Threat Detection & Incident Response Lead

Digital Zone; Polska; On-site; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Impactful work

Competitive compensation

Regional team experience

Job summary

Digital Zone is seeking its first Security Operations hire to own threat detection and incident response end-to-end. You will shape how we log, alert, and respond, partnering with engineering and Product Security to protect a cloud-native platform. This role offers high impact and autonomy in a fast-moving environment.

You will build detections, data pipelines, and run the incident response playbooks, leading blameless post-incident reviews to strengthen the security program.

Qualifications

• 5+ years in security operations or incident response, startup/scale-up background a plus.
• Experience logging, alerting, and incident handling for cloud environments.
• Hands-on in at least one domain: detection engineering, incident response, SIEM or security data pipelines.

Responsibilities

• Design and operate security operations across cloud, identity, endpoints, and SaaS.
• Build data pipelines to bring logs into SIEM or data lake; ensure data quality and retention.

Skills

Security operations

Threat detection

Incident response

Cloud logs analysis

Coding (Python/SQL)

Communication under pressure

Tools

SIEM

EDR

SOAR

Kubernetes audit logs

CloudTrail

GuardDuty

Job description

Digital Zone is seeking its first Security Operations hire to own threat detection and incident response end-to-end. You will shape how we log, alert, and respond, partnering with engineering and Product Security to protect a cloud-native platform. This role offers high impact and autonomy in a fast-moving environment.

You will build detections, data pipelines, and run the incident response playbooks, leading blameless post-incident reviews to strengthen the security program.