Cybersecurity Incident Response Lead

Antal; Kraków; Hybrid; PLN 120,000 - 180,000; Part time

Benefits offered by this job

Outsourcing cooperation

International environment

Impact on IR development

Exposure to SIEM and cloud

Job summary

Antal is seeking an experienced Cybersecurity Incident Response Lead for a hybrid role based in Kraków, Poland. The position involves hands-on security analysis, improving detection capabilities, and guiding the team in incident response and threat detection within an international environment.

The role emphasizes collaboration with Cybersecurity and IT teams, development of playbooks, and real impact on IR maturity, with six on-site days per month.

Qualifications

• Experience in Cybersecurity Operations, Incident Response or threat detection.
• Hands-on knowledge of SIEM, log analysis and malicious activity detection.
• Familiarity with IDS/IPS, firewalls, proxies and antimalware solutions.
• Good understanding of networking concepts and Windows/Linux/UNIX environments.
• Knowledge of cybersecurity frameworks and standards such as NIST, OWASP or ISO 2700x.
• Familiarity with cloud environments such as AWS, Microsoft Azure or Google Cloud.

Responsibilities

• Investigate and respond to cybersecurity alerts and incidents.
• Identify threats and malicious activity using security data and monitoring tools.
• Develop and improve detection use cases and Incident Response playbooks.
• Enhance security monitoring, detection and threat hunting processes.
• Collaborate with Cybersecurity and IT teams on complex security incidents.
• Provide technical guidance and share cybersecurity expertise within the team.

Skills

SIEM

Incident response

Threat detection

Threat hunting

Networking concepts

Windows/Linux/UNIX

Tools

IDS/IPS

Firewalls

Proxies

Antimalware

AWS

Azure

Google Cloud

Security automation

Job description

Cybersecurity Incident Response Lead

Location: Kraków, Poland

Work model: Hybrid, 6 days per month from the client's office in Kraków

Employment model: Outsourcing via Antal

We are looking for an experienced cybersecurity professional to join an international environment focused on threat detection, security monitoring and incident response. This is a hands-on expert role combining advanced security analysis with the opportunity to improve detection capabilities, develop response processes and provide technical guidance to other team members.

Your responsibilities

• Investigate and respond to cybersecurity alerts and incidents.
• Identify threats and malicious activity using security data and monitoring tools.
• Develop and improve detection use cases and Incident Response playbooks.
• Enhance security monitoring, detection and threat hunting processes.
• Collaborate with Cybersecurity and IT teams on complex security incidents.
• Provide technical guidance and share cybersecurity expertise within the team.

What we’re looking for

• Experience in Cybersecurity Operations, Incident Response or threat detection.
• Hands-on knowledge of SIEM, log analysis and malicious activity detection.
• Familiarity with security technologies such as IDS/IPS, firewalls, proxies and antimalware solutions.
• Good understanding of networking concepts and Windows/Linux/UNIX environments.
• Knowledge of cybersecurity frameworks and standards such as NIST, OWASP or ISO 2700x.
• Familiarity with cloud environments such as AWS, Microsoft Azure or Google Cloud.
• Strong analytical and problem-solving skills, combined with the ability to share knowledge and provide technical support to others.

What we offer

• Cooperation with Antal in an outsourcing model.
• Opportunity to work in an international cybersecurity environment.
• Real impact on the development of Incident Response and threat detection capabilities.
• Exposure to SIEM, security monitoring, cloud technologies and security automation.
• Hybrid working model with only 6 days per month from the client's office in Kraków.
• An expert-level position with room to share knowledge and contribute to technical improvements.

About Antal

Antal is a leading recruitment and HR advisory company, present in Poland since 1996 and later expanded to the Czech Republic and Hungary. Across the CEE region, we employ around 150 professionals who deliver a full range of services - from specialist and executive recruitment, employee outsourcing and HR consulting, to employer branding and market research.

Our division-based structure combines deep industry expertise with functional specialisation, enabling us to provide tailored solutions for companies in every sector. We act as a trusted partner for both employers and candidates, sharing our knowledge and guiding them through every stage of the talent journey. We connect exceptional people with the right opportunities and help organisations build successful teams.