Staff InfoSec Engineer

Qualtrics is a company that creates software used by global brands for Experience Management, serving over 18,000 clients worldwide. The role is part of the Security Operations team based in Kraków focused on security threat detection, triage, and response across a global environment.

• 7+ years in security operations, incident response, or related discipline with 4+ years in people-management or team lead role.
• Experience running or scaling a 24x7 CDU function (in-house, hybrid, or MSSP).
• Strong technical knowledge of SIEM/SOAR platforms, EDR/XDR, network and cloud security monitoring, and MITRE ATT&CK framework.
• Experience leading incident response for significant security events including coordination with legal and executive stakeholders.
• Proven ability to hire, develop, and retain security talent.
• Excellent communication skills for translating technical details to non-technical leaders.
• Experience with cloud environments (AWS, Azure, or GCP) and SaaS security operations.

Nice to have:

• Experience in SaaS or enterprise software handling customer data at scale.
• Familiarity with compliance frameworks SOC 2, ISO 27001, FedRAMP, GDPR.
• Relevant certifications (CISSP, GCIH, GCFA, CISM).
• Experience building or maturing threat detection and threat hunting programs.
• Background in scripting/automation using Python, PowerShell to support SOAR workflows.

• Lead and manage the Security Operations Center including monitoring, detection, triage, and incident response functions.
• Hire, coach, and develop a team of CDU analysts and incident responders.
• Conduct 1-on-1 technical coaching and run mock incident drills.
• Own CDU metrics and KPIs and report on program health to security leadership.
• Drive continuous improvement of detection logic, playbooks, and automation.
• Serve as incident commander for high-severity security incidents.
• Partner with Threat Intelligence, Detection Engineering, IT, Legal, and Product/Engineering teams.
• Manage relationships with outsourced/MSSP or co-managed CDU partners.
• Evaluate and select CDU tooling (SIEM, SOAR, EDR, XDR, ticketing) and promote automation.
• Own CDU-related audit, compliance, and customer trust requirements (SOC 2, ISO 27001, FedRAMP).
• Build and maintain incident response runbooks and post-incident review processes.
• Participate in on-call rotation and provide leadership during major security events.

Qualtrics is an equal opportunity employer providing consideration for employment without regard to protected characteristics. Reasonable accommodations are available for persons with disabilities during application and employment. The position is based in Kraków, Poland. The work model is hybrid with three in-office days per week.