CSIRT Analyst

As a SOC/CSIRT (Computer Security Incident Response Team) Analyst, you will be part of the CIB IT Hub Cybersecurity department in Poland. You will play a key role in developing the Poland platform and ensuring that core Cybersecurity, IT Risk, and Operational Resilience activities are performed efficiently and with the required quality.

Responsibilities

• Handle and document end-to-end security incidents and events.
• Coordinate with different teams and entities to respond to cybersecurity incidents and provide reporting on CSIRT operations.
• Learn from past and present events to continuously improve the group’s response capabilities.
• Carry out analyses and gather information when alerts and security incidents affect Group entities.
• Understand, analyze, and explain attack techniques.
• Contribute to crisis cells.
• Contribute to the vulnerability management process and ensure SLA adherence.
• Contribute to Group projects and operational automations.
• Contribute to Threat Intelligence activities.
• Define and analyze SIEM alerts.
• Enrich the team knowledge base and information security systems processes in accordance with Group policies.

Requirements

• 3+ years of experience in a similar IT Security or Cybersecurity position, ideally in SOC/CSIRT.
• Mastered knowledge of UNIX and macOS environments, common network protocols, Microsoft environments, and SIM3 / ITIL SIEM tools.
• High analytical skills and mindset.
• Ability to establish and activate professional networks.
• Ability to collaborate with the team and coordinate meetings, seminars, committees, and training.
• Strong written and spoken English communication skills.
• Master’s degree in IT or a related field.

What we offer

• Hybrid work mode, with 50% working from home within a month.
• Remote-work expense allowance of 120 PLN per month.
• Stable employment.
• Fully paid private medical care for the employee.
• Pre-paid lunch card.
• Employee Pension Plan.
• Co-financed Multisport Card.
• MyBenefit Cafeteria Platform.
• Life insurance.
• Car parking availability in the office building.
• Training and development opportunities.

Apply with your resume in English.