Cyber Detection & Response Engineering Lead

Spyrosoft

. Design and deliver solutions across security monitoring, detection engineering, incident response, security operations, and security automation .

Posted 9/30/2026full-timeRemote • PolandSenior💰 PLN 140 - PLN 180 per hourWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Cyber Detection & Response, Security Operations, and Incident Response, with a strong focus on designing and implementing security solutions that align with organizational objectives. Proficient in leveraging AI-enabled cybersecurity capabilities and leading multidisciplinary teams to enhance threat detection and incident management.

Highest-signal resume keywords

Cyber Detection & ResponseSecurity OperationsIncident ResponseSIEM PlatformsAI Application in Cybersecurity

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security MonitoringDetection EngineeringSecurity AutomationGovernanceThreat DetectionKQLSPLSQLPythonPowerShell

Soft Skills

Excellent CommunicationStakeholder ManagementAnalytical ThinkingProblem-SolvingContinuous Improvement Mindset

Tools & Technologies

Microsoft SentinelSplunkIBM QRadarArcSightSOAREDR/XDRLog ManagementCloud SecuritySecurity Analytics PlatformsMicrosoft Azure

Certifications & Qualifications

Cybersecurity Certifications

Industry Keywords

SOC TransformationCSIRTMITRE ATT&CKNIST CSFConsulting Experience

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformPythonSplunkSQL

About the role

Key responsibilities & impact

Design and deliver solutions across security monitoring, detection engineering, incident response, security operations, and security automation
Lead complex Cyber Detection & Response engagements and provide technical direction to multidisciplinary delivery teams
Assess SOC and CSIRT capabilities, identify improvement opportunities, and define target operating models and transformation roadmaps
Develop and enhance threat detection capabilities through detection use cases, correlation rules, monitoring strategies, and response procedures
Support implementation, migration, integration, and optimization of SIEM, SOAR, EDR, XDR, and log management platforms
Apply AI-enabled cybersecurity capabilities to improve threat detection, alert triage, investigation processes, and security automation with validation, governance, and human oversight
Translate business objectives, operational challenges, and security risks into solution architectures and delivery plans
Facilitate workshops, technical discussions, and executive presentations
Mentor and technically coach consultants and engineers
Contribute to proposals, RFP responses, effort estimations, solution design, and client-facing discussions
Develop reusable methodologies, frameworks, accelerators, and service offerings

Requirements

What you’ll need

Extensive experience within Cyber Detection & Response, Security Operations, Incident Response, or related cybersecurity consulting services
Hands-on expertise across security monitoring, detection engineering, incident response, security automation, governance, and SOC or CSIRT transformation initiatives
Proven experience leading cybersecurity programs, projects, workstreams, or multidisciplinary delivery teams
Strong understanding of security operations processes, detection lifecycle management, security data management, and incident handling procedures
Ability to design end-to-end security solutions aligned with organizational objectives, operational requirements, and cyber risk considerations
Practical understanding of AI application within cybersecurity, including benefits, limitations, risks, governance requirements, validation processes, and responsible use
Experience supporting proposals, RFP responses, solution architecture, effort estimation, and client presentations
Excellent communication and stakeholder management skills
Strong analytical thinking, problem-solving capabilities, and continuous improvement mindset
Professional proficiency in English (C1)
Experience with SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar, ArcSight, or similar
Experience with SOAR, EDR/XDR, threat detection, log management, cloud security, and security analytics platforms
Knowledge of Microsoft Azure, AWS, or GCP
Knowledge of KQL, SPL, SQL, Python, PowerShell, or other automation and scripting technologies
Nice to have: SOAR implementation, security integrations and API-based automation, cloud-native monitoring, AI-enabled security capabilities, MITRE ATT&CK, NIST CSF, cybersecurity certifications, consulting experience, and German, French, or Spanish proficiency