Security Analyst (Threat & Exposure Management)

Infotree Global Solutions Inc.; Warszawa; On-site; PLN 120,000 - 190,000; Full time

Job summary

Infotree Global Solutions Inc. is seeking a Security Analyst to join a high-impact Security & Compliance team. You will hunt for hidden threats, respond to incidents, and drive exposure management across a modern enterprise infrastructure.

This role interfaces with global security leadership and cross-functional teams to strengthen defenses at scale. You will leverage EDR platforms, SIEM tools, and MITRE ATT&CK to map adversary tradecraft, perform threat hunts, and translate findings into

Qualifications

• Experience in Threat Intelligence, Threat Hunting, or Incident Response in enterprise environments.
• Hands-on with EDR platforms and SIEM/log analytics tools.
• Deep understanding of intrusion techniques and attacker tradecraft.
• Ability to translate technical findings for non-technical stakeholders.

Responsibilities

• Hunt and investigate across endpoint, identity, cloud, and network telemetry.
• Respond to incidents in collaboration with SOC, Privacy, Legal, and IT teams.
• Manage exposure and vulnerabilities, prioritize remediation.
• Analyze attacker tradecraft using MITRE ATT&CK framework and threat intel.
• Support red team and pentesting exercises to validate defenses.
• Produce detection logic, response playbooks, and executive-ready documentation.

Skills

Threat hunting

Incident response

Threat intelligence

MITRE ATT&CK

Analytics & correlation

Education

Bachelor's degree in Cybersecurity or Computer Science

Tools

EDR platforms

SIEM/log analytics

Vulnerability assessment

Job description

About Our Client

Our client is a global biopharmaceutical innovator dedicated to developing groundbreaking medicines that address high unmet medical needs. Driven by cutting-edge science and a commitment to patient impact, they foster a collaborative, tech-forward environment across their international operations. In this role, you will help safeguard critical infrastructure and research systems that protect vital health advancements worldwide.

The Opportunity

Are you a proactive defender who loves connecting the dots behind adversary behavior? We are looking for an ambitious Security Analyst to join a high-impact Security & Compliance team.

In this dynamic role, you will work side-by-side with Senior Security Analysts and global security leadership to hunt for hidden threats, analyze complex attack paths, participate in occasional red team/pentesting exercises, and drive exposure management across a modern enterprise infrastructure. If you thrive on threat telemetry, investigative analysis, and staying two steps ahead of real-world attackers, this is your chance to sharpen your skills at a global scale.

What You’ll Do

• Hunt & Investigate: Execute hypothesis-driven threat hunts across endpoint, identity, cloud, and network telemetry to uncover sophisticated adversary activity.

• Respond to Incidents: Collaborate with senior leadership and cross-functional teams (SOC, Privacy, Legal, IT) during high-priority security events.

• Exposure & Vulnerability Management: Leverage the Threat & Exposure Management framework to identify misconfigurations, analyze attack paths, prioritize vulnerabilities, and route them for remediation.

• Map Adversary Tradecraft: Analyze attacker tactics and techniques using the MITRE ATT&CK framework and live threat intelligence.

• Red Team Collaboration: Support occasional red team and penetration testing exercises to validate defenses and identify chained weaknesses.

• Actionable Insights: Turn threat intelligence and hunt findings into concrete detection logic, response playbooks, and clear executive documentation.

What We’re Looking For

• Experience: 3+ years in Threat Intelligence, Threat Hunting, or Incident Response within enterprise environments.

• Technical Mastery: Hands-on experience with EDR platforms, SIEM/log analytics tools, and a solid understanding of vulnerability exploitation, exposure management, and attack path analysis.

• Threat Knowledge: Deep understanding of modern intrusion techniques, attacker tradecraft, and telemetry correlation.

• Mindset: Strong critical thinking under pressure, high autonomy, and effective communication skills to translate complex technical findings for non-technical stakeholders.

• Education: Bachelor’s degree in Cybersecurity, Computer Science, or equivalent practical experience.

Nice-to-Haves / Certifications:

• GIAC: GCIA, GCIH, GCED, GCIR, GNFA, GCFA

• Offensive / Red Team: OSCP, OSCE, CRTO, CRTP, CRTA

• DFIR: CFCE, EnCE, or related specialized credentials