Security Engineer, Threat Response

Asana

At Asana, security is foundational to our mission of helping humanity thrive by enabling the world's teams to work together effortlessly. Our security team protects Asana's employees, users, and customers by proactively addressing threats and fostering a culture of security throughout our product and operations. We are looking for a collaborative, innovative Group Tech Lead to join our security organization in Warsaw. This is a senior technical leadership role that sits at the intersection of offensive and defensive security — a true purple team visionary who will design and drive Asana's threat operations strategy from the ground up. You will set the long-term technical direction for how we detect, emulate, respond to, and continuously improve our defences against real-world adversaries. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you’ll achieve * Purple Team Strategy & Technical Leadership: Define and own the technical strategy for a fully integrated purple team function, bridging offensive (red team) and defensive (blue team) capabilities into a cohesive, intelligence-driven program. * Adversary Emulation: Design and implement a structured adversary emulation programme based on real threat intelligence, ensuring red team exercises directly improve blue team detection and response playbooks while establishing continuous feedback loops. * Security Maturity & Industry Standards: Lead Asana's security maturity journey, defining a roadmap that progressively advances capabilities toward frameworks and standards such as NIST CSF, ISO 27001, SOC 2, and MITRE ATT&CK maturity levels. * Lifecycle Management: Develop, own, and continuously improve the end-to-end incident response lifecycle, including policies, playbooks, runbooks, and post-incident review processes. * Vulnerability Operations: Design and implement a comprehensive vulnerability management program covering discovery, risk-based prioritization, SLA tracking, and remediation validation. * Process Design & Operational Excellence: Architect scalable security operations processes that reduce manual toil through automation and orchestration, enabling the team to operate at high velocity without sacrificing quality. * Detection Engineering: Build and standardize detection engineering workflows, ensuring threat detections are systematically developed, tested, tuned, and retired in alignment with the current threat landscape. * AI-Driven Innovation: Identify, evaluate, and implement AI and machine learning capabilities to enhance the speed, accuracy, and coverage of threat detection, automated alert triage, root cause analysis, and incident summarization. * Organizational Leadership & Enablement: Provide technical mentorship to security engineers across red and blue team disciplines, integrate security best practices into cross-functional development pipelines, and deliver advanced training program. About you * 8+ years of progressive experience in security operations, threat detection and response, or offensive security, with at least 3 years in a senior technical leadership or principal engineering role. * Deep technical expertise across both red and blue team disciplines, with a proven track record of designing and leading a purple team or integrated threat operations programme at scale. * Strong command of SIEM platforms (e.g., Panther, Splunk, Elastic Security) for detection engineering, advanced log correlation, and extensive knowledge of EDR platforms (e.g., CrowdStrike, SentinelOne) for proactive threat hunting. * Expert-level familiarity with operationalizing adversary emulation frameworks (such as MITRE ATT&CK) and handling forensic analysis during complex incident investigations in large cloud-native environments. * Strong engineering and automation background utilizing scripting languages (e.g., Python, PowerShell) paired with exposure to SOAR platforms. * Strategic capability to translate business risk into a technical roadmap aligned to NIST CSF, ISO 27001, or SOC 2 standards, combined with strong technical process design skills. * Excellent communication and collaborative skills, with a track record of building cross-functional trust and explaining complex threat concepts clearly to engineering, product, legal, and executive teams alike. * Demonstrates curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making. At Asana, we're committed to building teams that include a variety of backgrounds, perspectives, and skills, as this is critical to helping us achieve our mission. If you're interested in this role and don't meet every listed requirement, we still encourage you to apply. What we’ll offer * Generous, transparent and fair compensation system (base salary and RSUs). * Contract of Employment (and the option of 50% tax deductible costs for author’s rights usage in respect of applicable roles). * Health insurance with dental and travel coverage (Lux Med). * Breakfast and lunch catering on the days that you work from the office. * Vacation allowance. * Career growth budget. * Home office setup budget. * Gym/Fitness card. * Fertility healthcare and family-forming support with Carrot. * Mental Health Support in Modern Health. * Group life insurance. * MacBooks with all necessary accessories. For this role, the estimated base salary range is between 35,000 – 52,000 PLN gross per month (subject to all taxes and necessary deductions). The actual base salary will vary based on various factors, including market and individual qualifications objectively assessed during the interview process. The listed range above is a guideline, and the base salary range for this role may be modified. In addition to base salary, your compensation package may include additional components such as equity and sales incentive pay (for most sales roles), and benefits. If you're interviewing for this role, speak with your recruiter to learn more about the total compensation and benefits for this role. About us Asana is a leading platform for human + AI collaboration. Millions of teams around the world rely on Asana to achieve their most important goals, faster. Asana has been named to Fortune's Best Workplaces for 7+ years and recognized by Fast Company, Forbes, and Gartner for excellence in workplace culture and innovation. We offer an exceptional office-centric culture while adopting the best elements of hybrid models to ensure that every one of our global team members can work together effortlessly. With 13+ offices all over the world, we are always looking for individuals who care about building technology that drives positive change in the world and a culture where everyone feels that they belong. Join Asana’s Talent Network to stay up to date on job opportunities and life at Asana.

