Lead Cybersecurity Incident Responder & Threat Hunter

Ørsted A/S; Warszawa; On-site; PLN 180,000 - 270,000; Full time

Job summary

Ørsted A/S is seeking a cybersecurity incident response specialist to lead and develop our cyber response, threat hunting, and forensic investigations across IT and OT environments worldwide. You’ll be part of the Cyber Defence Centre, collaborating with security teams, intelligence vendors, and national authorities.

You’ll drive incident analyses, report findings, and update playbooks while maintaining 24/7 readiness to defend Ørsted, its people, assets, and IP.

Qualifications

• Years of incident response experience.
• Experience with cloud logs, network captures and forensic images.
• Industry certifications such as GCFA/GCFE.
• Strong communication to key stakeholders.

Responsibilities

• Lead incidents and act as technical analyst in cyber response for IT and OT environments worldwide.
• Analyze security events and incidents to identify root causes and impact.
• Inform stakeholders and improve Ørsted’s security posture via reporting and lessons learned.
• Collect incident data and coordinate analyses.
• Update incident analyst playbooks at operational and coordination levels.
• Design and execute intelligence-based threat hunting and drive forensic investigations to completion.
• Maintain 24/7 readiness to respond to cyber-attacks globally.

Skills

Incident response

Stakeholder comms

Self-driven

Team player

Continuous learning

Education

GCFA/GCFE certifications

Tools

SIEM

XDR

Networking

Job description

Ørsted A/S is seeking a cybersecurity incident response specialist to lead and develop our cyber response, threat hunting, and forensic investigations across IT and OT environments worldwide. You’ll be part of the Cyber Defence Centre, collaborating with security teams, intelligence vendors, and national authorities.

You’ll drive incident analyses, report findings, and update playbooks while maintaining 24/7 readiness to defend Ørsted, its people, assets, and IP.