Enterprise Security Architect - Security Detection and Response

Description

ING Hubs Poland is hiring!

Nr ref.

• REQ-10113963

Spółka

• ING Hubs

Kategoria

• IT Architecture

Lokalizacja

• Katowice, Poland

Data publikacji

• 29/04/2026

Poziom stanowiska

• Professional

Your responsibilities

• translates business strategy into architecture designs,

• provide short-term and long-term architectures,

• aligns roadmaps with architecture designs,

• actively monitors market trends and matures architecture designs based on industry best practices,

• acts as a bridge between security operations, enterprise architecture, and senior stakeholders.

You'll get extra points for

• experience with Cloud and SaaS monitoring (Azure, GCP).

Enterprise Security Architect

• As a Enterprise Security Architect with a strong focus on security monitoring, threat detection, and incident response, you will be responsible for designing and developing security detection and response capabilities in complex enterprise environments.You will shape and improve the technical architecture of SOC capabilities, ensuring high detection quality, effective response mechanisms, and alignment with regulatory and business requirements.

We are looking for you, if you

• have strong analytical mindset combined with pragmatism,

• have at least 7 years of work experience in IT security, including a minimum of 3 years in a security architecture role,

• have previous experience in the financial services sector or other highly regulated environments,

• have strong understanding of the Security Monitoring Technology Landscape (SIEM, SOAR, UEBA, NDR, EDR/XDR), with hands-on design and implementation experience

• have good understanding of Artificial Intelligence concepts and the practical applications of AI/ML in the modern SOC,

• are able to interpret regulatory and compliance requirements,

• have good understanding of risk management principles and experience in conducting and supporting risk assessments,

• are able to integrate security tooling across network, endpoint, cloud and identity layers,

• have end‑to‑end security architecture perspective (prevent → detect → respond → recover),

• are able to write security architecture documentation and present to both technical and non-technical stakeholders,

• can focus on detection quality and business relevance, not tool‑driven security,

• are certified in architecture and security (TOGAF or ArchiMate or SABSA and CISSP or CISA or CISM).