Cyber Incident Response Lead

EY; Województwo pomorskie; Sur place; PLN 180 000 - 280 000; Plein temps

Avantages offerts par ce poste

EY Badges

MBA option from Hult

Career Counselor

Private healthcare

Life insurance

Team sports

Language learning platform

Résumé du poste

EY Poland is seeking an experienced Incident Response Lead to join EY.AI security team, focusing on high-severity incidents across endpoint, network, identity, application and cloud environments. You will lead the technical response, coordinate containment, eradication and recovery, and contribute to the development of incident response playbooks.

You will mentor junior analysts, drive post-incident reviews, and help strengthen client security capabilities by sharing expertise and documenting

Qualifications

• Proven experience in incident response and security operations.
• Knowledge of MITRE ATT&CK framework and incident investigation methodologies.
• Experience with cloud platforms (AWS, Azure or Google Cloud).
• Strong communication under pressure and ability to mentor junior analysts.

Responsabilités

• Lead technical response to high-severity incidents.
• Confirm attack scope, impact, vectors and required actions.
• Analyze endpoint, network, identity, application and cloud telemetry.
• Reconstruct attack paths and prepare incident timelines.
• Mentor junior Incident Response Analysts and develop playbooks.
• Prepare technical sections of post-incident reports and participate in reviews.

Connaissances

Incident Response

Security Operations

Digital Forensics

Threat Hunting

Cyber Defence

Communication Skills

Mentoring

Outils

SIEM

EDR/XDR

NDR

SOAR

Windows

Linux

Active Directory

Microsoft Entra ID

Description du poste

EY Poland is seeking an experienced Incident Response Lead to join EY.AI security team, focusing on high-severity incidents across endpoint, network, identity, application and cloud environments. You will lead the technical response, coordinate containment, eradication and recovery, and contribute to the development of incident response playbooks.

You will mentor junior analysts, drive post-incident reviews, and help strengthen client security capabilities by sharing expertise and documenting