Security Analyst (L2) — 24/7 SIEM, Threat Detection & Response

HCLTech; Kraków; On-site; PLN 150,000 - 210,000; Full time

Benefits offered by this job

Life insurance

Private medical care

MultiSport Card

Subsidy for glasses

Subsidy to language courses

Christmas and holiday bonuses

Job summary

HCLTech in Kraków seeks a skilled L2 Security Analyst to monitor, investigate, and respond to identity-based and endpoint threats in a 24/7 environment. You will collaborate with global security teams to detect, contain, and remediate threats using Defender for Endpoint and SIEM data.

The role emphasizes improving detection logic, providing actionable feedback to engineering, and delivering regular security reports. Travel may be required occasionally.

Qualifications

• Knowledge of SIEM monitoring and threat detection.
• Experience with incident response processes and containment.
• Ability to produce security reports and trend analyses.
• Familiarity with MITRE framework or similar standards.
• Strong communication and cross-functional collaboration skills.

Responsibilities

• Monitor and investigate security events in real time.
• Respond to identity-based and endpoint threats.
• Collaborate with global security teams for threat containment and remediation.
• Review escalated incidents and provide feedback for rule optimization.
• Produce monthly, weekly, and daily security reports.

Skills

SIEM monitoring

Threat hunting

IDS/EDR knowledge

Incident response

Log analysis

Reporting and analytics

Communication skills

24/7 operations

Threat detection

Cross-functional collaboration

Tools

SIEM tools

IDS

EDR platforms

Job description

HCLTech in Kraków seeks a skilled L2 Security Analyst to monitor, investigate, and respond to identity-based and endpoint threats in a 24/7 environment. You will collaborate with global security teams to detect, contain, and remediate threats using Defender for Endpoint and SIEM data.

The role emphasizes improving detection logic, providing actionable feedback to engineering, and delivering regular security reports. Travel may be required occasionally.