SOC Analyst (Shift Lead) (f/m/d)

Danaher; Kraków; Hybrid; PLN 140,000 - 180,000; Full time

Job summary

Cytiva, hosted by Danaher, is seeking a Security Operations Center (SOC) Analyst (Shift Lead) in Kraków on a hybrid onsite model. You will lead 12-hour shift rotations, monitor and triage security events, and mentor your shift crew while partnering with the Manager, Security Operations to deliver high-quality service.

This role provides hands-on leadership and opportunities to grow into Incident Response and Cyber Engineering within a large, global security organization.

Qualifications

• 2+ years of experience in IT or Security Operations.
• Strong analytical and problem-solving abilities with attention to detail.
• Excellent cross-team communication and collaboration skills.
• Solid understanding of security principles and common attack types.

Responsibilities

• Monitor, triage, and respond to security events across a complex enterprise.
• Lead shift operations to ensure consistent monitoring and incident handling.
• Escalate incidents following defined procedures and coordinates with Tier 2/3 teams.
• Mentor and reinforce team standards and values on the shift.
• Document and improve escalation and investigation processes with stakeholders.
• Support containment and eradication activities in coordination with Incident Response.

Skills

IT Operations

Security Operations

Analytical thinking

Interpersonal communication

Tools

SIEM/SOAR

EDR

IPS

WAF

Job description

Bring more to life. At Danaher, our work saves lives. And each of us plays a part. Fueled by our culture of continuous improvement, we turn ideas into impact – innovating at the speed of life.

Our 60,000+ associates work across the globe at more than 15 unique businesses within life sciences, diagnostics, and biotechnology.

Are you ready to accelerate your potential and make a real difference? At Danaher, you can build an incredible career at a leading science and technology company, where we’re committed to hiring and developing from within. You’ll thrive in a culture of belonging where you and your unique viewpoint matter.

Learn about the Danaher Business System which makes everything possible.

The Security Operations Center (SOC) Analyst (Shift Lead) is responsible for monitoring, triaging, and responding to security events across a complex enterprise environment. This role leads investigations through to root cause by partnering with internal teams and subsidiary organizations, ensuring timely response to detections and reports while maintaining high-quality monitoring, investigation, and incident-handling practices across the shift team.

As a Shift Lead, you will gain hands‑on people leadership experience by guiding your shift crew and partnering closely with the Manager, Security Operations to deliver consistent, high-quality service as part of the Danaher Threat Management Center.

This role operates on a 24/7 shift model (Panama schedule):

• 12-hour shifts (2-2-3 rotation)
• Rotating day and night shifts (monthly)
• Includes weekends and holidays
• Operates on a hybrid work model (combining remote and office-based shifts)

As part of a large and established security organization, this position offers significant career growth for top performers, including opportunities to move into Incident Response, Cyber Engineering, and other cybersecurity disciplines.

This is a Danaher Corporate role, hosted by our Cytiva operating company in Kraków, and will be an on‑site role in Kraków.

In This Role, You Will Have The Opportunity To

• Monitor, respond to, and investigate cybersecurity events such as phishing, malware detections, brand monitoring alerts, and other security detections across a complex organization.
• Lead shift operations to ensure consistent execution of monitoring, investigation, and incident-handling processes.
• Escalate incidents to higher Tiers following defined procedures
• Support, mentor, and reinforce team standards and core values across your shift crew.
• Collaborate with internal stakeholders to document and continuously improve processes and procedures for handling escalations and investigations.
• Support Incident Response activities, including containment and eradication, in coordination with relevant teams.

The Essential Requirements Of The Job Include

• 2+ years of experience in an IT Operations and/or Security Operations environment.
• Strong analytical and problem-solving skills with high attention to detail.
• Excellent interpersonal and communication skills, with the ability to work effectively across multiple teams.
• Solid understanding of security principles, common attack types, and industry best practices.

Preferred Skills And Experience

• Experience working in a large, global, and complex enterprise environment.
• Hands‑on experience with security technologies such as SIEM/SOAR, EDR, IPS, WAF, email security, cloud security, and/or threat intelligence platforms.
• Prior experience collaborating with IT and cybersecurity teams in an operational setting (e.g., SOC, NOC, Incident Response, or Security Engineering).