Security Incident Response Analyst – Defender XDR Expert

DS Smith; Kraków; On-site; PLN 100,000 - 150,000; Full time

Job summary

DS Smith Krakow is seeking a Security Analyst to join the IT Security Operations team. You will triage security incidents, perform root-cause analysis and remediation, and keep stakeholders informed throughout the lifecycle of events.

You will work with Microsoft Defender XDR, Defender for Endpoint/Identity, and Tanium to monitor, investigate, and mitigate threats. Strong communication, documentation, and cross-team collaboration are essential.

Qualifications

• 2–3 years of experience in security incident response and remediation.
• Experience with Microsoft Defender XDR and related tools.
• Knowledge of security frameworks (NIST, ISO27001) and ISMS.
• Excellent interpersonal, communication, and report-writing skills.
• Fluency in English, ability to work with cross-functional teams.

Responsibilities

• Monitor security events, alerts and logs with Defender suite to detect threats.
• Investigate, triage and lead incident response and remediation activities.
• Contain, eradicate and recover from security incidents with minimal downtime.
• Document incident details and lessons learned; contribute to post-incident reports.
• Collaborate with IT operations, compliance and third-party SOC partners.
• Maintain endpoint security posture with Tanium and asset management.
• Create and update playbooks; ensure alignment with policies and standards.
• Perform daily security checks and support incident communications via ServiceNow.

Skills

Security Incident Response

Threat mitigation

Microsoft Defender XDR

Defender for Endpoint

Defender for Identity

Microsoft 365 Defender

Azure AD

Active Directory

Endpoint security

English fluency

Incident remediation

Security Operations Center (SOC)

NIST / ISO27001 ISMS

Education

Bachelor’s degree in a relevant field

Tools

Tanium

ServiceNow

Microsoft Defender Suite

Microsoft Defender for Endpoint

Microsoft Defender for Identity

Microsoft Defender for Office 365

Active Directory

Azure AD

Job description

DS Smith Krakow is seeking a Security Analyst to join the IT Security Operations team. You will triage security incidents, perform root-cause analysis and remediation, and keep stakeholders informed throughout the lifecycle of events.

You will work with Microsoft Defender XDR, Defender for Endpoint/Identity, and Tanium to monitor, investigate, and mitigate threats. Strong communication, documentation, and cross-team collaboration are essential.