Senior Security Engineer

O projekcie:
We are looking for a Senior Security Engineer with a strong Blue Team background and exposure to Red Team activities as an advantage.



This is a senior, hands‑on role with ownership of the company’s cyber defense role across on‑prem infrastructure, networks, and Microsoft‑based environments. You will analyze complex security incidents, clearly explain root causes and impact, and translate findings into lasting improvements. The role includes defining the security roadmap and executing it in close cooperation with IT and other stakeholders, ensuring security is built into both daily operations and long‑term decisions.

Wymagania:
- Min.5 years of professional experience in cybersecurity. - English at B2/C1 level, sufficient for collaboration and documentation. - Strong expertise in network defense. - Hands‑on experience with the Microsoft security stack. - Documented experience in incident management and response. - Ability to create and maintain a Security Playbook with incident runbooks. - Nice to have:- - Experience in simulating cyberattacks and testing defenses. - Practical experience with CIS and NIST frameworks. - Experience with automated vulnerability scanning (on‑prem and cloud). - Standardizing system hardening for Windows and Linux (Intune / GPO).

Codzienne zadania:
- Own the security posture end‑to‑end, ensuring systems remain secure and operational.
- Define, maintain, and execute the security strategy and roadmap.
- Identify, analyze, and remediate vulnerabilities across infrastructure and security systems.
- Support and participate in internal and external security audits.
- Document security incidents, vulnerabilities, and corrective actions.
- Continuously improve security configurations, standards, and procedures.
- Implement and maintain technical and organizational security controls.
- Develop organization‑wide security measures aligned with business goals.
- Design and develop next‑generation firewall solutions.
- Monitor emerging cybersecurity threats and apply relevant improvements.
- Maintain and update security policies, ensuring they are practical and business‑aligned.
- Detect, analyze, and respond to security incidents, minimizing business impact.
- Lead incident response and recovery, including lessons‑learned. documentation.
- Prepare clear security reports for technical teams and management.
- Ensure security is included from the start in IT projects.
- Cooperate with other departments to enforce security guidelines and standards.