Cybersecurity Lead: Incident Response & Detection (Hybrid)

Antal; Kraków; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Office in Kraków (6 days/mo)

Job summary

Antal is recruiting a hands-on cybersecurity professional to join an international environment focused on threat detection, security monitoring and incident response. You will work in a hybrid model with six days per month at the Kraków client site and play a key role in developing detection capabilities and incident response playbooks.

The role combines advanced security analysis with opportunities to guide other team members, improve monitoring, and contribute to security automation in a

Qualifications

• Experience in Cybersecurity Operations, Incident Response or threat detection.
• Hands-on knowledge of SIEM, log analysis and malicious activity detection.
• Familiarity with security technologies such as IDS/IPS, firewalls, proxies and antimalware solutions.
• Good understanding of networking concepts and Windows/Linux/UNIX environments.
• Knowledge of cybersecurity frameworks and standards such as NIST, OWASP or ISO 2700x.
• Familiarity with cloud environments such as AWS, Microsoft Azure or Google Cloud.
• Strong analytical and problem‑solving skills, combined with the ability to share knowledge and provide technical support to others.

Responsibilities

• Investigate and respond to cybersecurity alerts and incidents.
• Identify threats and malicious activity using security data and monitoring tools.
• Develop and improve detection use cases and Incident Response playbooks.
• Enhance security monitoring, detection and threat hunting processes.
• Collaborate with Cybersecurity and IT teams on complex security incidents.
• Provide technical guidance and share cybersecurity expertise within the team.

Skills

Cybersecurity operations

Incident response

Threat detection

Networking concepts

Cloud environments

Analytical thinking

Knowledge sharing

Tools

SIEM

IDS/IPS

Firewalls

Proxies

Antimalware

Windows/Linux/UNIX

Job description

Antal is recruiting a hands-on cybersecurity professional to join an international environment focused on threat detection, security monitoring and incident response. You will work in a hybrid model with six days per month at the Kraków client site and play a key role in developing detection capabilities and incident response playbooks.

The role combines advanced security analysis with opportunities to guide other team members, improve monitoring, and contribute to security automation in a