IT Security Incident Response Specialist

Project Information

• Project type: Manufacturing / Industry
• Office location: Warsaw, Poland
• Work mode: Hybrid, with onsite presence 12 days per month
• Budget: 70–90 PLN net/hour, B2B
• Project length: 20.07.2026–31.12.2026
• Eligibility: EU citizenship and residence in Poland
• Start date: ASAP, depending on availability

Project Scope

• Monitor and supervise security systems, including SIEM platforms, firewalls, IDS/IPS solutions, and other security monitoring tools used to detect suspicious activities within the IT infrastructure.
• Identify, classify, and investigate security incidents to determine root causes and potential impact.
• Respond to cybersecurity incidents and coordinate incident-management activities across relevant teams.
• Implement corrective actions following investigations and recommend improvements to the security infrastructure.
• Prepare detailed reports on detected incidents, investigation findings, and remediation activities.
• Develop, maintain, and update incident-response procedures and security playbooks.
• Participate in the development and testing of Disaster Recovery Plans (DRP) and Business Continuity Plans (BCP).
• Support and participate in internal and external security audits.
• Collaborate with infrastructure, system administration, and development teams to ensure effective incident resolution.
• Contribute to continuous-improvement initiatives for cybersecurity operations and incident-response processes.

Competence Demands

• Strong commercial experience in IT Security Operations, Incident Response, or Cybersecurity.
• Fluent Polish language skills, written and spoken, at a minimum C2 level.
• Strong knowledge of cybersecurity threats and attack techniques, including phishing, ransomware, DDoS, APTs, SQL Injection, and Cross-Site Scripting (XSS).
• Experience in malware detection and analysis using VirusTotal, sandbox environments, or equivalent solutions.
• Hands-on experience with SIEM platforms and security event monitoring.
• Practical experience with network monitoring and traffic-analysis tools such as Wireshark and tcpdump.
• Strong incident-management skills across the full lifecycle, from detection through resolution.
• Experience performing root-cause analysis and security risk assessments following incidents.
• Ability to prioritize incidents based on severity, business impact, and urgency.
• Experience collaborating with system administrators, infrastructure teams, and developers in complex IT environments.
• Strong analytical thinking and problem-solving skills.
• Ability to work independently and take ownership of security incidents.
• High attention to detail and commitment to security best practices.
• GCIH, CISSP, CEH, CompTIA Security+, or equivalent cybersecurity training is an advantage.

Benefits

• Hybrid working model in Warsaw.
• Full-time B2B agreement.
• Opportunity to work in a critical infrastructure environment.
• Exposure to advanced cybersecurity technologies and incident-response processes.
• Private medical care with dental care, covering 70% of costs.
• Multisport card, also for an accompanying person.
• Life insurance.