SOC Specialist

KMD Group; Warszawa; Hybrid; PLN 120,000 - 170,000; Full time

Job summary

KMD Security Operations Center (SOC) is expanding in Warsaw. We seek cybersecurity professionals to monitor, detect, and respond to incidents around the clock in a fast-paced, collaborative environment.

You will manage incidents with EDR and SIEM tools, develop detection rules, perform threat intelligence analysis, and collaborate with IT to strengthen protections. Fluent in English and Polish; master’s degree or equivalent experience preferred.

Qualifications

• 2+ years of SOC experience with EDR/SIEM tools (Microsoft and CrowdStrike stack preferred).
• Familiarity with Microsoft Azure.
• Proficient in threat detection, analysis, and response.
• Knowledgeable in malware analysis, attack methodologies, and threat intelligence.
• Strong troubleshooting and analytical skills.
• Excellent communication and documentation skills.
• Fluent in written and spoken English and Polish.
• Hold a master’s degree in cybersecurity, information technology, or a related field, or possess equivalent experience.
• Comfortable with non-standard working hours, including nights, weekends and public holidays.

Responsibilities

• Manage, investigate and respond to security incidents using EDR and SIEM tools.
• Prepare comprehensive post-incident reports, including root cause analysis, mitigation actions, and recommendations for future improvements.
• Develop and refine detection rules and response playbooks to enhance security measures.
• Perform in-depth threat intelligence analysis to identify and mitigate potential threats.
• Collaborate with IT teams to implement robust security measures.
• Stay updated on emerging threats and evolving attack techniques to ensure proactive defence strategies.

Skills

SOC experience

EDR/SIEM tools

Threat detection

Threat intelligence

Communication skills

Documentation skills

English/Polish fluency

Education

Master's degree in cybersecurity / IT

Tools

CrowdStrike

Microsoft Azure

EDR tools

SIEM

Job description

At KMD, we build digital solutions used by millions of people around the world. These solutions are the digital foundations of our most important institutions, from governments and public services to financial industries and private companies. Our mission is to ensure that they are reliable, accessible, and efficient.

We believe that the future is what you make it. So a career at KMD is a career with purpose and freedom. One where you’ll have a direct hand in improving the lives of people, while being empowered with the resources and autonomy to shape the course of your own professional journey.

Location: Warsaw/remote work

About the job:

KMD Security Operations Center (SOC) is the backbone of our organization’s IT security, ensuring constant protection by monitoring systems, detecting threats and responding to incidents. As we expand our team to deliver 24/7/365 system monitoring, we’re seeking driven professionals ready to make an impact. If you’re passionate about cybersecurity and want to grow your skills in a collaborative and fast-paced environment, we’d love to have you on our team!

Your future role:

Manage, investigate and respond to security incidents using EDR and SIEM tools.

Prepare comprehensive post-incident reports, including root cause analysis, mitigation actions, and recommendations for future improvements.

Develop and refine detection rules and response playbooks to enhance security measures.

Perform in-depth threat intelligence analysis to identify and mitigate potential threats.

Collaborate with IT teams to implement robust security measures.

Stay updated on emerging threats and evolving attack techniques to ensure proactive defence strategies.

What you bring:

2+ years of SOC experience working with EDR/SIEM tools (Microsoft and CrowdStrike stack preferred).

Familiarity with Microsoft Azure.

Proficient in threat detection, analysis, and response.

Knowledgeable in malware analysis, attack methodologies, and threat intelligence.

Strong troubleshooting and analytical skills.

Excellent communication and documentation skills.

Fluent in written and spoken English and Polish.

Eager to learn new skills and technologies, committed to continuous development in the field.

Hold a master’s degree in cybersecurity, information technology, or a related field, or possess equivalent experience.

Comfortable with non-standard working hours, including nights, weekends and public holidays.

Availability for employment contract

KMD (an NEC company) is committed to providing equal opportunities. Hence, we invite all qualified interested applicants to apply for career opportunities. At KMD all aspects of employment and cooperation including the decision to hire/cooperate with will be based on merit, competence, performance, and business needs without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or any other status protected under local anti-discrimination legislation.