Group Tech Lead, Security Operations

Asana is a leading platform for human + AI collaboration with 13+ offices worldwide. Its security team protects employees, users, and customers by proactively addressing threats and fostering a culture of security. The role is based in their Warsaw office with an office-centric hybrid schedule.

• 8+ years in security operations, threat detection/response, or offensive security.
• At least 3 years in senior technical leadership or principal engineering roles.
• Expertise across red and blue team disciplines and leading purple team programs.
• Proficiency with SIEM platforms (e.g., Panther, Splunk, Elastic Security) and EDR platforms (e.g., CrowdStrike, SentinelOne).
• Experience with adversary emulation frameworks like MITRE ATT&CK and forensic analysis in cloud-native environments.
• Strong engineering and automation skills using scripting languages such as Python and PowerShell.
• Capability to align technical roadmaps with NIST CSF, ISO 27001, and SOC 2 standards.
• Excellent communication and collaboration skills.
• Curiosity and willingness to leverage AI tools and emerging technologies.

• Define and own the technical strategy for an integrated purple team bridging offensive (red team) and defensive (blue team) capabilities.
• Design and implement adversary emulation programs based on real threat intelligence.
• Lead security maturity initiatives aligned with NIST CSF, ISO 27001, SOC 2, and MITRE ATT&CK frameworks.
• Develop and improve the incident response lifecycle, including policies, playbooks, and reviews.
• Design and implement vulnerability management programs covering discovery and remediation.
• Architect scalable security operations processes with automation and orchestration.
• Build and standardize detection engineering workflows aligned with threat landscapes.
• Identify and implement AI and machine learning capabilities for threat detection and analysis.
• Provide technical mentorship and advanced training across red and blue team disciplines.

Please be informed that the data controller is Asana, located in San Francisco, California, US. Data processing is for recruitment purposes with mandatory and voluntary provisions as per applicable law. Data will be processed until recruitment completion and for legal claim periods. Consent for data processing can be withdrawn any time. Recipients include Just Join IT and other data processors involved in recruitment.