Hybrid Cybersecurity Engineer – SIEM, EDR, IDS/IPS

at Infotree Global Solutions

• Job title: Cybersecurity Engineer – SIEM, EDR, IDS/IPS
• Job type: Full Time
• Experience level: Senior, Lead
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Cyber Security, Python
• Location requirements: Hybrid, Warsaw, Poland

About the role

• Cybersecurity Engineer safeguarding information systems and networks at Infotree Global Solutions. Responsible for security controls, incident response, and compliance with industry standards.

Responsibilities

• Design, deploy, and maintain security solutions to safeguard enterprise systems, networks, and applications.
• Monitor security alerts and events to detect and respond to threats in a timely manner.
• Investigate, analyze, and remediate security incidents, escalating when necessary.
• Collaborate with IT and business teams to ensure secure architecture and operations.
• Support manufacturing and lab environments with tailored security solutions.
• Ensure compliance with relevant security frameworks, policies, and regulations.
• Conduct risk assessments, recommend improvements, and drive implementation of best practices.
• Administer and optimize the SIEM platform for log management, alerting, and threat detection.
• Support and enhance OT security platforms, ensuring resilience and compliance across manufacturing and lab environments.
• Manage and monitor endpoint security using CrowdStrike (threat detection, prevention, and response).
• Oversee Qualys vulnerability management tools, performing regular scans, reporting, and remediation coordination.
• Produce and maintain security tool true-up metrics to ensure compliance, accuracy, and proper coverage across organizational servers and endpoints.

Requirements

• Bachelor's degree in computer science, Information Security, or related field (or equivalent experience).
• 7 to 10 years of proven experience in cybersecurity engineering, incident response, and security operations.
• Hands-on expertise in implementing and supporting SIEM platforms, OT security solutions, endpoint protection tools (e.g., CrowdStrike), and vulnerability management (e.g., Qualys).
• Solid understanding of threat modeling frameworks (e.g., Cyber Kill Chain, MITRE ATT&CK) and key compliance standards (e.g., NIST, ISO 27001), with the ability to apply them effectively in day-to-day security operations.
• Strong verbal and written communication skills for both technical and non-technical audiences.
• Familiarity with securing OT/ICS or lab/manufacturing environments is a plus.
• Relevant certifications such as CISSP, OSCP, or CEH.
• Ability to work in a fast-paced, dynamic environment, balancing multiple priorities.
• Commitment to continuous learning and staying updated on cybersecurity trends and technologies.
• Familiarity with scripting languages such as Python, PowerShell, or Bash to analyze security data, parse logs, and identify potential threats or anomalies during investigations.

Benefits

• Professional development opportunities
• Flexible working arrangements