Senior Security Operations & Vulnerability Management Engineer

SolarWinds is a company focused on providing simple, powerful, and secure solutions to help customers accelerate business transformation. The role is based in Krakow, Poland, with a hybrid work mode requiring at least 3 days in the office. Employment is via a full-time employment contract.

• 5–7+ years of experience in Security Operations and Threat & Vulnerability Management.
• Hands-on experience with enterprise-grade vulnerability scanners like Qualys, Tenable, or Rapid7, including integration into CI/CD and cloud workflows.
• Expertise in cloud security across AWS, Azure, and GCP.
• Proficiency in Python, PowerShell, or SQL for data manipulation and analysis.
• Ability to translate vulnerability data into business risk understandable by technical and executive stakeholders.
• Strong knowledge of NIST CSF and MITRE ATT&CK frameworks and their practical application.
• Understanding of exploit development and penetration testing methodologies.
• Professional certifications such as CISSP, GCIH, or GEVA are highly regarded; cloud certifications and relevant degrees are a plus.

• Own the full lifecycle of vulnerability discovery and remediation, prioritizing based on reachability, exploitability, and environmental context.
• Act as the primary technical contact for Engineering and DevOps, explaining remediation rationale and negotiating timelines.
• Use MITRE ATT&CK to pivot from vulnerability data to proactive threat hunting and exposure assessment.
• Build and tune detection logic and design SOAR playbooks to automate security operations tasks.
• Serve as Tier 3 escalation point and Incident Commander for major security events, leading root cause analysis.
• Develop KPIs focused on risk reduction over time, such as Mean Time to Remediation and burn-down rates on critical assets.

SolarWinds is an Equal Employment Opportunity Employer and considers all qualified applicants without regard to protected characteristics. All applications are treated in accordance with the SolarWinds Privacy Notice.