Junior Cyber Incident Response Analyst

EY; Łódź; On-site; PLN 120,000 - 180,000; Full time

Benefits offered by this job

EY Badges

Career Counselor

Private healthcare + preventative care

Education support / qualifications

Job summary

EY Poland is seeking a cybersecurity incident response professional to join a team that detects, investigates, and responds to incidents. You will perform operational IR activities, document cases, and escalate where needed, with EY.AI integration and on-call rotations.

Build skills in threat analysis, containment, eradication, and recovery while contributing to playbooks and knowledge bases. You will work in an environment where AI agents assist project delivery, using tailored solutions for

Qualifications

• Basic knowledge of digital forensics and evidence preservation.
• Knowledge of cybersecurity concepts and networks.
• Familiarity with SIEM, EDR/XDR and log analysis tools.
• Scripting skills in PowerShell, Bash or Python.
• Understanding of MITRE ATT&CK and the incident response lifecycle.
• Cloud basics including IAM and logging.

Responsibilities

• Analyse alerts generated by SIEM, EDR/XDR, email security, IAM, firewall and cloud security tools.
• Triage alerts to determine whether an event constitutes a security incident.
• Assess the severity and scope of incidents, identify affected assets and evaluate potential business impact.
• Collect and analyse logs, endpoint artefacts, account activity, IP addresses, domains, file hashes and process information.
• Identify indicators of compromise, including suspicious logins, processes, files, domains and network connections.
• Perform containment actions, such as isolating hosts, blocking indicators of compromise, suspending accounts and resetting passwords.
• Support eradication and recovery activities by verifying that threats have been removed and systems have been safely restored.
• Build incident timelines and maintain complete case documentation.
• Perform root cause analysis and identify information required for further investigation.
• Contribute to updates of incident response playbooks, knowledge base articles and lessons learned documentation.
• Participate in on-call rotations and incident response exercises, where applicable.

Skills

Cybersecurity basics

SIEM familiarity

Scripting (PowerShell)

Incident response

Tools

PowerShell

Python

Bash

EDR/XDR

Job description

EY Poland is seeking a cybersecurity incident response professional to join a team that detects, investigates, and responds to incidents. You will perform operational IR activities, document cases, and escalate where needed, with EY.AI integration and on-call rotations.

Build skills in threat analysis, containment, eradication, and recovery while contributing to playbooks and knowledge bases. You will work in an environment where AI agents assist project delivery, using tailored solutions for