Junior Incident Response Analyst: Hands-on Security & Growth

EY; Katowice; On-site; PLN 90,000 - 120,000; Full time

Benefits offered by this job

Qualifications support

EY Badges

Career Counselor

Psycho-educational platform

Private healthcare

Job summary

EY Poland is seeking an Incident Response professional to join a team that detects, investigates and responds to cybersecurity incidents. You will carry out operational activities, document cases, and escalate where needed, gaining hands-on experience in threat analysis, containment and safe recovery of affected systems.

In EY AI– powered environments you will work with AI-assisted solutions, contribute to playbooks, and participate in incident response exercises, ensuring robust security

Qualifications

• Basic knowledge of digital forensics and evidence preservation.
• Knowledge of cybersecurity, computer networks, operating systems and authentication mechanisms.
• Familiarity with SIEM, EDR/XDR, firewalls, proxies, IAM platforms and log analysis tools.
• Scripting skills in PowerShell, Bash or Python.
• Understanding of common attack techniques, including phishing, credential theft, malware, brute-force attacks, lateral movement and privilege escalation.
• Basic knowledge of MITRE ATT&CK and the incident response lifecycle.
• Basic understanding of cloud environments, including IAM, logging, compute, storage and networking.

Responsibilities

• Analyse alerts generated by SIEM, EDR/XDR, email security, IAM, firewall and cloud security tools.
• Perform alert triage and determine whether an event constitutes a security incident.
• Assess the severity and scope of incidents, identify affected assets and evaluate the potential business impact.
• Collect and analyse logs, endpoint artefacts, account activity, IP addresses, domains, file hashes and process information.
• Identify indicators of compromise, including suspicious logins, processes, files, domains and network connections.
• Perform containment actions, such as isolating hosts, blocking indicators of compromise, suspending accounts and resetting passwords.
• Support eradication and recovery activities by verifying that threats have been removed and systems have been safely restored.
• Build incident timelines and maintain complete case documentation.
• Perform root cause analysis and identify information required for further investigation.
• Contribute to updates of incident response playbooks, knowledge base articles and lessons learned documentation.
• Participate in on-call rotations and incident response exercises, where applicable.

Skills

Digital forensics

Cybersecurity basics

SIEM/EDR/XDR

Log analysis

Scripting

MITRE ATT&CK

Cloud basics

Incident response lifecycle

Tools

PowerShell

Python

Bash

Cloud platforms

Log analysis tools

Job description

EY Poland is seeking an Incident Response professional to join a team that detects, investigates and responds to cybersecurity incidents. You will carry out operational activities, document cases, and escalate where needed, gaining hands-on experience in threat analysis, containment and safe recovery of affected systems.

In EY AI– powered environments you will work with AI-assisted solutions, contribute to playbooks, and participate in incident response exercises, ensuring robust security