Cyber Detection & Response Engineering Lead

Job not on LinkedIn

🕒 September 30

🇵🇱 Poland – Remote

💵 zł140 - zł180 / hour

⏰ Full Time

🟠 Senior

🧑‍💻 Full-stack Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Spyrosoft

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2016

🚘 Automotive

🏥 Healthcare

💼 Consulting

Automotive • Healthcare • Consulting

Spyrosoft is a European technology services and software engineering company that partners with enterprises to deliver digital transformation, custom software, and IT consulting. It provides cloud, AI/ML, embedded and IoT development, cybersecurity, product design, managed services, and staff augmentation, and builds platforms and products such as DebtPro, Allpro, and VoicePro. Spyrosoft serves clients across multiple sectors including automotive, healthcare and life sciences, financial services, geospatial, media and entertainment, robotics and energy, and operates from offices across Europe, the UK, and the US.

📋 Description

• Design and deliver solutions across security monitoring, detection engineering, incident response, security operations, and security automation • Lead complex Cyber Detection & Response engagements and provide technical direction to multidisciplinary delivery teams • Assess SOC and CSIRT capabilities, identify improvement opportunities, and define target operating models and transformation roadmaps • Develop and enhance threat detection capabilities through detection use cases, correlation rules, monitoring strategies, and response procedures • Support implementation, migration, integration, and optimization of SIEM, SOAR, EDR, XDR, and log management platforms • Apply AI-enabled cybersecurity capabilities to improve threat detection, alert triage, investigation processes, and security automation with validation, governance, and human oversight • Translate business objectives, operational challenges, and security risks into solution architectures and delivery plans • Facilitate workshops, technical discussions, and executive presentations • Mentor and technically coach consultants and engineers • Contribute to proposals, RFP responses, effort estimations, solution design, and client-facing discussions • Develop reusable methodologies, frameworks, accelerators, and service offerings

🎯 Requirements

• Extensive experience within Cyber Detection & Response, Security Operations, Incident Response, or related cybersecurity consulting services • Hands-on expertise across security monitoring, detection engineering, incident response, security automation, governance, and SOC or CSIRT transformation initiatives • Proven experience leading cybersecurity programs, projects, workstreams, or multidisciplinary delivery teams • Strong understanding of security operations processes, detection lifecycle management, security data management, and incident handling procedures • Ability to design end-to-end security solutions aligned with organizational objectives, operational requirements, and cyber risk considerations • Practical understanding of AI application within cybersecurity, including benefits, limitations, risks, governance requirements, validation processes, and responsible use • Experience supporting proposals, RFP responses, solution architecture, effort estimation, and client presentations • Excellent communication and stakeholder management skills • Strong analytical thinking, problem-solving capabilities, and continuous improvement mindset • Professional proficiency in English (C1) • Experience with SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar, ArcSight, or similar • Experience with SOAR, EDR/XDR, threat detection, log management, cloud security, and security analytics platforms • Knowledge of Microsoft Azure, AWS, or GCP • Knowledge of KQL, SPL, SQL, Python, PowerShell, or other automation and scripting technologies • Nice to have: SOAR implementation, security integrations and API-based automation, cloud-native monitoring, AI-enabled security capabilities, MITRE ATT&CK, NIST CSF, cybersecurity certifications, consulting experience, and German, French, or Spanish proficiency