Security Operations Analyst

Haleon; Poznań; On-site; PLN 246,000 - 338,000; Full time

Benefits offered by this job

Contract of employment

Annual bonus

Fully on-site role with on-call duties

Private medical package

Multisport card

Pension plan membership

Learning paths and development tools

Generali Life insurance

Integration events

Family-friendly benefits

Job summary

Haleon in Poznań is seeking an experienced Cyber Security Operations professional to protect corporate assets and manage day-to-day cyber security defences. You will triage alerts, analyze events and incidents, and collaborate with Threat Intelligence to improve playbooks and runbooks.

Requirements include 3+ years in cybersecurity, 2+ years in a SecOps SOC, and experience across international manufacturing. A strong understanding of SIEM/EDR/XDR, firewalls, and incident response is essential.

Qualifications

• +3 years of professional experience in cybersecurity, with some experience of responding to significant cyber incidents involving Organised Crime and Nations State threat actors.
• +2 years of working in Cyber Security Operations Centre
• Experience working across international manufacturing.

Responsibilities

• Operate as part of a 24/7 Cyber Security Operations (SecOps) team that continuously monitors the security of the company.
• Undertake the timely triage of security alerts to allow for rapid incident detection and response.
• Perform deep-dive analysis of security events, logs, network traffic and forensic data to determine root cause, identifying suspicious and/or anomalous activities and taking appropriate action based on documented processes and procedures.
• Recommended modifications to internal defences and processes for more effective and efficient security operations.
• Manage security incidents through all phases of the incident response lifecycle from identification through to closure.
• Ensures that delegated response and remediation actions are completed in line with SLAs.
• Provides expert analytic investigative support of complex security incidents.
• Supports the tuning of all security tooling and the development of bespoke correlation rules / use cases aligned to business operations, internal risk profiles and current threat intelligence.
• Ensure that the automation and orchestration of day-to-day operations is maximised, and that analysis / response activities are performed as efficiently as possible.
• Execute L2/L3 event or incident response and investigations into suspicious activity.
• Generate post-incident reviews to ensure gaps are closed to prevent future events.
• Collaborate with Threat Intelligence to groom threat feeds and help translate findings.
• Help prioritize content, develop, and implement playbooks and runbooks

Skills

SecOps experience

Threat intel collaboration

Incident response

Communication

Team player

International manufacturing

Education

Security certifications (e.g., CISSP)

Tools

SIEM

EDR/XDR

Firewall/IDS/IPS

Job description

Welcome to Haleon. We’re a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we’ve grown, evolved and are now entering an exciting new chapter – one filled with bold ambitions and enormous opportunity. Our trusted portfolio of brands – including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® – lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science. Now it’s time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose – to deliver better everyday health with humanity – at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.

Role overview

This position is critical to protecting Haleon’s corporate assets and managing its day-to-day operational cyber security defences. It involves detailed analysis to identify threats, quantify vulnerabilities and reduce risk to the company. It requires the timely review of cyber security alerts generated by security devices, assessment of the situation and management of incidents to successful resolution. In all cases, the incumbent will be required to respond to events using appropriate tools and procedures.

Key responsibilities:

• Operate as part of a 24 /7 Cyber Security Operations (SecOps) team that continuously monitors the security of the company.
• Undertake the timely triage of security alerts to allow for rapid incident detection and response.
• Perform deep-dive analysis of security events, logs, network traffic and forensic data to determine root cause, identifying suspicious and / or anomalous activities and taking appropriate action based on documented processes and procedures.
• Recommended modifications to internal defences and processes for more effective and efficient security operations.
• Manage security incidents through all phases of the incident response lifecycle from identification through to closure.
• Ensures that delegated response and remediation actions are completed in line with SLAs.
• Provides expert analytic investigative support of complex security incidents.
• Supports the tuning of all security tooling and the development of bespoke correlation rules / use cases aligned to business operations, internal risk profiles and current threat intelligence.
• Ensure that the automation and orchestration of day-to-day operations is maximised, and that analysis / response activities are performed as efficiently as possible.
• Execute L2/L3 event or incident response and investigations into suspicious activity.
• Generate post-incident reviews to ensure gaps are closed to prevent future events.
• Collaborate with Threat Intelligence to groom threat feeds and help translate findings.
• Help prioritize content, develop, and implement playbooks and runbooks

Your profile

Required

• +3 years of professional experience in cybersecurity, with some experience of responding to significant cyber incidents involving Organised Crime and Nations State threat actors
• +2 years of working in Cyber Security Operations Centre
• Experience working across international manufacturing.
• Understanding of security controls and how they are used to detect and respond
• Knowledge of common network protocols, edge routing technologies, firewall/IDS/IPS, SIEM, EDR/XDR.
• Ability to communicate complex problems succinctly.
• Ability to work within a team environment, sharing workload and responsibility.

Preferred

• Certificates: CISSP, GCIA, GCDA, GSOC, GCIH

Why Haleon?

None of us should ever feel like we’re standing still. At Haleon, we want you to feel supported, valued, and always progressing. Improving everyday health takes dedication, energy, and effort — so we reward your contribution with a benefits package that includes:

• Contract of employment
• Annual bonus that reflects performance
• Fully on-site role with on-call duties (weekends)
• Private medical package (Medicover) with additional preventive healthcare services for employees and their eligible
• Multisport card or points on the Multicafeteria Benefits account
• Health and wellbeing programmes that take care of you physically and mentally
• Pension plan membership and savings programme (PPE)
• Personalized learning paths and access to diverse development tools to support your professional growth.
• Generali Life insurance
• Supportive community and integration events
• Family benefits (extraparental leave,caregiver’spolicy)
• Free car and bike parking

PLN 245 668,00 - PLN 337 793,50 The salary range for this position is indicative and provided as a guide. The final offer may vary depending on factors including relevant experience, skills, qualifications, and internal equity considerations. Further details regarding the total reward and benefits package will be shared during the recruitment process. Salary ranges may vary by location in line with local market conditions and applicable pay transparency regulations. Compensation information is shared for the primary location of this role. Where the position is advertised with additional locations the compensation range will be discussed during the recruiting process.

Job Posting End Date 2026-10-30

Equal Opportunities

Haleon are committed to mobilising our purpose in a way that represents the diverse consumers and communities who rely on our brands every day. It guides us in creating an inclusive culture, where different backgrounds and views are valued and respected – all in support of understanding and best serving the needs of our consumers and unleashing the full potential of our people. It’s important to us that Haleon is a place where all our employees feel they truly belong. During the application process, we may ask you to share some personal information, which is entirely voluntary. This information ensures we meet certain regulatory and reporting obligations and supports the development, refinement, and execution of our inclusion and belonging programmes that are open to all Haleon employees. The personal information you provide will be kept confidential, used only for legitimate business purposes, and will never be used in making any employment decisions, including hiring decisions.

Adjustment or Accommodations Request

If you require a reasonable adjustment or accommodation or other assistance to apply for a job at Haleon at any stage of the application process, please let your recruiter know by providing them with a description of specific adjustments you are requesting. We’ll provide all reasonable adjustments to support you throughout the recruitment process and treat all information you provide us in confidence.

Note to candidates

The Haleon recruitment team will contact you using a Haleon email account (@haleon.com). If you are not sure whether the email you received is from Haleon, please get in touch.

Welcome to Haleon. We’re a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we’ve grown, evolved and are now entering an exciting new chapter – one filled with bold ambitions and enormous opportunity. Our trusted portfolio of brands – including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® – lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science. Now it’s time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose – to deliver better everyday health with humanity – at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.