Senior Security Engineer
Netwrix Corporation Krakow, Lesser Poland Voivodeship, Poland
Computer and Network Security · 501-1,000 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
The Senior Security Engineer will monitor, investigate, and remediate security threats across Microsoft, Netwrix, and SaaS environments. They will also manage vulnerability remediation, oversee identity and access controls, and support SOC 2 compliance efforts.
What they look for
Requirements
Candidates must have at least 5 years of experience in security operations, incident response, or security engineering. Proficiency in Microsoft security tools, vulnerability management, and scripting languages like PowerShell is required.
Benefits
Full description
Position Overview
The Senior Security Analyst / Engineer will be a key member of our Information Security team, responsible for detecting, investigating, and responding to security threats across our Microsoft, Netwrix, and SaaS environments. This role combines hands-on SOC work with engineering judgment: you will triage alerts, lead investigations from detection through remediation, and help mature the processes and tooling that keep Netwrix and our customers secure. You will work closely with IT, DevOps, and cross-functional teams, and you will help shape how our security operations evolve.
This is a hybrid role from our office in Kraków.
Responsibilities:
- Monitor, triage, and investigate security alerts and incidents using Microsoft Defender, Sentinel, and Netwrix tools, escalating and documenting findings per SOC procedures.
- Conduct investigations using SOAR and threat intelligence tooling, correlating alerts across data sources to determine scope and root cause.
- Manage vulnerability remediation using Tenable, prioritizing findings by risk, tracking remediation SLAs with system owners, and reporting exposure trends to leadership.
- Investigate and remediate phishing reports and other email and social engineering threats, including header analysis, URL and attachment triage, and user communication.
- Support and monitor corporate resources and applications (such as Salesforce) from a security perspective, including access reviews, anomalous activity detection, permission and role audits, and data exposure risk.
- Manage and monitor identity and access through Okta/EntraID, including SSO, MFA, conditional access, anomalous login detection, and access reviews.
- Monitor Azure security tooling and configurations, including Entra ID, Microsoft Defender for Cloud, and logging and alerting.
- Oversee endpoint and network monitoring tools to ensure coverage and timely detection of threats.
- Collaborate with IT and cross-functional teams during security incidents, from detection through containment and remediation.
- Support SOC 2 compliance efforts, including evidence collection, control monitoring, audit preparation, and remediation tracking.
- Develop and deliver security awareness training to employees, including phishing simulations, best practices, and policy education.
- Maintain and improve incident response runbooks, playbooks, and documentation.
Qualifications:
- 5+ years of experience in security operations, incident response, or security engineering.
- Hands-on experience with Microsoft Defender for Endpoint, Microsoft Sentinel, Defender for Cloud, and Microsoft Entra ID.
- Hands-on experience with Tenable tools for vulnerability management and working with technical teams on remediation steps.
- Experience triaging and investigating security events in a SOC or managed detection environment.
- Working knowledge of SIEM, EDR, and SOAR platforms.
- Experience with Okta/Entra ID or another enterprise identity provider, including SSO, MFA, and conditional access.
- Strong phishing and email threat analysis skills.
- Familiarity with SOC 2 or similar compliance frameworks.
- Proficiency in KQL and at least one scripting language (PowerShell preferred).
- Understanding of the MITRE ATT&CK framework and the incident response lifecycle (NIST SP 800-61 or equivalent).
- Professional proficiency in English, written and spoken.
Nice to Have:
- Hands-on experience with Netwrix security products.
- Experience monitoring Salesforce or other SaaS platforms from a security perspective.
- Certifications such as Microsoft SC-200 or AZ-500, GIAC GCIH or GCIA, or CISSP.
- Experience handling customer-facing security incidents in a software company.
Our Values
At Netwrix, our values guide every action:
- Next-Level Customer Focus -Customers first, always. We listen, protect, and go the extra mile— because their success is our mission.
- Excellence - We set high standards and take pride in delivering exceptional results. We celebrate wins, seek constant improvement, and address shortcomings professionally.
- Transparent Ownership - We celebrate our successes, own up to our mistakes, communicate openly, and face challenges head-on with a genuine commitment to doing the right thing.
- Winning with Clear Thinking - We value clarity, find straightforward solutions to complex problems, and make swift, effective decisions.
- Relentless Innovation - We continually seek better ways to serve our customers and stay ahead. We foster creative thinking, and we embrace new approaches.
- Industry-Leading Expertise - We take pride in our expertise and continuously seek to learn and share knowledge, striving to be the trusted experts our customers rely on.
- eXceptional Together - We believe in the power of collaboration and diverse perspectives. By valuing each other’s strengths, we achieve outcomes that surpass individual contributions.
Join us in a culture where integrity, respect, and hard work are foundational. Be part of a team dedicated to making a lasting impact.
Why You’ll Love Working at Netwrix
- Competitive Health Benefits
- Continuous Learning and Development Opportunities
- Team-Oriented, Collaborative, and Innovative Work Environment
- Regular Company Town Halls to Keep You Informed
- Opportunities for Career Growth and Advancement
We pride ourselves on a culture that truly values employee input across various backgrounds and experiences. We look forward to welcoming new talent who can help us further our mission.
Netwrix Corporation and its wholly owned subsidiaries are Equal Opportunity Employers (EEO) and welcome all applicants for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other protected characteristic under applicable law.
Please let us know if you require any accommodation.
Similar roles
-
Oracle Fusion Application Security Developer
Accenture Federal Services Washington, District of Columbia, United States · $86K–$176K/yr
-
Incident Response Manager, Cybersecurity, Technology Consulting
EY Singapore, Singapore
-
Cloud Security Engineer
Accenture Federal Services Chantilly, Virginia, United States · $124K–$246K/yr
-
Senior Security Engineer
Epic Games Cary, North Carolina, United States
-
Cyber Systems Administrator/Control Systems Cybersecurity - DLA
NEMEAN SOLUTIONS LLC Columbus, Ohio, United States
-
Cybersecurity Engineer / RMF Specialist - DLA
NEMEAN SOLUTIONS LLC Columbus, Ohio, United States