Enterprise Security Architect - Security Detection And Response

Details

Overview

ING Hubs Poland is hiring an Enterprise Security Architect with a strong focus on security monitoring, threat detection, and incident response. The role is responsible for designing and developing security detection and response capabilities in complex enterprise environments.

You will shape and improve the technical architecture of SOC capabilities, ensuring high detection quality, effective response mechanisms, and alignment with regulatory and business requirements.

The team works in a multidisciplinary, international security architecture center of expertise, focusing on developing and maturing security capabilities to better protect the Bank and its customers.

In the global ING job architecture, the role is named “Architect IV” or “Architect V”.

Responsibilities

• Translate business strategy into architecture designs.
• Provide short-term and long-term architectures.
• Align roadmaps with architecture designs.
• Actively monitor market trends and mature architecture designs based on industry best practices.
• Act as a bridge between security operations, enterprise architecture, and senior stakeholders.

Requirements

You may be a good fit if you:

• Have a strong analytical mindset combined with pragmatism.
• Have at least 7 years of work experience in IT security, including a minimum of 3 years in a security architecture role.
• Have previous experience in the financial services sector or other highly regulated environments.
• Have a strong understanding of the Security Monitoring Technology Landscape, including SIEM, SOAR, UEBA, NDR, EDR/XDR, with hands-on design and implementation experience.
• Have good understanding of Artificial Intelligence concepts and the practical applications of AI/ML in the modern SOC.
• Can interpret regulatory and compliance requirements.
• Have good understanding of risk management principles and experience conducting and supporting risk assessments.
• Are able to integrate security tooling across network, endpoint, cloud and identity layers.
• Have an end-to-end security architecture perspective (prevent → detect → respond → recover).
• Can write security architecture documentation and present to both technical and non-technical stakeholders.
• Focus on detection quality and business relevance, not tool-driven security.
• Are certified in architecture and security (TOGAF or ArchiMate or SABSA and CISSP or CISA or CISM).

English level: C1

Extra points

• Experience with Cloud and SaaS monitoring (Azure, GCP).

Location and work type

• Location: Katowice (Zabrzka 19)
• Time type: Full time