Senior Cyber Incident Responder & Forensics Specialist

Ørsted A/S; Województwo mazowieckie; On-site; PLN 180,000 - 300,000; Full time

Job summary

Ørsted A/S in Poland invites an experienced cybersecurity incident responder to lead investigations across global IT and OT environments. You will determine root causes, assess impact, coordinate responses, and translate findings into actionable recommendations for stakeholders.

Join a collaborative Cyber Defence Centre team with opportunities for threat hunting, tool development, and ongoing improvement of incident response capabilities while staying ready for on-call rotations.

Qualifications

• Hands-on experience investigating cyber security incidents and coordinating responses.
• Deep technical knowledge of computer systems, networks and endpoints.
• Experience with security monitoring technologies such as SIEM, XDR or EDR.
• Experience with threat hunting, digital forensics, or related investigations.
• Able to communicate complex technical issues clearly to technical and non-technical stakeholders.
• Ability to work independently and prioritise during incidents.

Responsibilities

• Leading technical investigations of cyber security incidents across IT and OT environments.
• Analyzing logs, network and endpoint data to establish root cause, scope and impact.
• Coordinating incident response across technical teams and translating findings for stakeholders.
• Designing intelligence-led threat hunting and forensic investigations.
• Documenting investigations, lessons learned, and incident timelines to improve playbooks.
• Participating in a compensated, rotating on-call scheme to maintain readiness.

Skills

Incident response

Root cause analysis

Threat hunting

Digital forensics

Communication with stakeholders

Independent work

Tools

SIEM

XDR

EDR

Job description

Ørsted A/S in Poland invites an experienced cybersecurity incident responder to lead investigations across global IT and OT environments. You will determine root causes, assess impact, coordinate responses, and translate findings into actionable recommendations for stakeholders.

Join a collaborative Cyber Defence Centre team with opportunities for threat hunting, tool development, and ongoing improvement of incident response capabilities while staying ready for on-call rotations.