Cyber Security Resilience Operations Specialist

SIX; Warszawa; Hybrid; PLN 140,000 - 200,000; Full time

Benefits offered by this job

Hybrid model up to 40% WFH

Private medical care

Life insurance

Meal allowance

Transport allowance

Electricity allowance

Sport card

Cinema tickets

Benefit system points

Up to 20 days working from abroad

Job summary

SIX in Warsaw is seeking a Cyber Security Resilience Operations Specialist to support day-to-day operations of Cyber Security Resilience services, with emphasis on service desk activities, operational follow-up and audit support.

You will act as the first operational layer for FIM, SCB (CIS Benchmarks), and Vulnerability Management, helping to maintain data quality, runbooks, and audit readiness while coordinating with infrastructure, platform, and operations teams.

Qualifications

• Solid understanding of cyber security concepts, especially vulnerability management, CIS benchmarks, and file integrity monitoring.
• Hands-on experience with security or infrastructure tooling in an operational role.
• Familiarity with ticketing systems, SLAs, and incident/operational support models.
• Experience supporting audits or evidence collection is a strong advantage.
• Clear communication with technical and non-technical stakeholders.

Responsibilities

• Provide operational and service desk support for FIM, SCB, and vulnerability management.
• Coordinate and triage service desk requests, ensuring timely handling and stakeholder communication.
• Analyze findings and validate changes before escalation.
• Maintain operational documentation, runbooks, and FAQs.
• Operate cybersecurity resilience tooling daily and support reporting activities.
• Assist in maintaining data quality across resilience tools.
• Support audit activities by extracting evidence and ensuring traceability.
• Coordinate with infrastructure, platform, and operations teams.

Skills

Vulnerability management

FIM / file integrity monitoring

SCB / CIS Benchmarks

Audit support

Service desk

Stakeholder communication

English fluency

German language

Operational data handling

Ticketing systems

Tools

Ticketing systems

Security tooling

Job description

The Cyber Security Resilience Operations Specialist supports the day-to-day operation of the Cyber Security Resilience services, with a strong focus on service desk activities, operational follow-up, and audit support.

The role acts as the first operational layer for File Integrity Monitoring (FIM), Secure Configuration Baseline (SCB), and Vulnerability Management, relieving senior engineers and analysts from administrative, evidentiary, and coordination tasks while ensuring consistency, quality, and audit readiness.

What You Will Do

The Cyber Security Resilience Operations Specialist supports the day-to-day operation of the Cyber Security Resilience services, with a strong focus on service desk activities, operational follow-up, and audit support.

The role acts as the first operational layer for File Integrity Monitoring (FIM), Secure Configuration Baseline (SCB), and Vulnerability Management, relieving senior engineers and analysts from administrative, evidentiary, and coordination tasks while ensuring consistency, quality, and audit readiness.

What You Will Do

• Operational & Service Desk Support
• Act as the primary point of contact for service desk requests and tickets related to: File Integrity Monitoring (FIM), Secure Configuration Baseline (SCB / CIS Benchmarks), Vulnerability Management activities
• Triage, track, and coordinate operational tickets, ensuring timely handling and clear communication with stakeholders.
• Perform initial analysis and validation of findings (e.g. expected vs. unexpected changes, status of vulnerabilities, baseline deviations) before escalation.
• Maintain operational documentation, runbooks, and FAQs related to Cyber Security Resilience services.
• Tool-Based Operational Activities
• Operate and support Cyber Security Resilience tooling on a daily basis, including retrieving data, validating results, and supporting reporting activities.
• Assist in maintaining data quality and consistency across FIM, SCB, and Vulnerability Management tools.
• Support recurring operational tasks such as: Report generation, Status checks, Evidence extraction, Follow-up tracking
• This role is not responsible for tool engineering, rule development, or architecture, but requires a solid understanding of how the tools work and how results should be interpreted.
• Audit & Compliance Support
• Actively support internal and external audit activities (e.g. FINMA, DORA, internal audits) by extracting audit evidence directly from Cyber Security Resilience tools, ensuring evidence is complete, traceable, and aligned with audit requests, supporting responses to audit questions in coordination with senior team members.
• Maintain structured audit evidence repositories and support continuous audit readiness.
• Help standardise and streamline evidence collection processes to reduce broader team workload.
• Coordination & Stakeholder Support
• Liaise with infrastructure, platform, and operations teams on operational clarifications and ticket follow-ups.
• Support the Cyber Security Resilience team by absorbing operational overhead, allowing engineers and specialists to focus on analysis and improvement initiatives.
• Escalate operational risks, recurring issues, or data gaps to senior team members in a structured manner.

What You Bring

• Solid foundational understanding of cyber security concepts, particularly: Vulnerability management, Secure system configuration / CIS Benchmarks, File integrity and change monitoring
• Hands-on experience working with security or infrastructure tooling, ideally in an operational or service-oriented role.
• Familiarity with ticketing systems, SLAs, and operational support models.
• Experience supporting audits, compliance activities, or evidence collection is a strong advantage.
• Structured, detail-oriented, and reliable in execution.
• Comfortable working with operational data, evidence, and repetitive tasks while maintaining quality.
• Able to communicate clearly with both technical and non-technical stakeholders.
• Proactive in identifying inefficiencies or improvement opportunities in operational processes.
• English Fluency
• German advantage

What We Offer

• Hybrid modelup to40% working from home
• Private Medical care and life insurance
• Meal,transportationand electricity allowance
• Sport card
• Cinema tickets, Benefit System points
• Up to20 daysworking from abroad / Day for U
• Access to technical and language learning platforms