Junior Incident Response Analyst

EY; Województwo mazowieckie; On-site; PLN 140,000 - 210,000; Full time

Benefits offered by this job

Private healthcare

EY Badges

Career Counselor

Psycho-educational platform

Benefit programme

Job summary

EY Poland is seeking a Cybersecurity Incident Response professional to perform hands-on incident handling, analysis and containment. You will document cases, support recovery, and contribute to playbooks within EY.AI initiatives. Join a team that blends security operations with AI-assisted project delivery.

You will engage in on-call rotations, collaborate with cross-functional teams, and develop expertise across cloud and on-premises environments to protect client systems.

Qualifications

• Basic knowledge of digital forensics and evidence preservation.
• Knowledge of cybersecurity, computer networks, operating systems and authentication mechanisms.
• Familiarity with SIEM, EDR/XDR, firewalls, proxies, IAM platforms and log analysis tools.
• Scripting skills in PowerShell, Bash or Python.
• Understanding of common attack techniques and incident response lifecycle.
• Basic understanding of cloud environments including IAM and logging.

Responsibilities

• Analyse alerts from SIEM, EDR/XDR, email security, IAM, firewall and cloud tools.
• Triage alerts to determine if an event is a security incident.
• Assess severity, scope and affected assets; evaluate business impact.
• Collect and analyse logs, artefacts, accounts activity and network data.
• Identify indicators of compromise and containment actions.
• Support eradication and recovery with validated remediation.
• Build incident timelines and maintain case documentation.
• Contribute to playbooks, knowledge base and lessons learned.
• Participate in on-call rotations and exercises.

Skills

Digital forensics

Cybersecurity fundamentals

SIEM/EDR/XDR knowledge

Scripting: PowerShell/Bash/Python

MITRE ATT&CK familiarity

Cloud basics (IAM/logging/compute)

Tools

SIEM/EDR/XDR

Firewalls

Proxies

IAM platforms

Log analysis tools

Job description

Join a team that supports clients in detecting, investigating and responding to cybersecurity incidents. In this role, you will carry out operational incident response activities in accordance with established procedures and playbooks, maintain accurate case documentation and promptly accelerate incidents requiring senior expertise. You will gain hands‑on experience in analysing cyber threats, containing incidents and supporting the safe recovery of affected systems.

EY.AI – in this role, you will work in an environment where AI agents are part of the team and everyday project delivery. You will use solutions tailored to your role and team that support data analysis, recommendation generation and solution design.

Your scope of duties

• Analyse alerts generated by SIEM, EDR/XDR, email security, IAM, firewall and cloud security tools;
• Perform alert triage and determine whether an event constitutes a security incident;
• Assess the severity and scope of incidents, identify affected assets and evaluate the potential business impact;
• Collect and analyse logs, endpoint artefacts, account activity, IP addresses, domains, file hashes and process information;
• Identify indicators of compromise, including suspicious logins, processes, files, domains and network connections;
• Perform containment actions, such as isolating hosts, blocking indicators of compromise, suspending accounts and resetting passwords;
• Support eradication and recovery activities by verifying that threats have been removed and systems have been safely restored;
• Build incident timelines and maintain complete case documentation;
• Perform root cause analysis and identify information required for further investigation;
• Contribute to updates of incident response playbooks, knowledge base articles and lessons learned documentation;
• Participate in on‑call rotations and incident response exercises, where applicable.

Our requirements

• Basic knowledge of digital forensics and evidence preservation;
• Knowledge of cybersecurity, computer networks, operating systems and authentication mechanisms;
• Familiarity with SIEM, EDR/XDR, firewalls, proxies, IAM platforms and log analysis tools;
• Scripting skills in PowerShell, Bash or Python;
• Understanding of common attack techniques, including phishing, credential theft, malware, brute‑force attacks, lateral movement and privilege escalation;
• Basic knowledge of MITRE ATT&CK and the incident response lifecycle;
• Basic understanding of cloud environments, including IAM, logging, compute, storage and networking.

What we offer

• Professional and financial support in obtaining recognised qualifications and certificates;
• EY Badges – global certification of your competencies and the opportunity to earn an MBA from the prestigious Hult International School of Business;
• Career Counselor – professional, one‑to‑one guidance on career building and development;
• Psycho‑educational platform – a package of free consultations with specialists in the broad field of mental health and personal development, as well as access to educational activities;
• Benefit programme offering private healthcare with additional preventive examinations, life insurance, tickets, team sports, a language learning platform, sports cards and much more, available both online and offline.

About EY Poland

We are a global consulting and technology company.

We make a difference by transforming and changing services, products, organisations and even the rules of the game. We combine business and technology expertise with artificial intelligence and human talent. We help organisations solve complex problems, make better decisions and implement positive change.

We provide confidence in data, opinions, standards, technology and security.

Every day, we take on challenges, analyse opportunities, create prompts, conduct research, collaborate, ask the right questions, plan, model, code, experiment and learn. We create solutions that are essential to our clients.

This is where friendships, relationships and lifelong memories are made.

This is where you do difficult and meaningful work with supportive and exceptional people.

We care about the environment, not only the business environment. As part of our plan, we have reduced our global greenhouse gas emissions by 40% compared with the 2019 baseline.

EY is an equal opportunity employer. We value and promote the diversity of knowledge, experience and perspectives within our community. We create an environment based on respect, openness and collaboration, where everyone can grow and make a meaningful impact. Through our “Poziom Wyżej bez Barier” programme, we support employees with disabilities in pursuing their professional ambitions and aspirations.

EY provides equal opportunities to all candidates throughout the recruitment process, regardless of gender, age, race, religion, sexual orientation, origin, disability or any other legally protected characteristic, in accordance with applicable law.

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.