Senior Detection & Response Engineer (L3 Security Operations)

Aristocrat is a world leader in gaming content and technology, a top-tier publisher of free-to-play mobile games, delivering great performance for B2B customers and millions of players. The company promotes responsible gameplay, company governance, employee wellbeing, and sustainability. It welcomes diversity and inclusion, encouraging applications from all backgrounds.

• Experience improving threat detection, incident response, or security operations in a production environment.
• Strong ability to develop and tune detections, searches, analytics, or threat hunting content using security-focused query languages.
• Experience building and maintaining security automations using Tines, SOAR platforms, or similar technologies.
• Ability to translate operational challenges into scalable detections, automations, and workflow improvements.
• Experience connecting security tools and operational activities through APIs and workflow automation.
• Solid understanding of threat detection, investigation, and incident response concepts.
• Ability to collaborate effectively with analysts, MSSP partners, engineers, and associates.
• Typically possesses a bachelor’s degree or equivalent experience with approximately five years in a related cybersecurity role.

Bonus Points:

• Experience with Tines.
• Experience implementing AI-enabled security operations or response automation.
• Experience with CrowdStrike, Microsoft security technologies, or cloud-native security platforms.
• Experience working within a hybrid SOC/MSSP framework.
• Experience with threat hunting, threat intelligence automation, or threat-informed defense practices.

• Build and maintain security automation workflows using Tines and other approved automation platforms.
• Develop, tune, and optimize detections, correlation logic, searches, and analytics across SIEM, EDR, cloud, identity, email, and SaaS security platforms.
• Develop and operationalize AI-enabled workflows to improve analyst efficiency.
• Build automations and integrations using no-code/low-code platforms, APIs, and security tooling.
• Assist advanced investigations and response activities through detection engineering, automation, and technical analysis.
• Improve detection quality, reduce alert noise, speed response, and enhance operational consistency.
• Collaborate with Security Operations, Security Engineering, IT, and Product Security teams.
• Measure and continuously improve efficiency of detections, workflows, and operational processes.

This position requires full-time work authorization in Poland without current or future visa sponsorship. Hybrid work model with mandatory onsite presence three days per week at Kraków office. No travel expectations. EEO M/F/D/V equal opportunity employer.