Cyber Detection & Response Engineering Lead Expert

Spyrosoft is a cybersecurity company based in Wrocław, focusing on Cyber Detection & Response (CDR) practice and advanced security operations.

• Extensive experience in Cyber Detection & Response, Security Operations, Incident Response, or related cybersecurity consulting.
• Hands-on expertise in multiple CDR domains including security monitoring, detection engineering, incident response, security automation, governance, and SOC or CSIRT transformation.
• Proven leadership in cybersecurity programs, projects, workstreams, or multidisciplinary teams.
• Strong understanding of security operations processes, detection lifecycle management, security data management, and incident handling.
• Ability to design end-to-end security solutions aligned with business objectives and cyber risk.
• Practical understanding of AI applications in cybersecurity including benefits, limitations, risks, governance, validation, and responsible use.
• Experience supporting business development activities such as proposals, RFPs, solution architecture, effort estimation, and client presentations.
• Excellent communication and stakeholder management skills for technical and executive audiences.
• Strong analytical thinking, problem-solving skills, and a continuous improvement mindset.
• Professional proficiency in English at C1 level.

Nice to have:

• Experience implementing SOAR and security workflow automation.
• Knowledge of security integrations and API-based automation.
• Experience with cloud-native security monitoring solutions.
• Understanding of AI-enabled capabilities within SIEM, SOAR, EDR, and XDR platforms.
• Familiarity with frameworks such as MITRE ATT&CK and NIST Cybersecurity Framework.
• Relevant cybersecurity certifications.
• Previous consulting experience.
• Professional proficiency in German, French, or Spanish.

• Design and deliver solutions across security monitoring, detection engineering, incident response, security operations, and security automation.
• Lead complex Cyber Detection & Response engagements and provide technical direction to multidisciplinary delivery teams.
• Assess existing SOC and CSIRT capabilities, identify improvement opportunities, and define target operating models and transformation roadmaps.
• Develop and enhance threat detection capabilities through use cases, correlation rules, monitoring strategies, and response procedures.
• Support the implementation, migration, integration, and optimization of platforms such as Microsoft Sentinel, Splunk, IBM QRadar, ArcSight, SOAR, EDR, XDR, and log management.
• Apply AI-enabled cybersecurity capabilities to improve threat detection, alert triage, investigation, and security automation ensuring validation, governance, and human oversight.
• Translate business objectives, operational challenges, and security risks into practical solution architectures and delivery plans.
• Facilitate workshops, technical discussions, and executive presentations for technical and business stakeholders.
• Provide mentorship and technical coaching to consultants and engineers.
• Contribute to proposals, RFP responses, effort estimations, and solution design.
• Develop reusable methodologies, frameworks, accelerators, and service offerings that enhance project delivery quality and consistency.

Consent is required for processing personal data for recruitment purposes by Spyrosoft S.A. based in Wrocław. Data is processed according to GDPR for a period not exceeding 6 months. Candidates are informed about their rights including access, correction, deletion, and withdrawal of consent without affecting legal processing made before withdrawal. Contact: [email protected] or by mail at Spyrosoft S.A., Plac Nowy Targ 28, 50-141 Wrocław.