Cybersecurity Operations Analyst: SIEM & Tool Admin

ALTEN Polska; Kraków; Hybrid; PLN 60,000 - 90,000; Full time

Benefits offered by this job

Work equipment provided

Training and conferences

Job summary

ALTEN Polska is seeking a Security Analyst to support technical operations across Endpoint Security, Data Security, Network Security, Application Security and SIEM/SOAR. You will administer security tools, analyze incidents, and automate tasks using scripting languages.

The role operates in a hybrid Kraków environment with weekend on-call rotations. You will work with Unix/Windows, AWS, and various security technologies, contributing to continual service improvement and ITIL-aligned processes.

Qualifications

• Experience with at least 2+ tools in one or more areas is MUST.
• Endpoint security (EDR like McAfee ENS/CrowdStrike) is required.
• Network security (ISE/NAC, web proxy) experience is required.
• Application security (Nessus/Tenable, container security) knowledge is needed.
• Data security (DLP technologies such as Symantec or McAfee DLP) exposure is a plus.
• SIEM/SOAR (Splunk ES, Splunk SOAR) familiarity is a MUST.
• Unix & Windows operating systems familiarity is a MUST.
• AWS experience (Compute/Storage/Networking) is nice to have.
• Scripting (Perl/PowerShell/Python) is desired.

Responsibilities

• Serve as Security Analyst supporting technical operations for critical cybersecurity technologies.
• Provide end to end administration and production support for cybersecurity tools under Endpoint Security, Data Security, Network Security, Application Security and SIEM/SOAR.
• Analyze, investigate, remediate cybersecurity application incidents in operational/production environment.
• Automate repeated and operational tasks through programming (Perl, Python, PHP, Bash, or PowerShell) or other interfaces.
• Setup monitoring and event management for cyber security products to help manage availability, reliability, and performance.
• Perform cybersecurity application installation, upgrades, product hygiene and maintenance.
• Operate in accordance with ITIL processes such as Change Management, Incident Management and Problem Management.
• Lead product support transitions on both technical and process front.
• Identify operational gaps and drive continual service improvement plans for existing processes.
• Build tool knowledgebase and establish/enhance SOPs.
• Work with minimal supervision and collaborate with Cyber Security and other LOBs.
• Develop and produce operational metrics such as Change success rate, tool uptime report, Incident ticket volume.
• Role requires weekend support on rotation via on-call.

Skills

Communication skills

Analytical thinking

Ownership & responsibility

Problem solving

Tools

McAfee ENS

CrowdStrike

Nessus/Tenable

Docker security

ISE/NAC

Web proxy

Splunk ES

Splunk SOAR

Unix/Windows

AWS (Compute/Storage/Networking)

Job description

ALTEN Polska is seeking a Security Analyst to support technical operations across Endpoint Security, Data Security, Network Security, Application Security and SIEM/SOAR. You will administer security tools, analyze incidents, and automate tasks using scripting languages.

The role operates in a hybrid Kraków environment with weekend on-call rotations. You will work with Unix/Windows, AWS, and various security technologies, contributing to continual service improvement and ITIL-aligned processes.