The Role
Leads a global MDR security operations team responsible for monitoring, triaging, investigating, and escalating data security incidents. Oversees technical escalations, customer communications, documentation, SLA delivery, analyst recruitment, onboarding, training, performance reviews, and operational improvement. Supports development and maintenance of detection systems, playbooks, runbooks, and MDR processes while collaborating with customers and internal teams.
Summary Generated by Built In
Summary
Data has never been more valuable and vulnerable. As cybercriminals become more sophisticated and regulations more strict, organizations struggle to answer one key question: “Is my data safe?"
At Varonis, we see the world of cybersecurity differently. Instead of chasing threats, we believe the most practical approach is protecting data from the inside out. We’ve built the industry’s first fully autonomous Data Security Platform to help our customers dramatically reduce risk with minimal human effort.
At Varonis, we move fast. We’re an ultra-collaborative company with brilliant people who care deeply about the details. Together, we’re solving interesting and complex puzzles to keep the world’s data safe.
Position Overview:
Varonis MDR team is at the forefront of worldwide data detection and response services. We lead and redefine how data should be monitored, and protected and how data breach incidents should be handled. It’s a 24/7 global security service assisting customers to investigate and respond to security incidents.
We are seeking an experienced MDR Team Lead who will oversee a team of MDR Security Analysts. This oversight includes training and developing the knowledge and skills needed to execute the MDR mission, ensuring adherence to all operating policies and procedures, ensuring the delivery of the MDR service within all SLAs, and serving as a point of technical and operational escalation for MDR analysts. Data is the #1 target of attackers, and Varonis' Managed Data Detection and Response (MDDR) customers entrust our team with the security of their data. MDR Team Leads are the lynchpin of MDR operations, ensuring the team is working 24x7 to monitor, triage, investigate, and escalate incidents where data is at risk and to ensure we meet operational SLAs. Location & Working Model:
This is a fully remote position based in Poland. The role follows standard daytime business hours. As part of Varonis' global 24/7 MDDR service, analysts collaborate with teams across multiple regions and time zones to provide continuous customer coverage.
This is a fully remote position based in Poland. The role follows standard daytime business hours. As part of Varonis' global 24/7 MDDR service, analysts collaborate with teams across multiple regions and time zones to provide continuous customer coverage.
Responsibilities:
Technical and operational escalation point for investigations, incidents, and other elements of the MDR service.
- Validate findings and coordinate investigative efforts with customers and internal teams.
- Ensure all investigative findings are documented and communicated appropriately by the team, including tracking in CRM.
- Lead or attend customer calls and represent the MDR service when required.
Team Management:
- Lead the recruitment and onboarding of new team members.
- Continuously train the team so they are equipped with the required skills and knowledge to effectively execute the MDR service.
- Conduct regular performance reviews and quarterly SWOT analyses to drive team growth and development.
- Develop strong work relationships within the MDR Team as well as with other departments ex. Product Support, Product Management, Engineering.
Service Management:
- Assist in the development, documentation, analysis, testing, and modification of Varonis’ threat detection systems, playbooks, runbooks, and the MDR Team operations.
- Maintain up-to-date knowledge of all aspects of the MDR service.
- Oversee and execute programs, projects, operational tasks, and responsibilities related to the MDR service.
Requirements:
- Proven success in leading and managing within a team-oriented environment.
- 4+ years of experience working in cybersecurity operations in a global cybersecurity company
- 2+ years of experience leading a team.
- Degree or certification(s) in cybersecurity and/or proven ability to execute across cybersecurity operations disciplines, including monitoring, detection, investigation, and incident response.
- Proven ability to deliver security operations service while meeting SLA and other operational requirements.
- Knowledge of common security technologies and tools including network-based (firewall and IDS), host-based (EDR and AV), data-based (DLP and DSPM), and identity-based (PAM and IAM).
- Proven ability to creatively problem-solve when handling complex issues.
- Strong analytical and critical thinking skills.
- Excellent communication skills in English (written and oral) and interpersonal skills (direct reports, colleagues, and customers).
- Attention to detail and the capability to deliver outcomes autonomously.
We invite you to check out our Instagram Page to gain further insight into the Varonis culture!
@VaronisLife
Varonis is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, and other legally protected characteristics.
#LI-Remote
Skills Required
- Proven success leading and managing within a team-oriented environment
- 4+ years of experience in cybersecurity operations at a global cybersecurity company
- 2+ years of experience leading a team
- Degree or certifications in cybersecurity, or demonstrated capability across monitoring, detection, investigation, and incident response
- Ability to deliver security operations services while meeting SLAs and operational requirements
- Knowledge of network-based security technologies, including firewalls and IDS
- Knowledge of host-based security technologies, including EDR and antivirus
- Knowledge of data-based security technologies, including DLP and DSPM
- Knowledge of identity-based security technologies, including PAM and IAM
- Creative problem-solving ability when handling complex issues
- Strong analytical and critical-thinking skills
- Excellent written and oral English communication skills and interpersonal skills
- Attention to detail and ability to deliver outcomes autonomously
Varonis Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Varonis and has not been reviewed or approved by Varonis.
-
Healthcare Strength — Healthcare coverage is positioned as comprehensive, including medical, dental, and vision options that start immediately in some locations. The package is frequently characterized as a strong part of the overall rewards offering alongside other core benefits.
-
Retirement Support — Retirement benefits include a 401(k) with company matching (or a pension plan by region), which strengthens the long-term value of the package. Participation is complemented by additional ownership programs that increase total-rewards attractiveness.
-
Equity Value & Accessibility — Equity-related rewards such as stock options and an employee stock purchase plan (ESPP) are a notable part of the total compensation mix. These elements are often cited as helping offset middling perceptions of base pay, especially where equity participation is accessible.
Varonis Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Varonis is a pioneer in data security and analytics, fighting a different battle than conventional cybersecurity companies. Varonis focuses on protecting enterprise data on premises and in the cloud: sensitive files and emails; confidential customer, patient and employee data; financial records; strategic and product plans; and other intellectual property. The Varonis Data Security Platform detects insider threats and cyberattacks by analyzing data, account activity, perimeter telemetry, and user behavior; prevents and limits disaster by discovering, classifying and locking down sensitive, regulated and stale data; and efficiently sustains a secure state with automation. With a focus on data security, Varonis serves a variety of use cases including data protection, threat detection and response, and compliance. Varonis started operations in 2005 and, as of December 31, 2018, had approximately 6,600 customers worldwide — comprised of industry leaders in many sectors including technology, consumer, retail, financial services, healthcare, manufacturing, energy, media, and education.
