Cyber Response Technical Team Lead

Aviva Services Excellence Centre; Województwo mazowieckie; Hybrid; PLN 180,000 - 320,000; Full time

Benefits offered by this job

Contract of employment

Performance Bonus

Private medical care

Cafeteria benefits

Employee Shares Plan

Hybrid work model in Poland

Job summary

Aviva Services Excellence Centre poszukuje lidera GSOC odpowiedzialnego za prowadzenie zespołu Senior Cyber Security Analysts/Incident Respondents. Osoba na tym stanowisku będzie odpowiedzialna za rozwój zespołu, priorytetyzację zadań i skuteczne zarządzanie operacjami bezpieczeństwa.

Wymagana jest silna znajomość cyberbezpieczeństwa, doświadczenie w prowadzeniu dochodzeń i eskalacjach, a także umiejętność implementacji automatyzacji i AI w procesach reagowania na incydenty.

Qualifications

• Minimum 5+ years of cyber security leadership experience.
• Experience coaching senior analysts and incident responders.
• Strong knowledge of endpoint, network and cloud security.
• Ability to coordinate GSOC incidents and post-incident reviews.

Responsibilities

• Lead and manage a team of Senior Cyber Security Analysts/Incident Responders.
• Own team performance, engagement, and career progression.
• Coordinate day-to-day activities, workload prioritization, resource allocation, and scheduling.
• Act as the primary GSOC escalation point for high-severity incidents.
• Drive automation and AI adoption in security operations.

Skills

Team leadership

Incident response

Cybersecurity expertise

Coaching & mentoring

Resource planning

GSOC operations

Automation initiatives

AI in security

Cross-functional collaboration

Threat detection

Tools

KQL

PowerShell

Python

Job description

Nasze wymagania:

• Leading and managing a team of Senior Cyber Security Analysts/Incident Responders


• Owning team performance, engagement, development plans, and career progression.


• Providing coaching, mentoring, and technical leadership to enhance team capabilities and expertise.


• Coordinating day-to-day activities, workload prioritization, resource allocation, and team scheduling.


• Managing team capacity planning, on-call rotations, shift coverage, and operational readiness.


• Acting as the primary GSOC escalation point for complex and high‑severity cyber security incidents.


• Leading and supporting hands-on investigations, containment, eradication, and recovery activities during cyber incidents.


• Providing advanced technical guidance across endpoint, network, cloud, identity, and threat investigations.


• Ensuring high‑quality incident response practices, investigation standards, and operational excellence.


• Coordinating incident response activities with internal stakeholders, customers, and other Cyber Security teams.


• Driving post‑incident reviews from the GSOC perspective and ensuring lessons learned are translated into measurable improvements.


• Identifying skill gaps and developing training, knowledge‑sharing, and capability‑building initiatives.


• Supporting recruitment, onboarding, succession planning, and retention of cyber security talent within GSOC.


• Acting as a Subject Matter Expert (SME) in Cyber Security projects, strategic initiatives, and customer engagements.


• Providing expert input into the design, implementation, and enhancement of cyber security services and capabilities.


• Driving continuous improvement of incident response processes, fine‑tuning of detection rules, playbooks, tooling, and operational procedures.


• Championing automation initiatives to improve GSOC efficiency, investigation quality, and response times.


• Driving adoption and effective use of AI and emerging technologies across GSOC and other relevant areas where required.


• Collaborating with Detection Engineering, Cyber Incident Management, Threat Hunting, Threat Intelligence, Security Engineering, and Product teams to enhance cyber defence capabilities.


• Staying current with emerging threats, attacker techniques, and industry best practices to strengthen response capabilities.


• Contributing to the strategic development and maturity of the organization's Cyber Response and Security Operations functions.

Mile widziane:

• Industry certifications such as GCIH, GCFA, GCFE, CISSP, OSCP or SC-200.


• Experience with KQL, PowerShell or Python and security automation.

Zakres obowiązków:

• Leading and managing a team of Senior Cyber Security Analysts/Incident Responders


• Owning team performance, engagement, development plans, and career progression.


• Providing coaching, mentoring, and technical leadership to enhance team capabilities and expertise.


• Coordinating day-to-day activities, workload prioritization, resource allocation, and team scheduling.


• Managing team capacity planning, on‑call rotations, shift coverage, and operational readiness.


• Acting as the primary GSOC escalation point for complex and high‑severity cyber security incidents.


• Leading and supporting hands‑on investigations, containment, eradication, and recovery activities during cyber incidents.


• Providing advanced technical guidance across endpoint, network, cloud, identity, and threat investigations.


• Ensuring high‑quality incident response practices, investigation standards, and operational excellence.


• Coordinating incident response activities with internal stakeholders, customers, and other Cyber Security teams.


• Driving post‑incident reviews from the GSOC perspective and ensuring lessons learned are translated into measurable improvements.


• Identifying skill gaps and developing training, knowledge‑sharing, and capability‑building initiatives.


• Supporting recruitment, onboarding, succession planning, and retention of cyber security talent within GSOC.


• Acting as a Subject Matter Expert (SME) in Cyber Security projects, strategic initiatives, and customer engagements.


• Providing expert input into the design, implementation, and enhancement of cyber security services and capabilities.


• Driving continuous improvement of incident response processes, fine‑tuning of detection rules, playbooks, tooling, and operational procedures.


• Championing automation initiatives to improve GSOC efficiency, investigation quality, and response times.


• Driving adoption and effective use of AI and emerging technologies across GSOC and other relevant areas where required.


• Collaborating with Detection Engineering, Cyber Incident Management, Threat Hunting, Threat Intelligence, Security Engineering, and Product teams to enhance cyber defence capabilities.


• Staying current with emerging threats, attacker techniques, and industry best practices to strengthen response capabilities.


• Contributing to the strategic development and maturity of the organization's Cyber Response and Security Operations functions.

Oferujemy:

• Contract of employment


• Performance Bonus


• Private medical care (ENEL-MED)


• Cafeteria system of benefits (e.g. MultiSport card)


• Additional parent privileges:


• baby leave - 6 weeks leave for second parent


• shortened working time after parental leave


• Employer-funded group insurance


• Employee Shares Plan


• Extra day off for birthday


• Paid time off to volunteer


• Additional leave acquired over the years in the company (even 5 days more in a year)


• Wellbeing Leave - additional two weeks paid leave after 10 years of service


• Psychological support consultations


• Access to the e-learning platforms


• Internal employee referral program


• Hybrid working model from Poland with a few days in Warsaw office per month


• Attractive office location in Warsaw - Gdański Business Center

Additional entitlements for people with disabilities - Work Without Barriers

Work environment that promotes diversity - Diversity Charter