Senior Security Analyst for Detection Engineering @ Link Group

Link Group; Remote; PLN 180,000 - 240,000; Full time

Job summary

A leading security firm is seeking a Senior Security Analyst to enhance threat detection and incident response processes. This remote role includes analyzing CrowdStrike alerts and SIEM incidents, investigating phishing tickets, and developing custom detection rules. The ideal candidate should possess CCFR and CCFH certifications, and have strong experience with Splunk or similar platforms. Your analytical skills will be key to improving the security posture of the organization.

Qualifications

• CCFR and CCFH certifications are required.
• Strong experience with Splunk or other SIEM platforms.
• Experience in phishing analysis and incident response.

Responsibilities

• Analyze and respond to CrowdStrike and SIEM incidents.
• Investigate and remediate phishing tickets.
• Identify attack patterns.

Job description

Senior Security Analyst (Detection & Response)

Location: Remote

Cooperation: B2B / Contract

About the Role

We are looking for a Senior Security Analyst to lead threat detection, incident response, and phishing analysis. The role involves optimizing detection rules, managing CrowdStrike alerts, and collaborating with security and IT teams to strengthen overall security posture.

Responsibilities

• Analyze and respond to CrowdStrike and SIEM incidents
• Investigate and remediate phishing tickets
• Identify attack patterns
• Develop and tune custom detection rules (Sigma or similar)
• Maintain endpoint protection and troubleshoot CrowdStrike agents
• Document incidents and provide recommendations for improvement
• Stay updated on cyber‑threats and phishing trends

Requirements

• CCFR and CCFH certifications
• Strong experience with Splunk or other SIEM platforms
• Experience in phishing analysis and incident response
• Ability to create and optimize detection rules
• Analytical, detail‑oriented, and collaborative
• Experience with Defender for O365 is a plus
• Proficiency with CrowdStrike management and endpoint protection