Top Cybersecurity Jobs in Poland

Build and scale low-latency AI serving infrastructure for SLMs, prompt-injection engines, and classification services. Architect GPU-accelerated inference pipelines, backend microservices, Kubernetes clusters, rate limiting, tenant guardrails, monitoring, and autoscaling systems. Develop continuous evaluation, retraining, model CI/CD, regression gates, and MLOps/LLMOps pipelines while improving service reliability, latency, cost efficiency, and detection quality.

Build and harden Chromium-based browser components in C++ for AI and browser security. Develop prompt-injection and Shadow AI detection, integrate AI agents, MCP servers, and CDP, and support networking and HTTP security capabilities. Build tooling and detection services with Python or Rust, deploy cloud infrastructure on AWS or GCP using Kubernetes and Terraform, and optimize high-scale systems across browser and backend environments.

Own and continuously improve QIAGEN’s Information Security Management System and ISO 27001 certification framework. Develop security policies, support audits and regulatory compliance, conduct risk assessments and gap analyses, track remediation, advise stakeholders, and contribute to security awareness and threat monitoring across a multinational organization.

Conduct security-focused functional, verification, and validation testing for industrial networking products. Create test plans and cases, execute Ethernet and network security tests, analyze Achilles, Defensics, and penetration-testing reports, investigate vulnerabilities, and verify fixes. Collaborate with PSIRT teams, develop automation strategies, troubleshoot complex networking implementations, document results, and support product reliability across Rockwell Stratix and Cisco IE networking solutions.

Lead security architecture for AI-powered products, internal AI tooling, LLM features, and agentic workflows. Responsibilities include threat modeling, security design reviews, AI guardrails, third-party model risk assessment, cloud-native security controls, AI governance translation, red teaming, and executive risk communication. The role partners with Engineering, Product, Data, IT, Legal, and GRC teams and may involve occasional travel of up to 10–25%.

Leads EU SOC operations while performing hands-on Tier 2/Tier 3 security analysis, incident response, threat hunting, malware and attack investigation, and customer escalations. Coaches analysts, coordinates workload, monitors service metrics, improves operational processes, and supports onboarding. Requires significant SOC or MDR experience, strong Windows and networking knowledge, expertise in at least two security disciplines, fluent English, and fluent French or German. The position is Poland-based with rotating weekend schedules.

Monitor and analyze security events from firewalls, IDS, IPS, SIEM, WAF, and other sources. Respond to threats and customer tickets within SLAs, tune security devices, investigate incidents, communicate with customers, and follow escalation procedures and security best practices.

Provide Tier 3 escalation and advanced security analysis for MDR and MXDR customers. Investigate critical endpoint alerts, reconstruct attack chains across cloud, identity, email, network, and endpoint environments, respond to active breaches, conduct threat hunting, and research emerging threats, malware, actors, and TTPs. Develop hunting queries and threat alerts using OSINT, while communicating findings to SOC analysts, customers, and executives. The role requires fluent German or French and English and is based in Poland on a rotating schedule.

Provides senior-level 24/7 security operations monitoring and response for managed-service customers. Analyzes complex endpoint security events, investigates threats, tunes and baselines detection tools, improves security processes, and supports incident response. The role serves as a technical escalation point for analysts, DFIR teams, and clients; mentors team members; manages customer communications; and participates in rotating on-call coverage. German is strongly advantageous, while English fluency is required.

Provides day-to-day IT support for Poland-based teams while serving as Regional Information Security Manager for the EURA region. Responsibilities include Microsoft 365 administration, hardware and asset management, ServiceNow support, Azure migration, budget tracking, security policy implementation, risk assessment, incident coordination, privileged-access approvals, audits, awareness training, vendor compliance, reporting, and documentation.

Leads integrated security, cybersecurity, critical infrastructure protection, resilience, regulatory compliance, preparedness, and incident management for Equinor’s offshore wind operations in Poland. Coordinates IT, OT/ICS, physical security, supply-chain, continuity, assurance, and stakeholder activities; engages regulators and authorities; translates Polish and EU requirements into governance and controls; and advises senior management on risks, threats, compliance, and resilience improvements.

Operates and supports network security infrastructure in a data center environment, handling incidents, changes, service requests, troubleshooting, root cause analysis, monitoring, and technical configurations. Provides 24/7 on-call support, manages vendor escalations, and maintains documentation and process standards. Requires extensive enterprise network security experience with Juniper, Fortinet, F5, firewalls, routing, switching, VPNs, authentication, and load balancing.

