Insider Threat Detection Senior Analyst (SIEM) – Remote

EY; Katowice; Hybrid; PLN 180,000 - 240,000; Full time

Job summary

EY GDS Poland is seeking a Cyber & Investigative Services Insider Threat Detection Senior Analyst in Wrocław or Katowice with a hybrid work pattern (2 days in office, 3 days remote). You will triage data security alerts, validate potential insider threats, and support investigations across SIEM and SOAR platforms.

The role emphasizes detection tuning, use case development, trend analysis, and collaboration with engineering, risk and data protection teams to strengthen EY's ability to identify

Qualifications

• Degree in Computer Science or related field, or equivalent work experience.
• At least 3 years of experience in DLP/SIEM or related areas.
• Hands-on experience with Microsoft Sentinel and Kusto Query Language (KQL).

Responsibilities

• Triage of data exfiltration security alerts across SIEM and SOAR platforms.
• Identification of tuning recommendations to the currently defined detection rules.
• Work with technical teams and vendors to address technical inquiries related to the security alerts.

Skills

Data Security

Tuning Recommendations

Communication

Investigation & Analysis

Education

Degree in Computer Science

Tools

Microsoft Sentinel

KQL

Job description

EY GDS Poland is seeking a Cyber & Investigative Services Insider Threat Detection Senior Analyst in Wrocław or Katowice with a hybrid work pattern (2 days in office, 3 days remote). You will triage data security alerts, validate potential insider threats, and support investigations across SIEM and SOAR platforms.

The role emphasizes detection tuning, use case development, trend analysis, and collaboration with engineering, risk and data protection teams to strengthen EY's ability to identify