Cybersecurity Operations Analyst

Aon plc; Kraków; On-site; PLN 180,000 - 240,000; Full time

Job summary

Aon sp. z o.o. in Kraków is seeking a Cybersecurity Operations Analyst to support a hybrid work model. The role focuses on ticket triage, event correlation, and incident response across a global footprint, helping protect data and systems.

The position demands hands-on experience in threat detection, incident management, and familiarity with SIEM, SOAR, and EDR tools, along with strong communication skills.

Qualifications

• Bachelor's degree in MIS, CS, or related IT field or equivalent experience.
• 2+ years of experience in cybersecurity incident management and response.
• Experience with IP networks, routing, and deep packet analysis using tools like Wireshark.
• Experience with SOAR, SIEM, EDR, and multi-vendor email security platforms.

Responsibilities

• Triage security events and incidents.
• Correlate events and support incident response.
• Assist in threat detection and vulnerability management across a global footprint.

Skills

Security monitoring

Incident response

Threat detection

Education

Bachelor's degree in MIS/CS

Tools

Wireshark

IPS/IDS

EDR

SOAR

SIEM

Job description

Aon sp. z o.o.

Cybersecurity Operations Analyst

Are you a Cyber Security professional with Security Monitoring and Incident response experience? Are you looking for exposure to a wide range of cyber threats across a global footprint? Willing to provide support on weekends? If yes, we would love to hear from you!

Aon is recruiting for a cybersecurity operations analyst to join our team. Our office is located in Krakow and we are working in a hybrid working model.

Aon is in the business of better decisions

At Aon, we shape decisions for the better to protect and enrich the lives of people around the world.

As an organization, we are united through trust as one inclusive, diverse team, and we are passionate about helping our colleagues and clients succeed.

What the day will look like

Aon's Security Operations Center (SOC) seeks to be at the forefront of cybersecurity excellence, driving innovation and standard to protect our organization and stakeholders from emerging cyber risks. By adopting a DevOps culture and intelligence-driven strategy, our SOC strives to build a secure, resilient environment and workforce, fostering trust and assuring all who rely on us to protect their data are in safe hands. As a Cybersecurity Operations Analyst within the EMEA Region, you'll play an important role in supporting this vision. You will drive the team to success by supporting ticket triage, event correlation, incident response and other security activities. This position will perform supervising across all systems in a global enterprise footprint.

How this opportunity is different

You'll have the freedom to develop new capabilities with the backing of Aon's extensive resources, experience, and leadership. This opportunity includes working closely with senior leadership with a solid background and experience in threat detection and response.

Skills and experience that will lead to success

• Proven understanding of the security landscape, including prevalent threats, existing technologies, and modern security architectures.
• Strong written and verbal communication skills to effectively communicate and present security risk concepts with business and technology partners.
• Proven creative problem-solving and analytical skills.
• Bachelor's degree in Management Information Systems, Computer Science, or related Information Technology field, or equivalent experience.

Required Qualifications and Skills:

• Demonstrable understanding of NIST / SANS Cybersecurity Incident Management Frameworks
• Minimum 2 years' of experience with IP network and routing along with deep packet analysis using tools like Wireshark
• Minimum 2 years' of experience with products of IPS/IDS, AV, Crowdstrike, Logscale, etc.
• Minimum 2 years' of experience with Cybersecurity incident response processes and procedures
• Minimum 2 years' of experience with information & Cybersecurity best practices
• Multi SIEM platform experience (with SOAR / EUBA capabilities)
• Demonstrable experience with SOAR
• Demonstrable experience with EDR / ETDR solutions
• Demonstrable experience with multi-vendor email security platforms
• At least one of the following certifications: CISSP / CEH / ECIH / CHFI / Certified SOC Analyst / Certified Cloud Security Professional

Preferred / Desired Qualifications:

• Proficiency in a common scripting language (e.g. Python, PS)
• Experience with cloud platforms (AWS, Azure, GCP) and their security aspects
• Experience with, DLP, Threat Hunting, Threat Intel, Insider risk management / STRIDE, and eDiscovery / Cyber Forensics
• Unix/Wintel experience

#technologyandsecurity

#LI-MK1

#LI-HYBRID