Group Tech Lead, Security Operations

This senior technical leadership role designs and drives an integrated purple-team threat operations strategy across offensive and defensive security. The role is based in the Warsaw office with an office-centric hybrid schedule: standard in-office days are Monday, Tuesday, and Thursday; most employees may work from home on Wednesdays, while Friday remote work depends on the type of work. Employment is offered under a Contract of Employment (UoP) in Poland.

What you’ll achieve

Purple Team Strategy & Technical Leadership

• Define and own the technical strategy for a fully integrated purple-team function, bridging offensive (red-team) and defensive (blue-team) capabilities into a cohesive, intelligence-driven program.

Adversary Emulation

• Design and implement a structured adversary-emulation program based on real threat intelligence.
• Ensure red-team exercises directly improve blue-team detection and response playbooks and establish continuous feedback loops.

Security Maturity & Industry Standards

• Lead the security maturity journey and define a roadmap that advances capabilities toward NIST CSF, ISO 27001, SOC 2, and MITRE ATT&CK maturity levels.

Lifecycle Management

• Develop, own, and continuously improve the end-to-end incident-response lifecycle, including policies, playbooks, runbooks, and post-incident review processes.

Vulnerability Operations

• Design and implement a comprehensive vulnerability-management program covering discovery, risk-based prioritization, SLA tracking, and remediation validation.

Process Design & Operational Excellence

• Architect scalable security-operations processes that reduce manual toil through automation and orchestration while maintaining quality.

Detection Engineering

• Build and standardize detection-engineering workflows so that threat detections are systematically developed, tested, tuned, and retired in line with the current threat landscape.

AI-Driven Innovation

• Identify, evaluate, and implement AI and machine-learning capabilities for threat detection, automated alert triage, root-cause analysis, and incident summarization.

Organizational Leadership & Enablement

• Provide technical mentorship across red- and blue-team disciplines.
• Integrate security best practices into cross-functional development pipelines and deliver advanced training programs.

About you

• 8+ years of progressive experience in security operations, threat detection and response, or offensive security, including at least 3 years in a senior technical leadership or principal engineering role.
• Deep expertise across red- and blue-team disciplines, with a proven record of designing and leading a purple-team or integrated threat-operations program at scale.
• Strong command of SIEM platforms, including Panther, Splunk, or Elastic Security, for detection engineering and advanced log correlation.
• Extensive knowledge of EDR platforms, including CrowdStrike or SentinelOne, for proactive threat hunting.
• Expert familiarity with operationalizing adversary-emulation frameworks such as MITRE ATT&CK and conducting forensic analysis during complex incident investigations in large cloud-native environments.
• Strong engineering and automation background using scripting languages such as Python and PowerShell, with exposure to SOAR platforms.
• Ability to translate business risk into a technical roadmap aligned with NIST CSF, ISO 27001, or SOC 2, along with strong technical process-design skills.
• Excellent communication and collaboration skills, including the ability to explain complex threat concepts to engineering, product, legal, and executive teams.
• Curiosity about AI tools and emerging technologies and willingness to use them to improve productivity, collaboration, or decision-making.

What we’ll offer

• Generous, transparent, and fair compensation system, including base salary and RSUs.
• Contract of Employment, with an option of 50% tax-deductible costs for author’s-rights usage in applicable roles.
• Health insurance with dental and travel coverage.
• Breakfast and lunch catering on office days.
• Vacation allowance.
• Career growth budget.
• Home office setup budget.
• Gym/Fitness card.
• Fertility healthcare and family-forming support.
• Mental health support.
• Group life insurance.
• MacBooks with necessary accessories.
• Estimated base salary of 35,000–52,000 PLN gross per month, subject to taxes and deductions. Actual salary depends on market conditions and qualifications assessed during the interview process; the range is a guideline and may be modified.
• Compensation may include additional components such as equity and sales incentive pay for most sales roles, as well as benefits.