Senior Cyber Incident Response & Forensics Lead

Ørsted Group; Warszawa; On-site; PLN 180,000 - 340,000; Full time

Job summary

Ørsted Group is seeking a cyber security professional to lead investigations across IT and OT environments from its Cyber Defence Centre in Warsaw. The role focuses on root-cause analysis, incident coordination, and clear, actionable recommendations for stakeholders.

You will develop threat hunting capabilities, perform forensic investigations, and contribute to improving incident response playbooks while working with global teams and external partners.

Qualifications

• Hands-on experience investigating and responding to cyber incidents.
• Deep technical knowledge of computer systems, networks and endpoints.
• Experience with threat hunting and digital forensics.
• Ability to translate complex findings into clear information for stakeholders.

Responsibilities

• Leading and carrying out technical investigations of cyber security incidents across global IT and OT environments.
• Analyzing logs, network and endpoint data, forensic evidence, and other technical information to establish root cause, scope, and impact.
• Coordinating incident response across technical teams and translating complex findings into clear information and recommendations for stakeholders.
• Designing and carrying out intelligence-led threat hunting and forensic investigations.
• Documenting investigations, lessons learned, and incident timelines, and improving incident response playbooks and procedures.
• Participating in a compensated, rotating on-call scheme to maintain readiness outside normal hours.

Skills

Incident response

Threat hunting

Digital forensics

SIEM / XDR / EDR

Root cause analysis

Stakeholder communication

Independent work

Tools

SIEM

EDR

XDR

Job description

Ørsted Group is seeking a cyber security professional to lead investigations across IT and OT environments from its Cyber Defence Centre in Warsaw. The role focuses on root-cause analysis, incident coordination, and clear, actionable recommendations for stakeholders.

You will develop threat hunting capabilities, perform forensic investigations, and contribute to improving incident response playbooks while working with global teams and external partners.