Nomagic

Are you the kind of person who is comfortable getting hands-on with technical work — debugging a network issue, configuring an MDM policy — and equally at ease with working with external auditors to pass a compliance audit? Do you want to shape the future of security in the area of Physical AI? Do you want the kind of role where IT and security are yours to shape, not just operate? Would you like to cooperate with top professionals in our industry? If your answers are yes, then you should keep reading. At Nomagic, we're on a mission to teach robots the real world. We're now looking for a Senior IT & Security Engineer to own our internal IT and security. You'll keep our IT environment running well, our compliance program healthy, and our security posture at the level our customers expect.

The Dot Collective

ABOUT THE DOT COLLECTIVE We are a new generation consultancy based across UK and EU and founded on the premises of the engineering excellence and empowering people to make an impact.  We work with all modern tech stacks and typically run agile scrum on all our projects. ABOUT YOU Are you passionate about data and its transformational powers? Do you like being able to make a huge difference in a limited period of time? We might be just the right place for you. Your key skills and capabilities:  * Engage with either AWS or GCP cloud ecosystems to ensure best practise development for new and existing solutions  * Build, deploy and manage Cloud Infrastructure through with IaC concepts  * Hands on experience with serverless services such as AWS’ S3, Glue or Lake Formation and GCP’s Cloud Functions, Big Query or Data Fusion  * Integrate native cloud services with 3rd party solutions through the offered networking solutions  * Understanding of the Python ecosystem from local development to production environments  * Experience of DevOps approaches supported with Python  * Work within a delivery focused team using Agile methodologies  * Comfortable with Docker and some exposure to orchestration tools  * Review and implement security best practices within cloud environments  We expect you to know how to architect, design, develop, deploy and operate a data platform and be a good leader for your team.  OUR PROMISE TO YOU We will always see you as a human being and will do our very best to support your needs and wellbeing – well-designed co-working and collaboration spaces, remote working patterns that work for you, parenting leave, sabbaticals and ability to work on personal projects. We believe that a geled team is worth its weight in gold – we will do everything we can to avoid breaking well-performing teams. Whilst continuity across every project is not always possible, we thoughtfully assemble high-performing, blended teams with the appropriate levels of experience and expertise to deliver the best outcomes for our clients — and teams you’ll enjoy working with. We are committed to prioritising the wellbeing of our employees. To fulfill this promise, we provide a comprehensive employee wellbeing program that includes mental health support, flexible working arrangements, wellness activities, and a positive work culture. We recognise that the world of tech delivery has moved on significantly in the last 15 years and know a thing or two about how to bring projects over the line without experiencing lots of despair and burn-out. In fact, we like to believe that our projects are the opposite of that – they are run smoothly and most of the time are fun to work on.