Global Cyber Incident Response Lead

Ørsted; Warszawa; On-site; PLN 180,000 - 280,000; Full time

Job summary

Ørsted is seeking a cybersecurity professional to lead incident response and drive cyber defence activities across IT and OT. You will analyze events, determine root causes, and inform stakeholders to strengthen security postures worldwide.

Collaborate with security teams, intelligence vendors, and authorities, maintain 24/7 readiness, develop playbooks, and advance threat hunting through forensic investigations.

Qualifications

• Several years of incident response experience.
• Experience with cloud logs, network captures, and forensic images.
• Knowledge of SIEM, XDR and networking.
• Strong communication skills with stakeholders.
• GCFA/GCFE or similar certifications preferred.

Responsibilities

• Lead incidents and act as a technical analyst in cyber response activities across IT and OT environments globally.
• Analyze and understand security events and incidents to determine root cause and impact.
• Inform stakeholders and improve Ørsted's security posture through reporting and lessons learned.
• Collect incident data and coordinate analyses.
• Write and update incident analyst playbooks at operational and coordination levels.
• Design and execute intelligence-based threat hunting and drive forensic investigations to completion.
• Maintain 24/7 readiness to respond to cyber-attacks globally.

Skills

Incident response

SIEM

XDR

Networking

Threat hunting

Technical writing

Communication

GCFA GCFE

Job description

Ørsted is seeking a cybersecurity professional to lead incident response and drive cyber defence activities across IT and OT. You will analyze events, determine root causes, and inform stakeholders to strengthen security postures worldwide.

Collaborate with security teams, intelligence vendors, and authorities, maintain 24/7 readiness, develop playbooks, and advance threat hunting through forensic investigations.