Cyber Incident Responder - On-Call IR Expert

Andersen; Województwo mazowieckie; On-site; PLN 150,000 - 230,000; Full time

Benefits offered by this job

Private health insurance

Sports compensation

Mentoring program

Job summary

Andersen is hiring a Cybersecurity Incident Responder to safeguard critical systems and manage security incidents in a complex international environment. The role focuses on incident response, digital forensics, and coordinating with client IT teams across multiple jurisdictions.

Your responsibilities include leading full incident lifecycles, performing cloud and endpoint forensics, and developing IR playbooks. On-call rotations and ongoing training ensure strong readiness.

Qualifications

• 5+ years in cybersecurity with 3+ years in incident response.
• End-to-end handling of real incidents (e.g. ransomware, data exfiltration).
• Hands-on EDR/XDR experience with Defender for Endpoint, CrowdStrike, SentinelOne.
• Forensic tools and techniques: memory/disk analysis, Windows/Linux artifacts.
• Experience with Microsoft 365, Entra ID and Azure environments.
• Strong knowledge of NIST SP 800-61 or SANS incident handling.
• English level Upper-Intermediate or higher.

Responsibilities

• Triage, containment, eradication, recovery and lessons learned for incidents.
• Perform digital forensics on endpoints, servers, and cloud workloads.
• Investigate escalated SOC alerts and determine scope and impact.
• Coordinate response with clients, IT teams and management.
• Develop and maintain IR playbooks and runbooks; run tabletop exercises.
• Write incident reports, root cause analyses, and remediation recommendations.
• Participate in on-call rotation with rapid response times.

Skills

Incident response

Digital forensics

Security operations

On-call readiness

Tools

Microsoft Defender for Endpoint

CrowdStrike

SentinelOne

Volatility

KAPE

Velociraptor

FTK/EnCase

Windows artifacts

Linux artifacts

Microsoft 365

Entra ID

Azure

Job description

Andersen is hiring a Cybersecurity Incident Responder to safeguard critical systems and manage security incidents in a complex international environment. The role focuses on incident response, digital forensics, and coordinating with client IT teams across multiple jurisdictions.

Your responsibilities include leading full incident lifecycles, performing cloud and endpoint forensics, and developing IR playbooks. On-call rotations and ongoing training ensure strong readiness.