Junior Incident Response Analyst - Hands-on IR & Forensics

EY; Rzeszów; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

EY Badges – global certification of你的

Career Counselor

Psycho-educational platform

Private healthcare and life insurance

Job summary

EY Poland is seeking an Incident Response Analyst to detect, triage and respond to cybersecurity incidents. You will work with SIEM/EDR/XDR tools, maintain case documentation and contribute to playbooks.

The role includes on-call rotations and collaboration with EY.AI initiatives to enhance security operations. You will analyse alerts, contain threats, collect evidence, and support recovery efforts across diverse environments, with a focus on protecting clients and assets.

Qualifications

• Basic knowledge of digital forensics and evidence preservation.
• Knowledge of cybersecurity, computer networks, operating systems and authentication mechanisms.
• Familiarity with SIEM, EDR/XDR, firewalls, proxies, IAM platforms and log analysis tools.
• Scripting skills in PowerShell, Bash or Python.
• Understanding of common attack techniques, including phishing, credential theft, malware, brute-force attacks, lateral movement and privilege escalation.

Responsibilities

• Analyse alerts generated by SIEM, EDR/XDR, email security, IAM, firewall and cloud security tools.
• Perform alert triage and determine whether an event constitutes a security incident.
• Assess the severity and scope of incidents, identify affected assets and evaluate the potential business impact.
• Collect and analyse logs, endpoint artefacts, account activity, IP addresses, domains, file hashes and process information.
• Identify indicators of compromise, including suspicious logins, processes, files, domains and network connections.
• Perform containment actions, such as isolating hosts, blocking indicators of compromise, suspending accounts and resetting passwords.
• Support eradication and recovery activities by verifying that threats have been removed and systems have been safely restored.
• Build incident timelines and maintain complete case documentation.

Skills

PowerShell scripting

Bash scripting

Python scripting

MITRE ATT&CK knowledge

Incident response

Digital forensics basics

Threat analysis

Tools

SIEM

EDR/XDR

Firewalls

Log analysis tools

IAM platforms

Job description

EY Poland is seeking an Incident Response Analyst to detect, triage and respond to cybersecurity incidents. You will work with SIEM/EDR/XDR tools, maintain case documentation and contribute to playbooks.

The role includes on-call rotations and collaboration with EY.AI initiatives to enhance security operations. You will analyse alerts, contain threats, collect evidence, and support recovery efforts across diverse environments, with a focus on protecting clients and assets.