Senior Security Engineer

XTB is a global company from the financial industry, focusing on online trading of financial instruments. It is the largest FinTech in Poland and a leader in Central and Eastern Europe, with operations in several countries including Asia and South America.

• Minimum 5 years of experience in a technical IT security role (e.g., Security Engineer, SOC Analyst L3, Cybersecurity Incident Response Engineer).
• Practical technical knowledge in Blue Team domain (monitoring, incident response, tool maintenance, tuning) and familiarity with attack techniques used for vulnerability assessment.
• Hands-on knowledge of OS architecture and security, computer networks, web/mobile applications, and cloud environments.
• Experience in Vulnerability Management, technical risk analysis, and drafting security procedures.
• Strong communication skills and experience in conducting Security Awareness initiatives with IT, DevOps, and business stakeholders.
• Proficiency in English for fluent technical and business communication (minimum B2 level).

Nice to have:

• Professional certifications or practical knowledge of standards and frameworks (e.g., CISSP, CompTIA Security+, CCSP, GIAC, ISO/IEC 27001, AWS/Azure Security certifications).
• Process automation and scripting skills (e.g., Python, Bash, PowerShell) and experience integrating security tools into CI/CD pipelines.
• Experience in Threat Hunting and Digital Forensics & Incident Response (DFIR).
• Familiarity with AI Security.
• Knowledge of industry regulations and standards (e.g., DORA, NIS2, ISO/IEC 27001, SOC 2).

• Responding to and handling ICT security incidents, providing operational support for monitoring.
• Supervising and optimizing the enterprise cybersecurity solution ecosystem (e.g., SIEM, EDR/XDR, IDS/IPS).
• Maintaining, evaluating, and implementing new cybersecurity tools and solutions.
• Managing scans, vulnerability assessment, and mitigation processes for networks, web & mobile environments, on-premises, and cloud infrastructure.
• Proactively analyzing IT architecture security and executing threat modeling.
• Regularly verifying and auditing IT infrastructure and service configurations based on security best practices.
• Building and developing a Security Awareness culture through education, best practices promotion, and training sessions.