Security Operations

• Assess security risks across Mend’s product and cloud infrastructure and drive a prioritized improvement plan
• Own day-to-day cloud and infrastructure security operations, including SIEM/SOC monitoring, WAF, CSPM, access reviews, encryption, and secrets management
• Lead vulnerability management, including Mend’s HackerOne bug bounty program and remediation coordination with Engineering
• Lead security incident response and support disaster recovery planning and testing
• Support customer-facing security activities, including questionnaires, RFPs, and technical security discussions during sales cycles
• Drive audit and certification activities, including SOC 2 and ISO 27001/27701/27017, and maintain compliance controls and evidence through Drata
• Manage third-party security assessments and support security and AI governance
• Serve as a key internal security advisor for teams across the company
• Own and improve security tooling, automation, and operational processes

Security Operations Lead

• Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms
• Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS
• Investigate suspicious activity, identify root causes, and determine appropriate remediation or escalation
• Support incident response, remediation, and recovery activities
• Work closely with Incident Response and other cybersecurity teams to manage security threats
• Analyze network and security events using TCP/IP, syslog, firewall, and network monitoring data
• Identify opportunities to improve detection quality and reduce false positives through tuning and optimization
• Gather technical information from clients to improve security monitoring and detection
• Prepare and present security reports, summaries, and technical findings
• Contribute to SOC procedures, documentation, knowledge bases, and quality-control processes
• Review operational feedback and implement corrective actions to continuously improve service quality

Security Operations Analyst – Cyber Defense Operations

• Contribute to the development, implementation, validation, tuning and maintenance of security monitoring, analytics and detection capabilities across SIEM, EDR, cloud and other cybersecurity platforms
• Support the operation, maintenance, optimization and continuous improvement of security monitoring and threat detection services
• Participate in onboarding, integration, testing and validation of security data sources, telemetry feeds and monitoring capabilities
• Contribute to security content management, including use case lifecycle management, rule reviews, testing, tuning and content quality assurance
• Collaborate with cyber threat intelligence, incident response and cybersecurity operations teams to translate requirements into detection and monitoring capabilities
• Participate in cybersecurity architecture reviews and provide recommendations to improve security monitoring and detection effectiveness
• Prepare and maintain cybersecurity operations metrics, dashboards, KPIs and service performance reports
• Review and assess detections, monitoring configurations, operational processes and service deliverables, identifying improvement opportunities
• Analyze operational feedback to support tuning, optimization, false-positive reduction and improved detection quality
• Contribute to quality assurance activities, process reviews, control validation, service quality assessments and corrective actions
• Support development, review and maintenance of CSOC procedures, standards, documentation, knowledge base articles and operational guidance
• Prepare and present technical reports, summaries, findings and recommendations to internal and external stakeholders
• Participate in a rotating on-call schedule to resolve critical system incidents when required

Security Operations jobs in Poland

Security Operations Lead

Security Operations Analyst – Cyber Defense Operations

Security Operations Analyst – SIEM Operations, Threat Detection