Defender XDR Cyber Analyst & Threat Hunter

Intertek; Warszawa; Remote; PLN 155,000 - 170,000; Full time

Benefits offered by this job

Medical cover package

Multisport

Security training access

Security certification eligibility

Job summary

Intertek is seeking a Cyber Security Analyst – Defender XDR Specialist to join our Global Cyber Security team in Poland. You will act as SME for Defender XDR technologies, support security operations, incident response, threat hunting, and drive adoption of Microsoft security solutions across the organization.

You will mentor colleagues, develop detections and runbooks, and collaborate with stakeholders across endpoints, identity, email, servers and cloud environments.

Qualifications

• Bachelor’s degree in Cyber Security, IT, CS or related field.
• 2–5 years in Security Operations, Incident Response or Threat Hunting.
• Hands-on with Defender XDR technologies and Entra ID; MITRE ATT&CK knowledge.

Responsibilities

• Act as SME for Microsoft Defender XDR and related products.
• Investigate and respond to cyber security incidents across endpoints, identity, email, server and cloud.
• Proactively hunt threats using Advanced Hunting and KQL.
• Develop detections, playbooks, and procedures.
• Support vulnerability management and remediation.
• Provide technical guidance and training to Cyber Security Analysts.
• Leverage Microsoft Security Copilot to improve investigation and reporting.

Skills

Security ops

Threat hunting

Incident response

KQL queries

Stakeholder mgmt

Mentoring

English

Education

Bachelor’s degree in Cyber Security/IT/CS

Tools

Defender XDR

Defender for Endpoint

Defender for Cloud Apps

Entra ID

Job description

Intertek is seeking a Cyber Security Analyst – Defender XDR Specialist to join our Global Cyber Security team in Poland. You will act as SME for Defender XDR technologies, support security operations, incident response, threat hunting, and drive adoption of Microsoft security solutions across the organization.

You will mentor colleagues, develop detections and runbooks, and collaborate with stakeholders across endpoints, identity, email, servers and cloud environments.