Patrols and monitors hospital premises, surveillance systems, access points, and personnel to maintain safety and security. Responds to emergency codes, radio dispatches, complaints, and requests for personal protection. Controls traffic, prepares incident reports, conducts witness interviews, supports workplace violence prevention, and applies approved defensive tactics. Maintains compliance with hospital safety, HIPAA, emergency preparedness, and public safety procedures while providing professional customer service.

Maintains a safe hospital environment by patrolling premises, monitoring surveillance and access points, responding to emergencies and dispatches, providing personal protection and traffic control, documenting incidents, and supporting workplace violence prevention. Communicates with patients, visitors, staff, and management while following safety, HIPAA, emergency preparedness, and public safety procedures.

Conduct security audits of Atlassian Cloud environments, including Jira, Confluence, customer portals, Marketplace applications, APIs, and Rovo. Assess identity and access controls, vulnerabilities, data exposure, AI-related risks, and governance gaps. Produce evidence-based audit reports with prioritized risks and remediation recommendations, then develop remediation roadmaps aligned with Atlassian best practices and enterprise security standards.

Manage user access, support information security management systems and audits, triage vulnerability and phishing findings, maintain asset and risk registers, assist with incident response, and update security policies and procedures. The role focuses on corporate security, access management, vulnerability management, compliance, security awareness, and audit readiness.

Develops Application Security business across Poland by supporting complex sales, RFPs, demonstrations, proofs of concept, technical presentations, customer engagements, business planning, market analysis, feature prioritization, and internal sales enablement. Requires strong application security expertise, consultative selling, public speaking, presentation and demonstration skills, Polish and English fluency, and regional travel willingness.

Lead the DevSecOps and application security function, managing security engineers and defining strategy for secure software delivery. Drive SSDLC adoption, threat modeling, automated security testing, cloud and Kubernetes security, vulnerability management, security tooling, and remediation governance. Partner with Engineering, Platform, Product, and Information Security leaders to provide risk-informed guidance, establish security standards and metrics, and improve secure engineering practices while minimizing development friction.

Lead SecureChain’s security research and automation function. Own malicious-code detection, vulnerability discovery pipelines, static and dynamic analysis, fuzzing, evidence-based reproduction, AI-assisted patch generation, CNA operations, coordinated disclosure, and technical research publications. Build production-quality tools and services while improving detection accuracy, coverage, review workflows, and vulnerability remediation across multiple open-source package ecosystems.

Own end-to-end security for tokenized-asset infrastructure, including smart-contract audits, penetration testing, threat modeling, secure code review, custody and signing workflows, IAM, secrets management, detection, incident response, and remediation. Contribute TypeScript product engineering while partnering with engineering, security, CISO, compliance, auditors, and external assessors across blockchain and cloud environments.

Develops, tests, deploys, and improves cybersecurity detections using Detection-as-Code practices. Analyzes coverage against MITRE ATT&CK, partners with incident response and threat intelligence teams, tunes detections through adversary emulation and purple-team exercises, automates workflows, onboards telemetry, and maintains documentation. The role also supports AI and agentic-system detection strategy and participates in an engineering on-call rotation.

Leads advanced red team operations and offensive security research targeting enterprise infrastructure, security platforms, AI/ML systems, LLMs, APIs, and cloud environments. Conducts AI-focused penetration testing, develops exploits and offensive tooling, researches vulnerabilities, and evaluates adversary techniques. Partners with engineering and blue teams to improve security architecture, communicates strategic risk to leadership, publishes research, and mentors security professionals.

Lead advanced red team operations against enterprise infrastructure, security platforms, APIs, and AI/ML systems. Conduct AI and LLM penetration testing, vulnerability research, adversary emulation, exploit development, and offensive tooling. Assess cloud, MLOps, vector database, and model-hosting security while partnering with engineering and blue teams to improve defenses. Publish research, disclose vulnerabilities, present findings, mentor teams, and translate technical attack paths into executive risk assessments.

Own and operate the AI security runtime control plane across Azure, AWS, and GCP. Build inline AI enforcement, tune prompt-injection, data protection, tool-call, and agent access policies, and integrate security platforms with SIEM/SOC workflows. Lead L3 investigations, automated containment, cloud and Kubernetes security, DevSecOps controls, vendor evaluations, and closed-loop red-team remediation. The role requires automation, infrastructure-as-code security, multi-cloud identity management, incident response, and collaboration with technical leadership.

Provides L2 monitoring, triage, investigation, and escalation for AI and cloud security detections. Analyzes telemetry using KQL or SQL, maintains dashboards, and produces operational, compliance, and risk reporting. Investigates AI threats including prompt injection, jailbreaks, data leakage, agent hijacking, and unauthorized tool activity. Monitors Azure, AWS, and GCP posture, supports vulnerability and compliance remediation, documents cases, and partners with SOC, cloud, incident response, and engineering teams.