Cyber Incident Responder & Threat Hunter

Orsted Germany; Warszawa; Hybrid; PLN 200,000 - 320,000; Full time

Job summary

Ørsted is seeking a cybersecurity Incident Response Lead to take charge of incident handling, threat hunting, and forensic investigations. You’ll protect our assets, employees, and IP across IT and OT environments, working within the Cyber Defence Centre.

You’ll collaborate with security teams, vendors, and authorities worldwide, maintaining 24/7 readiness, documenting findings, updating playbooks, and driving improvements to our security posture through hands-on analysis and rapid containment.

Qualifications

• Have incident response experience and broad knowledge of logs, network captures, and forensic images.
• Experience with SIEM/XDR and networking technologies.
• Strong communication skills for stakeholders and team

Responsibilities

• Lead incidents and act as a technical analyst in cyber response across IT and OT globally.
• Analyze security events and incidents to identify root cause and impact.
• Inform stakeholders and improve security posture through reporting and lessons learned.
• Collect incident data and coordinate analyses.
• Update incident analyst playbooks and drive forensic investigations to completion.
• Maintain 24/7 readiness to respond to cyber-attacks worldwide.

Skills

Incident response

SIEM

XDR

Networking

Forensics

GCFA/GCFE

Communication

Job description

Ørsted is seeking a cybersecurity Incident Response Lead to take charge of incident handling, threat hunting, and forensic investigations. You’ll protect our assets, employees, and IP across IT and OT environments, working within the Cyber Defence Centre.

You’ll collaborate with security teams, vendors, and authorities worldwide, maintaining 24/7 readiness, documenting findings, updating playbooks, and driving improvements to our security posture through hands-on analysis and rapid containment.