Threat Intelligence Analyst

Within the Cybersecurity & Digital Fraud Department's Fusion Center team in Poland, you will help develop the Poland platform and ensure cybersecurity, IT risk, and operational resilience activities are delivered efficiently and with high quality.

The department structures, strengthens, and harmonizes IT risk management and cybersecurity across the Group. Its work includes defining and implementing IT risk management and cybersecurity strategy, monitoring information-system security, and steering the IT Continuity and Resilience strategy and methodological framework.

The evolving cyberthreat landscape increases security risks in the financial sector, driving the need to strengthen cybersecurity maturity, IT risk management, and operational resilience.

Requirements

• At least 3 years of experience in a similar IT security or cybersecurity position
• Experience cooperating with SOC/CSIRT teams and using a common threat intelligence platform
• Ability to identify potential threats and indicators of compromise using threat intelligence analysis techniques
• Ability to write detailed, relevant reports
• Detailed knowledge of CVSS v3 and v4 and CTI frameworks, including STIX, TAXII, MITRE ATT&CK, Kill Chain, and DIAMOND
• Understanding of common attack vectors, techniques, countermeasures, defense techniques, and malware sample analysis
• Understanding of endpoint and network security solutions, including network architecture, firewalls, endpoint protection, IDS/IPS, log collection and analysis, and SIEM/SOAR
• Excellent written and verbal English communication skills
• Master’s degree or equivalent experience

Responsibilities

• Enhance detection and management of cybersecurity incidents by analyzing intelligence on cyberattacks from public and private sources
• Conduct technical and organizational workshops with international experts
• Assist business units and managers with cyber threat intelligence issues
• Provide technical support and serve as a reference point for specific topics
• Support the management and deployment of services implemented and subscribed to by the Group
• Acquire and disseminate cyber threat intelligence expertise

What we offer

• Hybrid work mode, with 50% working from home within a month
• Remote-work expense allowance of 120 PLN per month
• Stable employment
• Fully paid private medical care for the employee
• Pre-paid lunch card
• Employee Pension Plan
• Co-financed Multisport Card
• MyBenefit Cafeteria Platform
• Life insurance
• Car parking availability in the office building
• Training and development opportunities