Cyber Security Engineer / Cyber tooling SME

The Cyber Tooling SME Engineer at Haleon in Poznan, Poland, is a technical role responsible for the design, implementation, optimization, and ongoing support of the organization’s cybersecurity tooling. You will provide deep technical expertise to ensure effective delivery, integration, and daily operations of cybersecurity tools and platforms, including Microsoft cyber tooling, EDR/XDR, SIEM, CSPM, and related security technologies. Reporting to the Cyber Tooling Product Manager, you will collaborate with architecture and engineering teams to translate solution designs into robust, secure, and maintainable systems in a complex enterprise environment.

Responsibilities

• Act as the subject matter expert for the design, build, configuration, integration, and optimization of cybersecurity tooling solutions, with deep expertise in Microsoft cyber tooling, EDR/XDR, SIEM, CSPM, and related platforms.
• Lead the technical implementation and deployment of new cybersecurity tooling capabilities and enhancements.
• Provide expert engineering support for day-to-day BAU operations, maintenance, troubleshooting, and performance tuning of cybersecurity tooling platforms.
• Collaborate with the Cyber Tooling Product Manager, Solution Architects, and delivery teams to ensure solutions are implemented effectively and meet business and security requirements.
• Develop and maintain technical standards, configuration baselines, automation scripts, and operational procedures for cybersecurity tooling systems.
• Support incident response and problem management activities related to cybersecurity tooling, including root cause analysis and permanent fixes.
• Mentor and provide technical guidance to junior engineers and team members on cybersecurity tooling technologies.
• Monitor system performance, availability, and capacity, and drive continuous improvement and automation initiatives.
• Contribute to the evaluation and selection of new cybersecurity tools or enhancements within the tooling domain.

Your Profile:

• Required: Bachelor’s degree or equivalent relevant work experience; 5 years in IT with at least 3 years of hands-on engineering experience in cybersecurity tooling; CISSP or CISM (or equivalent); expert-level knowledge of Microsoft cyber tooling, EDR/XDR, SIEM, CSPM, and related security platforms; strong engineering and implementation skills including configuration, integration, scripting, and troubleshooting; problem-solving and analytical abilities focused on operational stability and security; ability to translate solution designs into practical, maintainable engineering deliverables; stakeholder management and communication skills; proven mentoring and knowledge-sharing capabilities; understanding of how cybersecurity tooling supports risk reduction and security operations; up-to-date knowledge of current and emerging cyber threats and defensive tooling technologies.

• Preferred: Master’s degree or equivalent; 8+ years in IT with at least 5 years of specialized experience in Microsoft cyber tooling, EDR/XDR, SIEM, CSPM, or enterprise security tooling platforms; deep hands-on expertise with Microsoft Defender suite, Microsoft Sentinel, Purview, EDR/XDR platforms, SIEM solutions, CSPM tools, and related security technologies; experience in tooling integration, automation, orchestration (including SOAR), and large-scale deployments in hybrid or multi-cloud environments; proven track record in implementing and supporting complex cybersecurity tooling solutions; experience with scripting and automation (PowerShell, Python, REST APIs); knowledge of GDPR, NIS Regulations, ISO 27001; strong communication and collaboration skills.

• Location details: Poznan Business Garden, Poznan, Poland.