Senior Security Engineer

XTB is a global company from the financial industry, focusing on online trading of financial instruments. It is the largest FinTech in Poland and a leader in Central and Eastern Europe, with operations spanning several countries including Asia and South America. The company offers training and development programs and provides an international business environment.

• Minimum 5 years of experience in a technical IT security role (e.g. Security Engineer, SOC Analyst L3, Cybersecurity Incident Response Engineer).
• Practical technical knowledge in the Blue Team domain including monitoring, incident response, tool maintenance, and tuning.
• Familiarity with attack techniques used for vulnerability assessment.
• Hands-on knowledge of OS architecture and security, computer networks, web/mobile applications, and cloud environments.
• Experience in Vulnerability Management processes, technical risk analysis, and drafting security procedures and documentation.
• Strong communication skills and experience conducting Security Awareness initiatives.
• Proficiency in English at a minimum B2 level for technical and business communication.

Nice to have:

• Professional certifications or knowledge of industry standards and frameworks (e.g., CISSP, CompTIA Security+, CCSP, GIAC, ISO/IEC 27001, AWS/Azure Security certifications).
• Process automation and scripting skills (e.g., Python, Bash, PowerShell) and experience integrating security tools into CI/CD pipelines.
• Experience in Threat Hunting and Digital Forensics & Incident Response (DFIR).
• Familiarity with AI Security.
• Knowledge of industry regulations and standards (e.g., DORA, NIS2, ISO/IEC 27001, SOC 2).

• Responding to and handling ICT security incidents, and providing operational support for monitoring processes.
• Supervising and optimizing the enterprise cybersecurity solution ecosystem (e.g., SIEM, EDR/XDR, IDS/IPS).
• Maintaining, evaluating, and implementing new cybersecurity tools and solutions.
• Managing scans and conducting vulnerability assessment and mitigation processes for networks, web & mobile environments, on-premises, and cloud infrastructure in collaboration with tech teams.
• Proactively analyzing IT architecture security and executing threat modeling processes.
• Regularly verifying and auditing IT infrastructure and service configurations based on security best practices.
• Building and developing a Security Awareness culture across the organization through team education, promoting best practices, and delivering dedicated training sessions.