24/7 Cyber Security Operations Analyst

Haleon; Poznań; On-site; PLN 246,000 - 338,000; Full time

Benefits offered by this job

Contract of employment

Annual bonus

Fully on-site role with on-call duties

Private medical package

Multisport card

Pension plan membership

Learning paths and development tools

Generali Life insurance

Integration events

Family-friendly benefits

Job summary

Haleon in Poznań is seeking an experienced Cyber Security Operations professional to protect corporate assets and manage day-to-day cyber security defences. You will triage alerts, analyze events and incidents, and collaborate with Threat Intelligence to improve playbooks and runbooks.

Requirements include 3+ years in cybersecurity, 2+ years in a SecOps SOC, and experience across international manufacturing. A strong understanding of SIEM/EDR/XDR, firewalls, and incident response is essential.

Qualifications

• +3 years of professional experience in cybersecurity, with some experience of responding to significant cyber incidents involving Organised Crime and Nations State threat actors.
• +2 years of working in Cyber Security Operations Centre
• Experience working across international manufacturing.

Responsibilities

• Operate as part of a 24/7 Cyber Security Operations (SecOps) team that continuously monitors the security of the company.
• Undertake the timely triage of security alerts to allow for rapid incident detection and response.
• Perform deep-dive analysis of security events, logs, network traffic and forensic data to determine root cause, identifying suspicious and/or anomalous activities and taking appropriate action based on documented processes and procedures.
• Recommended modifications to internal defences and processes for more effective and efficient security operations.
• Manage security incidents through all phases of the incident response lifecycle from identification through to closure.
• Ensures that delegated response and remediation actions are completed in line with SLAs.
• Provides expert analytic investigative support of complex security incidents.
• Supports the tuning of all security tooling and the development of bespoke correlation rules / use cases aligned to business operations, internal risk profiles and current threat intelligence.
• Ensure that the automation and orchestration of day-to-day operations is maximised, and that analysis / response activities are performed as efficiently as possible.
• Execute L2/L3 event or incident response and investigations into suspicious activity.
• Generate post-incident reviews to ensure gaps are closed to prevent future events.
• Collaborate with Threat Intelligence to groom threat feeds and help translate findings.
• Help prioritize content, develop, and implement playbooks and runbooks

Skills

SecOps experience

Threat intel collaboration

Incident response

Communication

Team player

International manufacturing

Education

Security certifications (e.g., CISSP)

Tools

SIEM

EDR/XDR

Firewall/IDS/IPS

Job description

Haleon in Poznań is seeking an experienced Cyber Security Operations professional to protect corporate assets and manage day-to-day cyber security defences. You will triage alerts, analyze events and incidents, and collaborate with Threat Intelligence to improve playbooks and runbooks.

Requirements include 3+ years in cybersecurity, 2+ years in a SecOps SOC, and experience across international manufacturing. A strong understanding of SIEM/EDR/XDR, firewalls, and incident response is essential.