, and vulnerability management.
• Power-user in Jira and Confluence, or able to reach that level quickly.
• Experience coordinating on-call rotations and planning around absences and handover.
• Strong written English and ability to write durable documentation.

Responsibilities

• Support daily security operations in deploying and implementing operational security priorities.
• Own the security roadmap: ensure the team stays on track to complete annual roadmap commitments.
• Lead communication, planning, and coordination with other teams and stakeholders.
• Run the SOC's recurring cadence: backlog refinement, sprint and roadmap reviews, shift handover syncs, and stakeholder check-ins.
• Maintain and prioritize the SOC's project backlog in coordination with security engineering leads.
• Track project risks, dependencies, and blockers; escalate when needed.
• Manage vendor and tool procurement timelines, renewals, PoCs, and onboarding of new security tools; manage vendor relationships.
• Own documentation of processes, SOPs, and runbooks, keeping them current.
• Report roadmap and project status to leadership.
• Manage change requests and change management for production security tooling changes.
• Define and track a maturity model aligned with CSF, MITRE ATT&CK, or a custom matrix.
• Own operational KPIs: MTTD, MTTR, alert-to-incident ratio, false positives, and coverage by use case.
• Coordinate tabletop exercises and purple team engagements; track remediation of findings.
• Benchmark against industry peers annually.
• Ensure schedule coverage for phishing triage and SIEM monitoring.
• Manage on-shift rotation for incident response and PTO planning.
• Maintain a documented shift handover.

Skills

Project management

Backlog ownership

Security operations understanding

English writing

Tools

Jira

Confluence

Job description

• 5+ years managing technical projects or programs, ideally in security, infrastructure, or IT operations.
• Proven ownership of a backlog and a roadmap end to end: prioritization, dependency tracking, and delivery against dated commitments.
• A working understanding of security operations — how detection, alert triage, incident response, and vulnerability management fit together. You do not need to have run a SOC yourself, but you do need enough fluency to hold a credible conversation with the engineers who do.
• Power-user fluency in Jira and Confluence, or the ability to get there fast.
• Experience coordinating coverage schedules or on-call rotations, including planning around absence and handover.
• Strong written English, and the ability to write documentation people can follow and will keep using.
  

Nice-to-haves:

• Exposure to a security maturity or coverage framework such as the NIST CSF or MITRE ATT&CK.
• Experience facilitating post-incident reviews, tabletop exercises, or purple team engagements.
• Experience selecting or rolling out an IT service management platform.
• Familiarity with change management for production systems.
• Vendor management or procurement coordination experience.

About us

At Keepit, we're on a mission to make cloud data protection simple, reliable, and built to last. Our platform provides customers with an immutable, historical archive of their data in systems such as Microsoft 365, Google Workspace, Salesforce, Entra ID, Dynamics 365, and Zendesk. We protect our customers against everything, from ransomware to simple accidents — and we pride ourselves on backing up hundreds of petabytes of data in a performant, reliable, and predictable way.

As we collaborate across locations, English is our primary language.

We offer:

• Official employment (Umowa o pracę).
• 4 additional working days of vacation per full calendar year.
• 3 days of internal sick leave without a doctor's note.
• Health and life insurance.
• Employee Capital Plan (PPK).
• Multisport card compensation.
• Coverage of professional training, meetups, and conferences.
• English-speaking club with native speakers and Polish language classes.
• Internet and glasses reimbursement.
• Office in Krakow city centre (Dluga 72) with beverages, fruit, and snacks.
• Regular team-building events, winter and summer parties.

We kindly ask you not to provide us with any sensitive categories of personal data when applying for a job with us. When applying for the vacancy, Keepit will process your personal data, and therefore we recommend that you also read our privacy policy, which describes our processing of personal data and your rights as a data subject.

• Support daily security operations in deploying and implementing operational security priorities.
• Own the security roadmap: ensure the team stays on track to complete annual roadmap commitments.
• Lead communication, planning, and coordination with other teams and stakeholders.
• Run the SOC's recurring cadence: backlog refinement, sprint and roadmap reviews, shift handover syncs, and stakeholder check-ins.
• Maintain and prioritize the SOC's project backlog in coordination with security engineering and detection engineering leads.
• Track project risks, dependencies, and blockers; escalation when needed.
• Manage vendor and tool procurement timelines, including renewals, proofs of concept (PoCs), and onboarding of new security tools. You own the process and the vendor relationships; the security budget stays with SOC leadership.
• Own documentation of processes, standard operating procedures, and runbooks, keeping them current rather than created once and left stale.
• Report roadmap and project status to leadership.
• Manage change requests and change management for production security tooling changes.
• Define and track a maturity model, for example mapped to the NIST Cybersecurity Framework (CSF), MITRE ATT&CK coverage, or a custom capability matrix.
• Own operational KPIs and metrics: mean time to detect (MTTD), mean time to respond (MTTR), alert-to-incident ratio, false positive rate, and detection coverage by use case.
• Run periodic gap assessments against the maturity model and turn findings into roadmap items.
• Coordinate tabletop exercises and purple team engagements, and track remediation of findings.
• Benchmark against industry peers or frameworks annually.
• Ensure schedule coverage for phishing triage and security information and event management (SIEM) monitoring.
• Manage the on-shift rotation for incident response.
• Plan for PTO and holiday coverage gaps well in advance.
• Maintain a documented shift handover ]

Requirements: Security, Jira, Confluence Tools: Jira. Additionally: Sport subscription, Training budget, Private healthcare, Bike parking, Shower, Free snacks, Free beverages, Modern office.