Junior Incident Response Analyst

EY; Wrocław; On-site; PLN 120,000 - 180,000; Full time

Benefits offered by this job

EY Badges

Career Counselor

Psycho-educational platform

Private healthcare

Job summary

EY Poland is seeking a cybersecurity Incident Response Specialist to join a team that detects, investigates and responds to incidents. You will carry out operational incident response activities, document cases and escalate as needed.

You will gain hands-on experience analysing cyber threats, containing incidents and supporting the safe recovery of affected systems within EY Poland and EY AI initiatives.

Qualifications

• Basic knowledge of digital forensics and evidence preservation.

Responsibilities

• Analyse alerts generated by SIEM, EDR/XDR, email security, IAM, firewall and cloud security tools.
• Perform alert triage and determine whether an event constitutes a security incident.
• Assess the severity and scope of incidents, identify affected assets and evaluate the potential business impact.
• Collect and analyse logs, endpoint artefacts, account activity, IP addresses, domains, file hashes and process information.
• Identify indicators of compromise, including suspicious logins, processes, files, domains and network connections.
• Perform containment actions, such as isolating hosts, blocking indicators of compromise, suspending accounts and resetting passwords.
• Support eradication and recovery activities by verifying that threats have been removed and systems have been safely restored.
• Build incident timelines and maintain complete case documentation.
• Perform root cause analysis and identify information required for further investigation.
• Contribute to updates of incident response playbooks, knowledge base articles and lessons learned documentation.
• Participate in on-call rotations and incident response exercises, where applicable.

Skills

Incident response

Threat analysis

PowerShell

Bash

Python

MITRE ATT&CK

Cloud security

SOC operations

SIEM

EDR/XDR

Firewalls

IAM platforms

Log analysis tools

Tools

SIEM

EDR/XDR

Firewalls

IAM platforms

Log analysis tools

Job description

Join a team that supports clients in detecting, investigating and responding to cybersecurity incidents. In this role, you will carry out operational incident response activities in accordance with established procedures and playbooks, maintain accurate case documentation and promptly escal…? You will gain hands‑on experience in analysing cyber threats, containing incidents and supporting the safe recovery of affected systems.

EY.AI – in this role, you will work in an environment where AI agents are part of the team and everyday project delivery. You will use solutions tailored to your role and team that support data analysis, recommendation generation and solution design.

Your scope of duties

• Analyse alerts generated by SIEM, EDR/XDR, email security, IAM, firewall and cloud security tools;
• Perform alert triage and determine whether an event constitutes a security incident;
• Assess the severity and scope of incidents, identify affected assets and evaluate the potential business impact;
• Collect and analyse logs, endpoint artefacts, account activity, IP addresses, domains, file hashes and process information;
• Identify indicators of compromise, including suspicious logins, processes, files, domains and network connections;
• Perform containment actions, such as isolating hosts, blocking indicators of compromise, suspending accounts and resetting passwords;
• Support eradication and recovery activities by verifying that threats have been removed and systems have been safely restored;
• Build incident timelines and maintain complete case documentation;
• Perform root cause analysis and identify information required for further investigation;
• Contribute to updates of incident response playbooks, knowledge base articles and lessons learned documentation;
• Participate in on-call rotations and incident response exercises, where applicable.

Our requirements

• Basic knowledge of digital forensics and evidence preservation;
• Knowledge of cybersecurity, computer networks, operating systems and authentication mechanisms;
• Familiarity with SIEM, EDR/XDR, firewalls, proxies, IAM platforms and log analysis tools;
• Scripting skills in PowerShell, Bash or Python;
• Understanding of common attack techniques, including phishing, credential theft, malware, brute-force attacks, lateral movement and privilege escalation;
• Basic knowledge of MITRE ATT&CK and the incident response lifecycle;
• Basic understanding of cloud environments, including IAM, logging, compute, storage and networking.

What we offer

• Professional and financial support in obtaining recognised qualifications and certificates;
• EY Badges – global certification of your competencies and the opportunity to earn an MBA from the prestigious Hult International School of Business;
• Career Counselor – professional, one-to-one guidance on career building and development;
• Psycho-educational platform – a package of free consultations with specialists in the broad field of mental health and personal development, as well as access to educational activities;
• Benefit programme offering private healthcare with additional preventive examinations, life insurance, tickets, team sports, a language learning platform, sports cards and much more, available both online and offline.

Recruitment stages

• Let’s talk. You will meet Talent Acquisition experts and members of your future team.

About EY Poland

We are a global consulting and technology company.

We make a difference

by transforming and changing services, products, organisations and even the rules of the game. We combine business and technology expertise with artificial intelligence and human talent. We help organisations solve complex problems, make better decisions and implement positive change.

We provide confidence

in data, opinions, standards, technology and security.

Every day, we take on challenges, analyse opportunities, create prompts, conduct research, collaborate, ask the right questions, plan, model, code, experiment and learn. We create solutions that are essential to our clients.

This is where friendships, relationships and lifelong memories are made.

This is where you do difficult and meaningful work with supportive and exceptional people

We employ more than 400,000 exceptional people in over 150 countries worldwide. In Poland, our team consists of more than 7,000 people working in Warsaw, Gdańsk, Katowice, Kraków, Łódź, Poznań, Szczecin, Rzeszów and Wrocław, as well as at our Global Delivery Services centres in Warsaw and Wrocław.

We care about the environment, not only the business environment. As part of our plan, we have reduced our global greenhouse gas emissions by 40% compared with the 2019 baseline.

EY is an equal opportunity employer. We value and promote the diversity of knowledge, experience and perspectives within our community. We create an environment based on respect, openness and collaboration, where everyone can grow and make a meaningful impact. Through our “Poziom Wyżej bez Barier” programme, we support employees with disabilities in pursuing their professional ambitions and aspirations.

EY provides equal opportunities to all candidates throughout the recruitment process, regardless of gender, age, race, religion, sexual orientation, origin, disability or any other legally protected characteristic, in accordance with applicable law.