IT Security Analyst

KK Group; Szczecin; On-site; PLN 110,000 - 170,000; Full time

Job summary

KK Group in Szczecin is seeking an IT Security Analyst to identify security trends, assess risks, and support audits and penetration testing activities. The role focuses on strengthening cyber awareness across the organization and safeguarding information assets in internal operations and external relationships.

You will monitor threats, analyze logs from SIEM and SOC reports, and coordinate with stakeholders to mitigate risks.

Qualifications

• Experience with security monitoring, log analysis, and SOC collaboration.
• Knowledge of cyber incident handling, risk assessment, and vulnerability management.
• Familiarity with penetration testing processes and security audit methodologies.
• Understanding of third-party risk management and data protection principles.
• Ability to clearly document findings and communicate security risks to both technical and non-technical stakeholders.

Responsibilities

• Security Monitoring, Threat Intelligence & Trend Analysis: Monitor and analyze current and emerging cyber security threats, vulnerabilities, and industry security trends.
• Incident Analysis & Impact Assessment: Document, analyze, and assess the impact and damage caused by cyber security incidents; support root cause analysis.
• Security Enhancement & Continuous Improvement: Advise on security enhancement methods and support implementation of security controls.
• Penetration Testing & Technical Assessments: Plan, coordinate, and support regular internal and external penetration tests; review results.

Skills

Security monitoring

Log analysis

SOC collaboration

Risk assessment

Vulnerability management

Job description

In our factory in Szczecin, we are looking for an IT Security Analyst. This role focuses on identifying security trends, assessing risks, supporting audits and penetration testing activities, and ensuring strong cyber awareness across the organization. The position plays a critical role in minimizing cyber risk, supporting regulatory compliance, and safeguarding information assets across internal operations and external relationships. It is also responsible for the cyber security awareness program within KK Group

Responsibilities

Security Monitoring, Threat Intelligence & Trend Analysis

• Monitor and analyze current and emerging cyber security threats, vulnerabilities, and industry security trends.
• Advise relevant stakeholders on potential impacts to the organization and recommend mitigating actions.
• Analyze logs and alerts from various security solutions, SIEM platforms, and SOC reports to detect anomalies and security incidents.
• Support proactive threat detection and continuous improvement of security monitoring capabilities.

Incident Analysis & Impact Assessment

• Document, analyze, and assess the impact and damage caused by cyber security incidents.
• Support root cause analysis and contribute to post-incident reviews and lessons learned.
• Provide input to incident reports, risk assessments, and management briefings.
• Support improvements to incident response processes based on identified gaps and findings.

Security Enhancement & Continuous Improvement

• Advise on security enhancement methods across IT systems, processes, and organizational practices.
• Support implementation and follow-up of recommended security controls and improvement initiatives.
• Contribute to the development and maintenance of security standards, guidelines, and best practices.
• Act as a subject-matter contributor to ongoing security maturity initiatives.

Penetration Testing & Technical Assessments

• Plan, coordinate, and support regular internal and external penetration tests.
• Review and analyze penetration test

Our Requirements:

• Experience with security monitoring, log analysis, and SOC collaboration.
• Knowledge of cyber incident handling, risk assessment, and vulnerability management.
• Familiarity with penetration testing processes and security audit methodologies.
• Understanding of third-party risk management and data protection principles.
• Ability to clearly document findings and communicate security risks to both technical and non-technical stakeholders.