System security engineer in fintech in Warsaw

Описание:

RedCore is an international business group that creates technological solutions for digital markets. Our products and services cover fintech, marketing, e-commerce, customer service, communications, and regulatory technologies. Powering Growth from the Core — this is the key mission laid under RedCore’s strong foundation. This is how we consistently stay ahead: by evolving and creating scalable solutions, while remaining committed to open and transparent communication with our partners. We're looking for a System Security Engineer to join our team! Задачи:

Assess the maturity of the security monitoring function (data sources, pipelines, detections, processes, tooling) against industry good practice and the organization's threat landscape. Turn the findings into a prioritized, evidence-based improvement roadmap. Own the monitoring architecture: data sources, log pipelines, SIEM/analytics platforms, and their reliability, scalability, and cost. Define standards for log onboarding, normalization, and data quality. Design and evolve the detection engineering lifecycle: use-case management, coverage analysis, testing and validation, tuning, and retirement. Build detections from available telemetry and relevant threat scenarios, and measure their effectiveness. Use incident investigations and root cause analysis as inputs for systemic improvements to telemetry and detections. Automate repetitive monitoring, enrichment, and response tasks, prioritizing by the value they bring to SOC workflows. Work with the SOC, security, engineering, and infrastructure teams to onboard new services into monitoring by design. Provide technical guidance to SOC analysts. Maintain architecture and operational documentation so that decisions, integrations, and procedures stay transparent and transferable. Требования:

5+ years in cybersecurity, including SOC engineering, SIEM, or detection engineering. Deep understanding of SOC operations, detection engineering, incident response, threat intelligence, threat hunting, DFIR, and SOC engineering. Hands-on experience with SIEM, EDR/XDR, NDR, threat intelligence platforms, and incident management systems. Knowledge of MITRE ATT&CK, and SOC maturity models, with experience assessing monitoring maturity and defining a target state and roadmap. Solid grasp of monitoring architecture: log collection and processing, data quality, and the trade-offs between visibility, cost, and operational load. Proven experience designing and tuning detections on application and infrastructure telemetry. Условия:

Paid annual leave. Paid days off. RedCore TEAM corporate gamification system. Annual corporate events for employees. Reimbursement of business travel expenses. Flexible working format and start time. Employee learning and development system. Mentoring program. Overtime compensation. Referral program with a cash bonus. Corporate psychologist. Cafeteria benefit system: sports, insurance, language learning (depends on region).