Expert Cybersecurity Incident Response Analyst

ITDS Polska Sp. z o.o.; Kraków; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Stable cooperation

Medical Package

Multisport Program

Pluralsight

Flexible hours

Social events

International environment

Job summary

ITDS Polska Sp. z o.o. w Krakowie poszukuje Eksperta ds. Cyberbezpieczeństwa ds. reakcji na incydenty, który będzie monitorował, identyfikował i reagował na zagrożenia w globalnej infrastrukturze klienta. Będziesz prowadzić działania od wykrycia po remediate, rozwijając przypadki detekcji i playbooks.

Praca w modelu hybrydowym z sześcioma dniami w biurze miesięcznie i możliwość rozwoju w międzynarodowym środowisku. Wymagane prawo do pracy w UE.

Qualifications

• Minimum 5 years of experience in cybersecurity incident response, security operations or related field.
• Excellent investigative, analytical, problem-solving, troubleshooting and decision-making skills.
• Experience defining and refining operational procedures, workflows and processes for monitoring and detection.
• Strong knowledge of cybersecurity frameworks including OWASP, ISO 2700x, CIST and NIST.

Responsibilities

• Respond to cybersecurity alerts across global technology and information estate, identifying harmful behaviors and events.
• Lead incidents through containment, mitigation, remediation and eradication, contributing root cause analysis to post-incident reviews.
• Develop and implement new detection use cases and response playbooks across security platforms.
• Review and approve use cases and playbooks created by cybersecurity colleagues.
• Assess and continuously improve effectiveness of analytical processes, playbooks, tooling and workflows.
• Apply structured analytical methodologies to enhance threat intelligence and operational effectiveness.
• Provide expert-level technical guidance and leadership across threat hunting, monitoring, detection, analysis and response.
• Mentor cybersecurity colleagues and collaborate with Cybersecurity and IT teams to improve capabilities and automate operational processes.

Skills

Incident response

Threat hunting

SIEM analysis

Log management

Forensic tools

Job description

Nasze wymagania:

• At least 5 years of experience in cybersecurity incident response, security operations, or a related field.
• Excellent investigative, analytical, problem-solving, troubleshooting, and decision-making skills.
• Experience defining and refining operational procedures, workflows, and processes for monitoring and detection.
• Strong knowledge of cybersecurity frameworks, including OWASP, ISO 2700x, CIST, and NIST.
• Good understanding of network protocols, including TCP, UDP, DNS, DHCP, IPSEC, and HTTP.
• Technical expertise in analyzing threat event data, evaluating malicious activity, and identifying attacker tactics.
• Demonstrated experience with SIEM tools, log management suites, Big Data, and cloud-based security solutions.
• Knowledge of cybersecurity technologies, operating systems, cloud platforms, and incident response or forensic tools.

Mile widziane:

• A developed external peer network for sharing cybersecurity intelligence.
• Experience with IDS/IPS/HIPS, advanced anti-malware, firewalls, proxies, or MSS technologies.
• Familiarity with AWS, Azure, and Google cloud platforms.
• Knowledge of tools such as EnCase, FTK, Sleuthkit, Kali Linux, or IDA Pro.

O projekcie:

As an Expert Cybersecurity Incident Response Analyst, you will be working for our client, a global organization protecting its technology and information estate against evolving cyber threats. You will help detect, investigate, contain, mitigate, and remediate security incidents while strengthening monitoring, detection, threat hunting, and response capabilities across the organization.

Defend the digital frontier — lead the detection, response, and evolution of global cybersecurity operations!

Krakow-based opportunity with a hybrid work model, requiring six days per month from the office.

Only candidates with an existing legal right to work in the European Union will be considered for this role.

Zakres obowiązków:

• Respond to cybersecurity alerts across the global technology and information estate, identifying harmful behaviors and events.
• Lead incidents through containment, mitigation, remediation, and eradication, contributing detailed root cause analysis to post-incident reviews.
• Develop and implement new detection use cases and response playbooks across security platforms.
• Review and approve use cases and playbooks created by cybersecurity colleagues.
• Assess and continuously improve the effectiveness of analytical processes, playbooks, tooling, and workflows.
• Apply structured analytical methodologies to enhance threat intelligence and operational effectiveness.
• Provide expert-level technical guidance and leadership across threat hunting, monitoring, detection, analysis, and response.
• Mentor cybersecurity colleagues and collaborate with Cybersecurity and IT teams to improve capabilities and automate operational processes.

Oferujemy:

• Stable and long-term cooperation with very good conditions
• Enhance your skills and develop your expertise in the financial industry
• Work on the most strategic projects available in the market
• Define your career roadmap and develop yourself in the best and fastest possible way by delivering strategic projects for different clients of ITDS over several years
• Participate in Social Events, training, and work in an international environment
• Access to attractive Medical Package
• Access to Multisport Program
• Access to Pluralsight
• Flexible hours