Junior Incident Response Analyst: Hands-On Cyber Defense

EY; Wrocław; Vor Ort; PLN 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

EY Badges

Career Counselor

Psycho-educational platform

Private healthcare

Zusammenfassung

EY Poland is seeking a cybersecurity Incident Response Specialist to join a team that detects, investigates and responds to incidents. You will carry out operational incident response activities, document cases and escalate as needed.

You will gain hands-on experience analysing cyber threats, containing incidents and supporting the safe recovery of affected systems within EY Poland and EY AI initiatives.

Qualifikationen

• Basic knowledge of digital forensics and evidence preservation.

Aufgaben

• Analyse alerts generated by SIEM, EDR/XDR, email security, IAM, firewall and cloud security tools.
• Perform alert triage and determine whether an event constitutes a security incident.
• Assess the severity and scope of incidents, identify affected assets and evaluate the potential business impact.
• Collect and analyse logs, endpoint artefacts, account activity, IP addresses, domains, file hashes and process information.
• Identify indicators of compromise, including suspicious logins, processes, files, domains and network connections.
• Perform containment actions, such as isolating hosts, blocking indicators of compromise, suspending accounts and resetting passwords.
• Support eradication and recovery activities by verifying that threats have been removed and systems have been safely restored.
• Build incident timelines and maintain complete case documentation.
• Perform root cause analysis and identify information required for further investigation.
• Contribute to updates of incident response playbooks, knowledge base articles and lessons learned documentation.
• Participate in on-call rotations and incident response exercises, where applicable.

Kenntnisse

Incident response

Threat analysis

PowerShell

Bash

Python

MITRE ATT&CK

Cloud security

SOC operations

SIEM

EDR/XDR

Firewalls

IAM platforms

Log analysis tools

Tools

SIEM

EDR/XDR

Firewalls

IAM platforms

Log analysis tools

Jobbeschreibung

EY Poland is seeking a cybersecurity Incident Response Specialist to join a team that detects, investigates and responds to incidents. You will carry out operational incident response activities, document cases and escalate as needed.

You will gain hands-on experience analysing cyber threats, containing incidents and supporting the safe recovery of affected systems within EY Poland and EY AI initiatives.