Global SOC Security Analyst - Real‑Time Threat Defense

Aviva plc; Warszawa, Polska; Hybrid; PLN 120,000 - 170,000; Full time

Benefits offered by this job

Performance Bonus

Private medical care

Cafeteria benefits

Job summary

Aviva plc in Warsaw is hiring a Security Analyst to join our Global Security Operations Centre. You will monitor real-time IT security events, own incidents end-to-end, and help evolve our detection capabilities across the Aviva Group.

You should have at least 1 year of SOC experience, strong English, and a solid grasp of NIST, ITIL, MITRE ATT&CK, and Cyber Kill Chain. We offer a hybrid model from Poland with some days in the Warsaw office and a performance bonus.

Qualifications

• At least 1 year of SOC Analyst experience.
• English level B2/C1 (written and spoken).
• Solid understanding of the NIST standard for incident management, ITIL Foundation, the MITRE ATT-CK and the Cyber Kill Chain.
• Autonomy to work independently, under pressure and tight time scales.
• Strong grasp of networking protocols and IT service operations.

Responsibilities

• Real-Time Defence: Monitor IT security breaches and respond to incidents to ensure threats are mitigated.
• Incident Ownership: Manage cyber incidents through detection, containment, eradication and recovery.
• Threat Correlation: Connect dots between threats to see the bigger picture.
• Detection Optimization: Recommend improvements for correlation rules and radar tuning.
• Documentation Mastery: Draft GSOC playbooks, response plans, and processes.
• SME Role: Act as an expert for GSOC and Detection & Response projects.

Skills

Incident response

SOC monitoring

Networking knowledge

English proficiency

Tools

DLP

EDR

SIEM

Firewalls

IPS/IDS

SOAR

Job description

Aviva plc in Warsaw is hiring a Security Analyst to join our Global Security Operations Centre. You will monitor real-time IT security events, own incidents end-to-end, and help evolve our detection capabilities across the Aviva Group.

You should have at least 1 year of SOC experience, strong English, and a solid grasp of NIST, ITIL, MITRE ATT&CK, and Cyber Kill Chain. We offer a hybrid model from Poland with some days in the Warsaw office and a performance bonus.