Cyber Response Team Lead: Hands-On Security Leader

Aviva plc; Województwo mazowieckie; Hybrid; PLN 180,000 - 320,000; Full time

Benefits offered by this job

Performance Bonus

Private medical care

Cafeteria system of benefits

Additional parental leave

Two extra weeks of wellbeing leave

Job summary

Aviva plc is hiring a Cyber Response Technical Team Lead to manage a team of Senior Cyber Security Analysts within our Global Security Operations Centre (GSOC) in Poland. The role blends hands-on investigation with people leadership, guiding incident response across endpoints, networks, and cloud environments.

You will coach and develop the team, coordinate workload and on-call rotations, and work closely with stakeholders to improve playbooks, automation, and threat detection.

Qualifications

• 6+ years in Cyber Security with hands-on SOC/IR/DFIR experience.
• Minimum 2 years of proven people management.
• Experience leading responses to complex and high-severity incidents.
• Fluent Polish and English, both spoken and written.
• Strong knowledge of MITRE ATT&CK and modern investigation methods.

Responsibilities

• Lead and manage a team of Senior Cyber Security Analysts/Incident Responders.
• Own team performance, engagement, development plans, and career progression.
• Coordinate day-to-day activities, workload prioritisation, resource allocation, and on-call rotations.
• Lead hands-on investigations, containment, eradication and recovery during incidents.
• Develop and improve incident response playbooks, detection capabilities, and procedures.

Skills

Security Operations

Incident Response

People Management

Lead Incident Investigations

MITRE ATT&CK

SOAR / Automation

AI in Security

Education

Relevant certifications (GCIH, GCFA, GCFE, CISSP, OSCP or SC-200)

Tools

KQL

PowerShell

Python

SIEM/XDR

Job description

Aviva plc is hiring a Cyber Response Technical Team Lead to manage a team of Senior Cyber Security Analysts within our Global Security Operations Centre (GSOC) in Poland. The role blends hands-on investigation with people leadership, guiding incident response across endpoints, networks, and cloud environments.

You will coach and develop the team, coordinate workload and on-call rotations, and work closely with stakeholders to improve playbooks, automation, and threat detection.