Remote Jobs RockRemote Jobs Rock

Senior Security Engineer

πŸ•’ 14 days ago
ICT SecurityIncident ResponseCybersecurity ToolsVulnerability Assessment
Apply Now

πŸ“œ Description

  • Responding to and handling ICT security incidents, providing operational support for monitoring processes.
  • Supervising and optimizing the enterprise cyber security solution ecosystem (e.g., SIEM, EDR/XDR, IDS/IPS).
  • Maintaining, evaluating, and implementing new cybersecurity tools and solutions.
  • Managing scans and conducting vulnerability assessments for networks, web & mobile environments, and cloud infrastructure.
  • Proactively analyzing IT architecture security and executing threat modeling processes.
  • Building and developing a Security Awareness culture across the organization through education and training.

πŸ› οΈ Requirements

  • Minimum 5 years of experience in a technical IT security role (e.g., Security Engineer, SOC Analyst L3, Cybersecurity Incident Response Engineer).
  • Practical technical knowledge in the Blue Team domain (monitoring, incident response, tool maintenance, and tuning) alongside familiarity with attack techniques used for vulnerability assessment.
  • Hands-on knowledge of OS architecture and security, computer networks, web/mobile applications, and cloud environments.
  • Experience in Vulnerability Management processes, technical risk analysis, and drafting security procedures and documentation.
  • Strong communication skills, experience in conducting Security Awareness initiatives, and close collaboration with IT, DevOps, and business stakeholders.
  • Proficiency in English enabling fluent technical and business communication (minimum B2 level).
  • Professional certifications or practical knowledge of industry standards and frameworks (e.g., CISSP, CompTIA Security+, CCSP, GIAC, ISO/IEC 27001, AWS/Azure Security certifications).
  • Process automation and scripting skills (e.g., Python, Bash, PowerShell) and experience integrating security tools into CI/CD pipelines.
  • Experience in Threat Hunting and Digital Forensics & Incident Response (DFIR).
  • Familiarity with AI Security.

✨ Benefits

  • Real influence on the development of the company and the product.
  • Work in an experienced team that is happy to share its knowledge.
  • A clear vision of development thanks to regular feedback and clear career paths.
  • Regular team-building meetings.
  • A training budget for courses and conferences that interest you.
  • An extra day off on your birthday.
  • An extra day off for parents.
  • Equipment tailored to your needs.
  • Private medical care and group insurance.
  • Access to an e-learning platform for learning English and a benefits platform.
Full job description

XTB is a global company from the financial industry, focusing on online trading of financial instruments. We are the largest FinTech in Poland and a leader in Central and Eastern Europe, and the range of our operations covers several countries, including Asia and South America. At XTB, we focus on the development of our employees, giving them opportunities to gain knowledge and skills in various fields, as well as offering a number of training and development programs. If you are looking for challenges and want to gain valuable experience in an international business environment, XTB is the right place for you.

We are a certified Great Place to Work company.

We are looking for a Senior Security Engineer to join our team. In this role, you will act as a key technical expert, bridging deep competencies across defensive security, offensive security, and DevSecOps. Your primary objective will be to ensure the security of ICT processes and assets, while regularly collaborating with IT teams, DevOps, and Product Managers.

Responsibilities

  • Responding to and handling ICT security incidents, as well as providing operational support for the monitoring process.
  • Supervising and optimizing the enterprise cyber security solution ecosystem (e.g., SIEM, EDR/XDR, IDS/IPS).
  • Maintaining, evaluating, and implementing new cybersecurity tools and solutions.
  • Managing scans, as well as conducting vulnerability assessment and mitigation processes for networks, web & mobile environments, on-premises, and cloud infrastructure in collaboration with tech teams.
  • Proactively analyzing IT architecture security and executing threat modeling processes.
  • Regularly verifying and auditing IT infrastructure and service configurations based on security best practices.
  • Building and developing a Security Awareness culture across the organization through team education, promoting best practices, and delivering dedicated training sessions.
  • Requirements

  • Minimum 5 years of experience in a technical IT security role (e.g., Security Engineer, SOC Analyst L3, Cybersecurity Incident Response Engineer).
  • Practical technical knowledge in the Blue Team domain (monitoring, incident response, tool maintenance, and tuning) alongside familiarity with attack techniques used for vulnerability assessment.
  • Hands-on knowledge of OS architecture and security, computer networks, web/mobile applications, and cloud environments.
  • Experience in Vulnerability Management processes, technical risk analysis, and drafting security procedures and documentation.
  • Strong communication skills, experience in conducting Security Awareness initiatives, and close collaboration with IT, DevOps, and business stakeholders.
  • Proficiency in English enabling fluent technical and business communication (minimum B2 level).
  • Nice to have

  • Professional certifications or practical knowledge of industry standards and frameworks (e.g., CISSP, CompTIA Security+, CCSP, GIAC, ISO/IEC 27001, AWS/Azure Security certifications).
  • Process automation and scripting skills (e.g., Python, Bash, PowerShell) and experience integrating security tools into CI/CD pipelines.
  • Experience in Threat Hunting and Digital Forensics & Incident Response (DFIR).
  • Familiarity with AI Security.
  • Knowledge of industry regulations and standards (e.g., DORA, NIS2, ISO/IEC 27001, SOC 2).
  • What we offer

  • Real influence on the development of the company and the product.
  • Work in an experienced team that is happy to share its knowledge.
  • A clear vision of development thanks to regular feedback and clear career paths.
  • Regular team-building meetings.
  • Benefits

  • A training budget for courses and conferences that interest you.
  • An extra day off on your birthday.
  • An extra day off for parents.
  • Equipment tailored to your needs.
  • Private medical care and group insurance.
  • Access to an e-learning platform for learning English and a benefits platform.
  • Access to a wellbeing platform and the opportunity to take advantage of workshops and private therapy sessions.
  • Remote work, from the office in Warsaw or from a coworking space in your city.
  • Maleda Tech

    Senior Security Engineer, Insider Threat Detection & Response

    πŸ•’ 2 days ago
    Maleda TechπŸ‘₯ 1 - 10 employees🏒 Information Technology And Services

    Build and mature insider threat detection and response capabilities by engineering detections, hunting for threats, automating investigations, and coordinating incident response across technical and business teams.

    Insider Threat DetectionSecurity OperationsDetection EngineeringThreat Hunting
    Linear

    Senior / Staff Security Engineer

    πŸ•’ 7 days ago
    LinearπŸ‘₯ 51 - 200 employees🏒 Computer Software

    Own hands-on security across product and infrastructure, from vulnerability management and threat modeling to incident response, cloud hardening, and automation that reduces risk as the platform scales.

    Security EngineeringVulnerability ManagementBug Bounty ProgramsProduct Security Testing
    Ceresti Health

    Security Engineer

    πŸ•’ 2 days ago
    Ceresti HealthπŸ‘₯ 11 - 50 employees🏒 Hospital & Health Care

    Secures software and cloud systems by reviewing code, modeling threats, automating security controls, and running attack simulations, while partnering with Engineering to prioritize and close vulnerabilities.

    Application SecurityThreat ModelingCode ReviewPython
    Nooks

    Cybersecurity Engineer

    πŸ•’ 2 days ago
    NooksπŸ‘₯ 201 - 500 employees🏒 Technology

    Own and strengthen the unclassified environment’s cybersecurity posture by implementing NIST SP 800-171 and CMMC Level 2 controls, conducting self-assessments, maintaining audit evidence, and vetting tools and vendors.

    CybersecurityNIST SP 800-171CMMC Level 2DFARS

    Trusted by Remote Workers