Security Engineer, Threat Response

Asana is focused on protecting its employees, users, and customers by proactively addressing security threats and fostering a security culture throughout their product and operations. This role is part of the Security blue team located in Warsaw, working closely with IT, infrastructure, and product teams to maintain robust detection and response capabilities.

• 5+ years of experience in security operations, incident response, or threat detection.
• Strong experience with SIEM platforms such as Panther, Splunk, and Elastic Security for log analysis, alert correlation, and dashboard creation.
• Deep working knowledge of endpoint detection and response (EDR) tools like CrowdStrike and SentinelOne.
• Proven experience developing and implementing security automation using scripting languages such as Python and PowerShell or orchestration tools.
• Experience performing security incident investigations and forensic analysis.
• Familiarity with common attack techniques, tactics, procedures (TTPs), and frameworks including MITRE ATT&CK.
• Strong communication skills for collaboration with technical and non-technical partners.
• Curiosity about AI tools and emerging technologies, with willingness to learn and apply them.

• Lead security incident detection, analysis, and response efforts, ensuring timely and effective remediation of security incidents.
• Utilize and optimize security tools such as Panther for SIEM, CrowdStrike for endpoint detection and response, and other security platforms.
• Develop, implement, and maintain security playbooks and automation scripts to streamline operations and reduce manual toil.
• Monitor security alerts and threat intelligence feeds, proactively identifying and addressing emerging threats.
• Conduct forensic analysis during security incidents to understand the scope and impact.
• Collaborate with engineering teams to integrate security best practices into development processes and guide secure configurations.
• Develop and deliver training to educate engineers on security operations and incident response best practices.