Cybersecurity Incident Response Officer

Adecco Portugal; Warszawa; Hybrid; PLN 180.000 - 280.000; Vollzeit

Zusammenfassung

Adecco Portugal is seeking a skilled Security Engineer to join the CSIRT for a client in Warsaw. The position is full-time, hybrid (50% on-site), with a start date of January 1, 2027.

You will handle incident responses, threat hunting, cyber threat intel production, and vulnerability management, using EDR (Tanium), SIEM (Elastic Search), antivirus, and other security tools.

Qualifikationen

• Proven incident handler or CTI analyst
• Proven experience in digital forensics
• Detailed knowledge of attacker TTPs (TACTICS, TECHNIQUES, PROCEDURES)
• Autonomy to deliver within deadlines
• Ability to work effectively in a matrix structure
• Interest in security R&D
• Certs such as GREM, GCFA, BT(L1/L2), CRTE or CRTP are a plus

Aufgaben

• Incident handling and responses
• Data protection and leakage response
• Phishing identification and response
• Threat hunting campaigns
• Cyber threat intelligence production
• Vulnerability management and remediation

Kenntnisse

IT Knowledge

Security

Cybersecurity

Analytical Thinking

Teamwork

Creativity

Delivery

Communication

Ausbildung

MSc in Information Security

Tools

Tanium (EDR)

Trellix Antivirus

Elastic Search SIEM

Netcraft

Virustotal

Ghidra

Symantec DLP

ServiceNow

Jobbeschreibung

For our client we are looking for a skilled Security Engineer to take part in the activities of the Computer Security Incident Response Team (CSIRT).

Location: Warsaw, Poland

Work mode: hybrid (50% on side)

Employment Type: Full-time

Experience Required: At least 3 years’ experience at the similar role

Contract type: Contract of employment directly with a client

Start day: January 1st 2027

Activities

• Incident handling and responses
• Data leak protection
• Phishing identification
• Threat hunting campaigns
• Cyber threat intelligence production
• Vulnerability management

Expertise and skills

Business Skills

• IT Knowledge
• Security
• Cybersecurity
• Analytical Thinking
• Ability to collaborate / Teamwork
• Creativity & Innovation / Problem Solving
• Ability to Deliver / Results Driven
• Good interpersonal and communication skills

Common base tools/methodologies

• EDR (Tanium), Antivirus (Trellix), SIEM (Elastic Search)
• Netcraft, Virustotal, Ghidra, Symantec DLP
• Service Now

Core competencies and education

• Preferably a MSc in Information Security
• Proven record as an incident handler or CTI analyst
• Proven experience in the field of digital forensics
• Detailed technical knowledge of tactics, techniques, and procedures leveraged by attackers
• Autonomy and capacity to deliver within a given timeframe
• Ability to function effectively in a matrix structure
• Interest in all aspects of security research and development
• Holding one or several of the following certifications would be a plus: GREM, GCFA, Blue Team Level 1 (BTL1), Blue Team
• Level 2 (BTL2), Certified Red Team Expert (CRTE) or Certified Red Team Professional (CRTP)