Junior Cyber Incident Responder

EY; Województwo mazowieckie; On-site; PLN 140,000 - 210,000; Full time

Benefits offered by this job

Private healthcare

EY Badges

Career Counselor

Psycho-educational platform

Benefit programme

Job summary

EY Poland is seeking a Cybersecurity Incident Response professional to perform hands-on incident handling, analysis and containment. You will document cases, support recovery, and contribute to playbooks within EY.AI initiatives. Join a team that blends security operations with AI-assisted project delivery.

You will engage in on-call rotations, collaborate with cross-functional teams, and develop expertise across cloud and on-premises environments to protect client systems.

Qualifications

• Basic knowledge of digital forensics and evidence preservation.
• Knowledge of cybersecurity, computer networks, operating systems and authentication mechanisms.
• Familiarity with SIEM, EDR/XDR, firewalls, proxies, IAM platforms and log analysis tools.
• Scripting skills in PowerShell, Bash or Python.
• Understanding of common attack techniques and incident response lifecycle.
• Basic understanding of cloud environments including IAM and logging.

Responsibilities

• Analyse alerts from SIEM, EDR/XDR, email security, IAM, firewall and cloud tools.
• Triage alerts to determine if an event is a security incident.
• Assess severity, scope and affected assets; evaluate business impact.
• Collect and analyse logs, artefacts, accounts activity and network data.
• Identify indicators of compromise and containment actions.
• Support eradication and recovery with validated remediation.
• Build incident timelines and maintain case documentation.
• Contribute to playbooks, knowledge base and lessons learned.
• Participate in on-call rotations and exercises.

Skills

Digital forensics

Cybersecurity fundamentals

SIEM/EDR/XDR knowledge

Scripting: PowerShell/Bash/Python

MITRE ATT&CK familiarity

Cloud basics (IAM/logging/compute)

Tools

SIEM/EDR/XDR

Firewalls

Proxies

IAM platforms

Log analysis tools

Job description

EY Poland is seeking a Cybersecurity Incident Response professional to perform hands-on incident handling, analysis and containment. You will document cases, support recovery, and contribute to playbooks within EY.AI initiatives. Join a team that blends security operations with AI-assisted project delivery.

You will engage in on-call rotations, collaborate with cross-functional teams, and develop expertise across cloud and on-premises environments to protect client systems.