Senior SOC Security Analyst — Incident Response

Colonial Group; Polska; On-site; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Contract of employment

Sport card / vacation co-financing

Life Insurance

Medical Insurance

Lunch card

Annual bonus

Employee Assistance Program (EAP)

Pension scheme (PPE)

Job summary

LevelBlue in Poland seeks a Senior Security Analyst to analyze escalated security events, tune detection policies, and mentor junior analysts within the Threat Detection and Response team. The role includes on‑call duties and coordination with DFIR and client security teams to ensure effective incident response.

The ideal candidate has strong EDR, Unix/Linux and Windows administration, threat hunting, and incident handling experience, with English fluency and German or French as a plus; security

Qualifications

• Must have intermediate skills/knowledge in cyber investigation and incident handling best practices.
• Experience with Endpoint Detection and Response and incident handling.
• Unix/Linux and Windows system administration knowledge.

Responsibilities

• Analyze escalated, complex security events from EDR and related technologies.
• Resolve technical problems within managed security solutions as part of improvements.
• Create, improve, and document processes for management and monitoring of security solutions.
• Provide timely responses to DFIR and client security teams concerning incident investigation and response.
• Adhere to policies, procedures, and security best practices.

Skills

Cyber investigation

Endpoint Detection and Response

Unix/Linux administration

Windows administration

Threat Hunting

Log analysis

Web Services Administration

Education

High school diploma or equivalent

College or university degree (plus)

Tools

Palo Alto Cortex XDR

Cortex Associate

Cortex Professional

PCDRA

SentinelOne IR

CrowdStrike Falcon Responder

Job description

LevelBlue in Poland seeks a Senior Security Analyst to analyze escalated security events, tune detection policies, and mentor junior analysts within the Threat Detection and Response team. The role includes on‑call duties and coordination with DFIR and client security teams to ensure effective incident response.

The ideal candidate has strong EDR, Unix/Linux and Windows administration, threat hunting, and incident handling experience, with English fluency and German or French as a plus; security