Cyber Security Engineer / Cyber tooling SME

Haleon Poland is a consumer healthcare company with a trusted portfolio of brands including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum®. The company focuses on delivering better everyday health and is executing its Win as One strategy to drive its business and people forward.

• Bachelor’s degree or equivalent relevant work experience.
• At least 8 years in IT, with minimum 5 years hands-on engineering experience in cybersecurity tooling.
• Required certifications: CISSP or CISM (or equivalent).
• Expert-level technical knowledge of Microsoft cyber tooling, EDR/XDR, SIEM, CSPM, and related security platforms.
• Skills in engineering and implementation including configuration, integration, scripting, and troubleshooting.
• Strong problem-solving and analytical abilities focused on operational stability and security.
• Ability to translate solution designs into practical and maintainable engineering deliverables.
• Stakeholder management and communication skills.
• Proven mentoring and knowledge-sharing capabilities.
• Sound understanding of cybersecurity tooling’s role in risk reduction and security operations.
• Up-to-date knowledge of current and emerging cyber threats and defensive tooling technologies.

Nice to have:

• Master’s degree or equivalent relevant work experience.
• 10+ years in IT, with at least 7 years specialised in Microsoft cyber tooling, EDR/XDR, SIEM, CSPM, or enterprise security tooling platforms.
• Deep hands-on expertise with Microsoft Defender suite, Microsoft Sentinel, Purview, EDR/XDR platforms, SIEM solutions, CSPM tools.
• Experience with tooling integration, automation, orchestration (including SOAR), and large-scale deployments in hybrid or multi-cloud environments.
• Proven record implementing and supporting complex cybersecurity tooling solutions.
• Experience with scripting and automation (PowerShell, Python, REST API).
• Knowledge of relevant regulations and standards (e.g., GDPR, NIS Regulations, ISO 27001).

• Act as the subject matter expert for the design, build, configuration, integration, and optimisation of cybersecurity tooling solutions, with deep expertise in Microsoft cyber tooling, EDR/XDR, SIEM, CSPM, and related platforms.
• Lead the technical implementation and deployment of new cybersecurity tooling capabilities and enhancements.
• Provide expert engineering support for the day-to-day BAU operations, maintenance, troubleshooting, and performance tuning of cybersecurity tooling platforms.
• Collaborate with the Cyber Tooling Product Manager, Solution Architects, and delivery teams to ensure solutions meet business and security requirements.
• Develop and maintain technical standards, configuration baselines, automation scripts, and operational procedures for cybersecurity tooling systems.
• Support incident response and problem management activities related to cybersecurity tooling, including root cause analysis and permanent fixes.
• Mentor and provide technical guidance to junior engineers and team members on cybersecurity tooling technologies.
• Monitor system performance, availability, and capacity, and drive continuous improvement and automation initiatives.
• Contribute to the evaluation and selection of new cybersecurity tools or enhancements within the tooling domain.