Senior Incident Response & Threat Hunter

Orsted Hornsea Project Four Limited; Warszawa; Hybrid; PLN 90,000 - 130,000; Full time

Job summary

Ørsted is seeking a Cyber Security Incident Response Lead to investigate and respond to cyber security incidents across IT and OT environments. You will analyze logs, timelines, and forensic data to identify root causes and impacts, coordinating decisive actions with technical teams and stakeholders.

You will also contribute to threat hunting, forensic investigations, and the continual improvement of incident response playbooks and detection capabilities, working within the Cyber Defence Centre

Qualifications

• Hands-on experience investigating and responding to cyber security incidents across IT/OT
• Deep technical knowledge of computer systems, networks, endpoints and security
• Experience with security monitoring and investigation technologies such as SIEM, XDR or EDR
• Experience with threat hunting, digital forensics or related investigative activities
• Ability to communicate complex technical issues clearly to both technical colleagues and senior stakeholders
• Ability to work independently and prioritize during incidents

Responsibilities

• Lead and carry out technical investigations of cyber security incidents across global IT and OT environments
• Analyze logs, network and endpoint data, forensic evidence to determine root cause, scope and impact
• Coordinate incident response across technical teams and translate findings into clear recommendations
• Design and carry out intelligence-led threat hunting and forensic investigations
• Document investigations, lessons learned, and incident timelines; improve playbooks and procedures
• Participate in a compensated, rotating on-call scheme for after-hours readiness

Skills

Incident response

Technical breadth

Security monitoring

Threat hunting/forensics

Technical communication

Independent prioritization

Tools

SIEM

XDR/EDR

Job description

Ørsted is seeking a Cyber Security Incident Response Lead to investigate and respond to cyber security incidents across IT and OT environments. You will analyze logs, timelines, and forensic data to identify root causes and impacts, coordinating decisive actions with technical teams and stakeholders.

You will also contribute to threat hunting, forensic investigations, and the continual improvement of incident response playbooks and detection capabilities, working within the Cyber Defence Centre