SOC Analyst: Threat Detection & Incident Response (Remote)

KMD Group; Warszawa; Hybrid; PLN 120,000 - 170,000; Full time

Job summary

KMD Security Operations Center (SOC) is expanding in Warsaw. We seek cybersecurity professionals to monitor, detect, and respond to incidents around the clock in a fast-paced, collaborative environment.

You will manage incidents with EDR and SIEM tools, develop detection rules, perform threat intelligence analysis, and collaborate with IT to strengthen protections. Fluent in English and Polish; master’s degree or equivalent experience preferred.

Qualifications

• 2+ years of SOC experience with EDR/SIEM tools (Microsoft and CrowdStrike stack preferred).
• Familiarity with Microsoft Azure.
• Proficient in threat detection, analysis, and response.
• Knowledgeable in malware analysis, attack methodologies, and threat intelligence.
• Strong troubleshooting and analytical skills.
• Excellent communication and documentation skills.
• Fluent in written and spoken English and Polish.
• Hold a master’s degree in cybersecurity, information technology, or a related field, or possess equivalent experience.
• Comfortable with non-standard working hours, including nights, weekends and public holidays.

Responsibilities

• Manage, investigate and respond to security incidents using EDR and SIEM tools.
• Prepare comprehensive post-incident reports, including root cause analysis, mitigation actions, and recommendations for future improvements.
• Develop and refine detection rules and response playbooks to enhance security measures.
• Perform in-depth threat intelligence analysis to identify and mitigate potential threats.
• Collaborate with IT teams to implement robust security measures.
• Stay updated on emerging threats and evolving attack techniques to ensure proactive defence strategies.

Skills

SOC experience

EDR/SIEM tools

Threat detection

Threat intelligence

Communication skills

Documentation skills

English/Polish fluency

Education

Master's degree in cybersecurity / IT

Tools

CrowdStrike

Microsoft Azure

EDR tools

SIEM

Job description

KMD Security Operations Center (SOC) is expanding in Warsaw. We seek cybersecurity professionals to monitor, detect, and respond to incidents around the clock in a fast-paced, collaborative environment.

You will manage incidents with EDR and SIEM tools, develop detection rules, perform threat intelligence analysis, and collaborate with IT to strengthen protections. Fluent in English and Polish; master’s degree or equivalent experience preferred.