Threat Response Engineer - Detection-as-Code & SIEM

Asana, Inc.; Warszawa; Hybrid; PLN 356,000 - 405,000; Full time

Benefits offered by this job

Health insurance with dental andTravel

Office-based with hybrid days

Lunch catering

Vacation allowance

Career growth budget

Home office setup budget

Gym/Fitness card

Mental health support

MacBooks with accessories

Job summary

Asana, Inc. in Warsaw seeks a seasoned Security Engineer to join our Blue Team. You will lead detection, analysis, and response across cloud, identity, endpoints, and the software supply chain, emphasizing automation and detection-as-code. Collaborate with IT, infrastructure, and product teams to strengthen security.

Required: 7+ years in threat detection or incident response, strong Python scripting, hands-on with EDR/SIEM tools. Office-based with hybrid days in Warsaw.

Qualifications

• 7+ years of threat detection or incident response experience.
• Proficient in Python for security scripting and automation.
• Hands-on experience with cloud security and CI/CD.
• Familiar with auditing software supply chains and dev ecosystems (npm, PyPI).

Responsibilities

• Lead detection, analysis, and response across cloud, identity, endpoints, and software supply chain.
• Investigate and remediate security incidents across cloud infrastructure (AWS/GCP/Azure).
• Investigate and contain software supply chain and CI/CD incidents.
• Develop and maintain detection-as-code infrastructure and SOAR playbooks.
• Utilize and optimize security tools (Panther, CrowdStrike, SIEMs).
• Perform threat hunting and operationalize threat intelligence.

Skills

Threat detection

Incident response

Python scripting

Threat hunting

Forensic analysis

MITRE ATT&CK

Communication

AI tools curiosity

Tools

Panther

CrowdStrike

Splunk

Elastic Security

Job description

Asana, Inc. in Warsaw seeks a seasoned Security Engineer to join our Blue Team. You will lead detection, analysis, and response across cloud, identity, endpoints, and the software supply chain, emphasizing automation and detection-as-code. Collaborate with IT, infrastructure, and product teams to strengthen security.

Required: 7+ years in threat detection or incident response, strong Python scripting, hands-on with EDR/SIEM tools. Office-based with hybrid days in Warsaw.