Insider Threat Detection Senior Analyst (SIEM/KQL)

Ernst & Young Advisory Services Sdn Bhd; Katowice; On-site; PLN 180,000 - 240,000; Full time

Job summary

EY GDS Poland is seeking an Insider Threat Detection Senior Analyst to triage and analyze data security alerts from SIEM/SOAR platforms. You will validate potential insider threats, contribute to incident investigations, and improve detection capabilities through use case development and tuning.

You will collaborate with engineering, risk and data protection teams to strengthen EY's ability to identify and prevent unauthorized data exfiltration, while maintaining a global, security-focused

Qualifications

• Degree in Computer Science or related field.
• At least 3 years of experience with SIEM or DLP technologies.
• Hands-on experience with Microsoft Sentinel and KQL.

Responsibilities

• Triage data exfiltration security alerts across SIEM and SOAR platforms.
• Develop tuning recommendations for detection rules and respond to incidents.
• Collaborate with engineering and risk teams to strengthen detection capabilities.

Skills

SIEM operation

Threat detection

Security incident response

Analytical thinking

Communication skills

Education

Bachelor's degree in Computer Science or related field

Tools

Microsoft Sentinel

Kusto Query Language (KQL)

Job description

EY GDS Poland is seeking an Insider Threat Detection Senior Analyst to triage and analyze data security alerts from SIEM/SOAR platforms. You will validate potential insider threats, contribute to incident investigations, and improve detection capabilities through use case development and tuning.

You will collaborate with engineering, risk and data protection teams to strengthen EY's ability to identify and prevent unauthorized data exfiltration, while maintaining a global, security-focused