Hybrid Cybersecurity Incident Response Lead

Antal; Kraków; Hybrid; PLN 120,000 - 180,000; Part time

Benefits offered by this job

Outsourcing cooperation

International environment

Impact on IR development

Exposure to SIEM and cloud

Job summary

Antal is seeking an experienced Cybersecurity Incident Response Lead for a hybrid role based in Kraków, Poland. The position involves hands-on security analysis, improving detection capabilities, and guiding the team in incident response and threat detection within an international environment.

The role emphasizes collaboration with Cybersecurity and IT teams, development of playbooks, and real impact on IR maturity, with six on-site days per month.

Qualifications

• Experience in Cybersecurity Operations, Incident Response or threat detection.
• Hands-on knowledge of SIEM, log analysis and malicious activity detection.
• Familiarity with IDS/IPS, firewalls, proxies and antimalware solutions.
• Good understanding of networking concepts and Windows/Linux/UNIX environments.
• Knowledge of cybersecurity frameworks and standards such as NIST, OWASP or ISO 2700x.
• Familiarity with cloud environments such as AWS, Microsoft Azure or Google Cloud.

Responsibilities

• Investigate and respond to cybersecurity alerts and incidents.
• Identify threats and malicious activity using security data and monitoring tools.
• Develop and improve detection use cases and Incident Response playbooks.
• Enhance security monitoring, detection and threat hunting processes.
• Collaborate with Cybersecurity and IT teams on complex security incidents.
• Provide technical guidance and share cybersecurity expertise within the team.

Skills

SIEM

Incident response

Threat detection

Threat hunting

Networking concepts

Windows/Linux/UNIX

Tools

IDS/IPS

Firewalls

Proxies

Antimalware

AWS

Azure

Google Cloud

Security automation

Job description

Antal is seeking an experienced Cybersecurity Incident Response Lead for a hybrid role based in Kraków, Poland. The position involves hands-on security analysis, improving detection capabilities, and guiding the team in incident response and threat detection within an international environment.

The role emphasizes collaboration with Cybersecurity and IT teams, development of playbooks, and real impact on IR maturity, with six on-site days per month.