Security Analyst Incident Response & Threat Intelligence

Infotree Global Solutions; Poland; On-site; PLN 70,000 - 90,000; Full time

Job summary

A cybersecurity solutions provider is seeking a Security Analyst for Incident Response & Threat Intelligence in Poland. The role focuses on threat hunting, proactive analysis, and collaboration with senior analysts in a hybrid work environment. Candidates should have over 3 years of experience and strong knowledge of security operations, EDR tools, and vulnerability management. This position offers a dynamic work environment with exposure to diverse security challenges.

Qualifications

• 3 years+ experience in Threat Intelligence, Threat Hunting, or Incident Response roles.
• Demonstrated experience supporting investigations and proactive security analysis.
• Strong hands-on experience with EDR platforms and SIEM/log analytics tools.

Responsibilities

• Support proactive threat hunting and incident response activities.
• Execute hypothesis-driven threat hunts across various telemetry.
• Analyze adversary behavior using MITRE ATT&CK.

Skills

Threat Intelligence experience

Threat Hunting experience

Incident Response experience

EDR platforms

SIEM/log analytics tools

Vulnerability exploitation

Adversary tradecraft

Strong communication skills

Education

Bachelor's degree in Cybersecurity

3+ years relevant experience

Job description

We are seeking a Security Analyst, Incident Response & Threat Intelligence to support threat hunting, threat intelligence, incident response, and exposure-focused analysis within the GTS - Security & Compliance team.

This role works closely with Senior Analysts and security leadership, contributing to investigations, security operations, and proactive analysis across a global enterprise environment.

Key Responsibilities

• Support proactive threat hunting, threat intelligence, and incident response activities in collaboration with Senior Analysts
• Execute hypothesis-driven threat hunts and investigative analysis across endpoint, identity, cloud, and network telemetry
• Assist in assessing, investigating, and responding to high-priority security events under the guidance of senior analysts and management
• Analyze adversary behavior using MITRE ATT&CK and current realworld threat activity
• Partner with Vulnerability Management to apply threat intelligence to vulnerability prioritization, risk assessment, and remediation efforts
• Contribute to exposure management by identifying misconfigurations, attack paths, and chained weaknesses across the environment
• Help translate intelligence findings, hunt results, and exposure insights into actionable detection and response recommendations
• Collaborate with SOC, Privacy, Legal, Compliance, IT, Vulnerability Management, and business stakeholders during investigations
• Produce clear, well-structured documentation and investigation summaries for leadership and incident records

Skills

• 3 years+ of experience in Threat Intelligence, Threat Hunting, or Incident Response roles
• Demonstrated experience supporting investigations and proactive security analysis within enterprise environments
• Strong hands‑on experience with EDR platforms and SIEM / log analytics tools
• Solid understanding of vulnerability exploitation, exposure management, and attack path analysis
• Strong knowledge of adversary tradecraft, attacker behavior, and modern intrusion techniques
• Ability to operate independently, think critically, and make sound decisions under pressure while collaborating with senior analysts
• Strong written and verbal communication skills, with the ability to clearly document findings and explain technical issues to varied audiences
• No direct people management responsibilities
• May provide technical guidance and informal mentorship to peers during investigations, as appropriate

Education

• Bachelor's degree in Cybersecurity, Computer Science, or a related field, or equivalent practical experience
• 3+ years of hands‑on experience in Threat Intelligence, Threat Hunting, or Incident Response may substitute for formal education
• Industry certifications are preferred but not required, including:
  • GIAC (GCIA, GCIH, GCED, GCIR, GNFA, GCFA)
  • Offensive Security (OSCP, OSCE)
  • Red Team / Adversary Emulation (CRTO, CRTP, CRTA)
  • Digital Forensics & Incident Response (GCFA, GNFA, CFCE, EnCE)

Locations Warsaw Remote status Hybrid