Threat Intelligence & Incident Response Lead

DS Smith; Kraków; On-site; PLN 120,000 - 180,000; Full time

Job summary

DS Smith is seeking a skilled Threat Intelligence Analyst to join its Information Security team in Kraków. You will identify, analyse, and communicate cyber threats to protect operations, data, and infrastructure, translating intelligence into actionable guidance for proactive defense.

The role involves monitoring the threat landscape, performing incident response activities, and collaborating with SOC and technology stakeholders to strengthen detection and response capabilities across the

Qualifications

• Proven hands-on experience managing security incidents through the full incident response lifecycle.
• Strong understanding of threat actor behaviour and threat intelligence frameworks such as MITRE ATT&CK.
• Advanced knowledge of Microsoft Sentinel and Defender for threat hunting and investigation.
• Experience with OSINT, dark web monitoring, and threat intel feeds.
• Scripting and automation using PowerShell or Python.
• Excellent communication skills to translate findings into business-focused recommendations.

Responsibilities

• Monitor the global threat landscape relevant to DS Smith and the manufacturing sector.
• Analyse intelligence from OSINT, commercial feeds, industry sharing platforms, and dark web monitoring tools.
• Correlate external intelligence with internal security events using Microsoft Sentinel and Microsoft Defender.
• Develop and maintain advanced KQL queries to support threat hunting, detection engineering, and incident investigation.
• Produce actionable threat intelligence reports, threat actor profiles, IoCs, and executive briefings.
• Support and participate in incident response activities from initial triage through containment, eradication, recovery, and post-incident review.
• Conduct forensic investigations and provide threat context during live security incidents.
• Collaborate with SOC teams, security architects, and technology stakeholders to strengthen detection and response capabilities.
• Contribute to threat models, risk assessments, playbooks, and operational processes.
• Maintain awareness of evolving cyber threats and trends affecting manufacturing and logistics.

Skills

Threat intelligence

Incident response

Threat hunting

KQL

PowerShell

Python

Microsoft Sentinel

Microsoft Defender

Dark web monitoring

MITRE ATT&CK

Security operations

Tools

DarkIQ

Microsoft Sentinel

Microsoft Defender

Job description

DS Smith is seeking a skilled Threat Intelligence Analyst to join its Information Security team in Kraków. You will identify, analyse, and communicate cyber threats to protect operations, data, and infrastructure, translating intelligence into actionable guidance for proactive defense.

The role involves monitoring the threat landscape, performing incident response activities, and collaborating with SOC and technology stakeholders to strengthen detection and response capabilities across the