Remote Incident Command Lead, CSIRT & Threat Hunting

Zscaler; Wrocław; On-site; PLN 180,000 - 320,000; Full time

Benefits offered by this job

Time off plans

Parental leave options

Retirement options

In-office perks, and more!

Job summary

Zscaler in Poland is seeking an Incident Response Lead, CSIRT to join our Enterprise Security team. This remote role reports to the Senior Manager, CSIRT and serves as the incident commander during major security events, while steering our threat hunting program using open-source and commercial intelligence.

You will develop and deploy high-fidelity detections, mentor SOC analysts, and drive proactive security operations to protect customers and data across global environments.

Qualifications

• Foundational AI/ML understanding and ability to position AI-driven solutions.
• Experience leading major incident response efforts within a large organization, preferably a SaaS provider.
• Experience collaborating across cross-functional departments to drive resolution of complex security issues.
• Hands-on experience with SIEM, SOAR, and EDR tools and authoring detection logic using YARA-L.
• Proven background translating technical security findings into clear executive summaries.
• Bachelor's degree in Cybersecurity, Information Technology, or a related technical field.

Responsibilities

• Serve as incident commander to lead and manage major security incidents through resolution.
• Drive proactive threat hunting initiatives using open-source and commercial intelligence to discover hidden threats.
• Develop, test, and deploy high-fidelity detection logic to enhance security monitoring.
• Act as the primary technical escalation point for SOC analysts during designated coverage shifts.
• Mentor team members and elevate overall SOC operational capabilities and incident response readiness.

Skills

AI/ML fundamentals

Incident response leadership

Cross-functional collaboration

SIEM/SOAR/EDR

YARA-L detection logic

Bachelor's degree in Cybersecurity/IT

Education

Bachelor's degree in Cybersecurity, Information Technology, or related field

Master's degree in Cybersecurity, Information Technology, or related field

Tools

SIEM

SOAR

EDR

YARA-L

Job description

Zscaler in Poland is seeking an Incident Response Lead, CSIRT to join our Enterprise Security team. This remote role reports to the Senior Manager, CSIRT and serves as the incident commander during major security events, while steering our threat hunting program using open-source and commercial intelligence.

You will develop and deploy high-fidelity detections, mentor SOC analysts, and drive proactive security operations to protect customers and data across global environments.