Cybersecurity Operations Analyst

Aon; Kraków; Hybrid; PLN 110,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Aon sp. z o.o. in Kraków is seeking a Cybersecurity Operations Analyst for the SOC, joining a hybrid team. You will drive ticket triage, event correlation, and incident response across a global footprint, ensuring secure operations and threat protection.

The role emphasizes DevOps-aligned security, collaboration with senior leadership, and exposure to a wide range of threats and technologies. Weekend support may be required.

Qualifications

• Bachelor's degree in MIS, CS or related IT field or equivalent experience.
• Understanding of NIST/SANS incident management frameworks.
• 2+ years' experience with IP networking, routing, and deep packet analysis (Wireshark).
• 2+ years' experience with IPS/IDS, AV, CrowdStrike, Logscale, etc.
• 2+ years' experience with cybersecurity incident response processes.
• 2+ years' experience with information & cybersecurity best practices.
• Multi-SIEM experience with SOAR/EUBA capabilities.
• Experience with SOAR and with EDR/ETDR solutions.
• Experience with multi-vendor email security platforms.
• At least one listed security certification (CISSP/CEH/ECIH/CHFI/CSSA/CCSP).

Responsibilities

• Support ticket triage, event correlation, and incident response activities.
• Operate and monitor across systems in a global enterprise footprint.
• Provide supervision and guidance within the SOC for security operations.
• Collaborate with regional leadership to drive security outcomes.

Skills

Security landscape understanding

Communication skills

Analytical thinking

NIST/SANS incident management

Network analysis (Wireshark)

IPS/IDS and EDR tools

Incident response processes

Cybersecurity best practices

SIEM & SOAR

SOAR experience

EDR/ETDR solutions

Email security platforms

Education

Bachelor's degree in MIS/CS or related IT field

Certifications: CISSP / CEH / ECIH / CHFI / Certified SOC Analyst / CCSP

Tools

CrowdStrike

Logscale

Wireshark

SOAR platforms

Job description

Aon sp. z o.o.

Cybersecurity Operations Analyst

Are you a Cyber Security professional with Security Monitoring and Incident response experience? Are you looking for exposure to a wide range of cyber threats across a global footprint? Willing to provide support on weekends? If yes, we would love to hear from you!

Aon is recruiting for a cybersecurity operations analyst to join our team. Our office is located in Krakow and we are working in a hybrid working model.

Aon is in the business of better decisions

At Aon, we shape decisions for the better to protect and enrich the lives of people around the world.

As an organization, we are united through trust as one inclusive, diverse team, and we are passionate about helping our colleagues and clients succeed.

What the day will look like

Aon’s Security Operations Center (SOC) seeks to be at the forefront of cybersecurity excellence, driving innovation and standard to protect our organization and stakeholders from emerging cyber risks. By adopting a DevOps culture and intelligence-driven strategy, our SOC strives to build a secure, resilient environment and workforce, fostering trust and assuring all who rely on us to protect their data are in safe hands. As a Cybersecurity Operations Analyst within the EMEA Region, you’ll play an important role in supporting this vision. You will drive the team to success by supporting ticket triage, event correlation, incident response and other security activities. This position will perform supervising across all systems in a global enterprise footprint.

How this opportunity is different

You’ll have the freedom to develop new capabilities with the backing of Aon's extensive resources, experience, and leadership. This opportunity includes working closely with senior leadership with a solid background and experience in threat detection and response.

Skills And Experience That Will Lead To Success

• Proven understanding of the security landscape, including prevalent threats, existing technologies, and modern security architectures.
• Strong written and verbal communication skills to effectively communicate and present security risk concepts with business and technology partners.
• Proven creative problem-solving and analytical skills.
• Bachelor’s degree in Management Information Systems, Computer Science, or related Information Technology field, or equivalent experience.

Required Qualifications And Skills

• Demonstrable understanding of NIST / SANS Cybersecurity Incident Management Frameworks
• Minimum 2 years’ of experience with IP network and routing along with deep packet analysis using tools like Wireshark
• Minimum 2 years’ of experience with products of IPS/IDS, AV, Crowdstrike, Logscale, etc.
• Minimum 2 years’ of experience with Cybersecurity incident response processes and procedures
• Minimum 2 years’ of experience with information & Cybersecurity best practices
• Multi SIEM platform experience (with SOAR / EUBA capabilities)
• Demonstrable experience with SOAR
• Demonstrable experience with EDR / ETDR solutions
• Demonstrable experience with multi-vendor email security platforms
• At least one of the following certifications: CISSP / CEH / ECIH / CHFI / Certified SOC Analyst / Certified Cloud Security Professional

Preferred / Desired Qualifications

• Proficiency in a common scripting language (e.g. Python, PS)
• Experience with cloud platforms (AWS, Azure, GCP) and their security aspects
• Experience with, DLP, Threat Hunting, Threat Intel, Insider risk management / STRIDE, and eDiscovery / Cyber Forensics
• Unix/Wintel experience