# Senior/Lead Security Engineer (Detection & Response)

**Company**: Fuse Energy
**Location**: Poland
**Work arrangement**: remote
**Experience**: senior
**Job type**: Full-time
**Category**: IT
**Industry**: Energy

**Apply**: https://jobs.workable.com/view/gRRvHJC69juKAT87PQ9eMB/remote-senior%2Flead-security-engineer-(detection-%26-response)-in-poland-at-fuse-energy?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_d31f8984-0a0

## Description

Fuse Energy is seeking a Senior or Lead Security Engineer (Detection & Response) to build out the next generation of detection systems. The successful candidate will sit within the team responsible for security across Fuse Energy's IT and cloud environment, spanning AWS, identity, endpoints, SaaS and data center infrastructure.

The role involves owning security monitoring and detection end-to-end: anticipating how systems could be compromised, ensuring the right telemetry is in place to detect it, and building detections and response workflows to act on it.

Key responsibilities include:

- Owning security monitoring and detection across AWS, identity, endpoints, SaaS, networks and data center environments

- Building and maintaining telemetry and logging pipelines needed to detect security incidents

- Leading security investigations and incident response from detection through containment, recovery and post-mortem

- Proactively hunting for threats and identifying gaps in visibility, controls and detection coverage

- Building automation to improve detection, investigation and response

- Working closely with IT and Engineering to turn security findings into preventative controls and better system design

- Developing and testing incident response playbooks and continuously improving response capability

- Implementing and enhancing internal AI agents and security bots

Requirements:

- Significant hands-on experience in detection engineering, security engineering, incident response, threat hunting or a similar technical role

- Strong understanding of cloud environments, ideally AWS, and how to monitor them for unauthorised or suspicious activity

- Strong networking fundamentals and an understanding of how attackers move through networks and systems

- Strong understanding of attacker tradecraft and the ability to turn it into useful, high-signal detections

- Experience investigating real security incidents and taking ownership through to resolution

- Strong scripting or programming skills, ideally Python

- Experience with security monitoring and response tooling such as SIEM, EDR, SOAR or equivalent

- Strong systems thinking and a natural instinct for asking 'how would we know if this was compromised?'

- Comfortable working autonomously and closely with IT and Engineering teams

- Curious about emerging AI capabilities and proactive in experimenting with AI-assisted development, automation and security workflows.

Preferred skills include experience with:

- AWS security telemetry including CloudTrail, GuardDuty, VPC Flow Logs and IAM

- Detection-as-code, Sigma, Git-based detections and automated testing

- CrowdStrike, SentinelOne, Defender or another EDR

- Network security monitoring, PCAP, NetFlow/sFlow or firewall telemetry

- Digital forensics, threat intelligence, purple teaming or security validation

- Data centre or colocation security, including OOB networks and BMC/IPMI

- Security automation, AI-assisted development or applying AI/LLMs to security engineering and operations

- Energy, trading, fintech, critical infrastructure or other high-value-target environments

Benefits include:

- Competitive salary and eligibility for equity

- Biannual bonus scheme

- Fully expensed tech to match needs

- Private health insurance

- Breakfast and dinner allowance for office-based employees

## Skills

### Required
- cloud security
- security monitoring
- incident response
- threat hunting
- scripting
- programming
- SIEM
- EDR
- SOAR
- AWS
- networking fundamentals
- attacker tradecraft

### Nice to have
- AWS security telemetry
- detection-as-code
- Sigma
- Git-based detections
- automated testing
- CrowdStrike
- SentinelOne
- Defender
- network security monitoring
- PCAP
- NetFlow/sFlow
- firewall telemetry
- digital forensics
- threat intelligence
- purple teaming
- security validation
- data centre security
- colocation security
- OOB networks
- BMC/IPMI
- security automation
- AI-assisted development

---

Source: [Apply at jobs.workable.com](https://jobs.workable.com/view/gRRvHJC69juKAT87PQ9eMB/remote-senior%2Flead-security-engineer-(detection-%26-response)-in-poland-at-fuse-energy?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)