Security Engineer, Threat Response

At Asana, security is foundational to helping teams work together effortlessly. The security team protects employees, users, and customers by proactively addressing threats and fostering a culture of security throughout product and operations.

We’re looking for a detail-oriented, collaborative Security Operations Engineer to join the Security blue team in Warsaw and help solve complex tracking challenges and scale security infrastructure. You’ll be a foundational member of the security presence in a key engineering hub, partnering directly with IT, infrastructure, and product teams to ensure robust detection and response capabilities.

This role is based in the Warsaw office with an office-centric hybrid schedule. Standard in-office days are Monday, Tuesday, and Thursday. Most employees may work from home on Wednesdays; Friday remote-work eligibility depends on the type of work. A Contract of Employment (UoP) is offered for employees in Poland.

Quick Facts

• Office-centric hybrid role based in Warsaw
• Standard in-office days: Monday, Tuesday, and Thursday
• Contract of Employment (UoP)

What you’ll achieve

• Lead security incident detection, analysis, and response efforts, ensuring timely and effective remediation of security incidents.
• Utilize and optimize security tools such as Panther for SIEM, CrowdStrike for endpoint detection and response, and other security platforms.
• Develop, implement, and maintain security playbooks and automation scripts to streamline security operations and reduce manual toil.
• Monitor security alerts and threat intelligence feeds, proactively identifying and addressing emerging threats.
• Conduct forensic analysis during security incidents to understand their scope and impact.
• Collaborate with engineering teams to integrate security best practices into development processes and provide guidance on secure configurations.
• Develop and deliver training to educate engineers on security operations and incident-response best practices.

About you

• 5+ years of experience in security operations, incident response, or threat detection.
• Strong experience with SIEM platforms, such as Panther, Splunk, or Elastic Security, for log analysis, alert correlation, and dashboard creation.
• Deep working knowledge of endpoint detection and response tools, such as CrowdStrike or SentinelOne, and their capabilities.
• Proven experience developing and implementing security automation using scripting languages, such as Python or PowerShell, or orchestration tools.
• Experience performing security incident investigations and forensic analysis.
• Familiarity with common attack techniques, tactics, and procedures (TTPs) and frameworks such as MITRE ATT&CK.
• Strong communication skills for collaborating with technical and non-technical partners.
• Pragmatic, collaborative mindset and a passion for building robust defenses and enabling secure engineering work.
• Curiosity about AI tools and emerging technologies, with willingness to learn and use them to improve productivity, collaboration, or decision-making.

What we offer

• Generous, transparent, and fair compensation system, including base salary and RSUs.
• Contract of Employment and, for applicable roles, an option for 50% tax-deductible costs for author’s-rights usage.
• Health insurance with dental and travel coverage.
• Breakfast and lunch catering on office days.
• Vacation allowance.
• Career growth budget.
• Home office setup budget.
• Gym/Fitness card.
• Fertility healthcare and family-forming support.
• Mental health support.
• Group life insurance.
• MacBooks with all necessary accessories.

The estimated base salary range is 31,900–36,250 PLN gross per month, subject to taxes and necessary deductions. Actual base salary varies based on market factors and qualifications assessed during the interview process. In addition to base salary, the compensation package may include additional components such as equity and benefits.