Analyst (Tier 2) - Cybersecurity Operations 

JOB DESCRIPTION

Job Title: Analyst (Tier 2) - Cybersecurity Operations

Work Mode & Environnent

- Location: Kraków, Poland

- Shift work : 4x10 per week Sunday - Wednesday or Wednesday - Saturday

- Working Hours: 9.00 am to 7.00 pm Local time

- Hybrid work: 2 days in office and 2 days remote

- Job Type: Full time

Responsibilities and Duties

- Cybersecurity SOC Tier 2 analyst must be able to do the following:

- Correlate threat data from various sources to establish the threat/impact against the network.

- After assessment of the data, recommend appropriate countermeasures, facilitating tracking, preliminary handling of investigations, and reporting of all security events and computer incidents.

- Remediation actions and apply lessons learned to security incident investigation and resolution

- Perform monitoring, identification and resolution of security events to detect threats through analysis, investigations and prioritization of events based on risk/exposure

- Develop processes which analyzes data, producing accurate, meaningful, easily interpreted results based on user requirements and use cases

- Develop processes which align with enterprise incident response activities and coordinate closely with other teams within the Security Operations Center

- Create custom tool content to enhance capabilities of security operations teams

- Manage the collection, documentation and research of security events generated by the SOC monitoring platform and infrastructure

- Provide support to Security Incident Management aligned with NIST standards

Technical writing experience

- Standard Operating Procedures

- Runbooks/Playbooks

- Incident Response Plans

- Support training develop with both analysts and tabletop exercises

- Assist or lead the effort in Tool configuration and content creation

Qualifications:

- 2-4 years of experience on one of the following team(s): Computer Incident Response Team (CIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC) or a Security Operations Center (SOC)

- Degree in Computer Science, Information Technology, or equivalent work experience

- Experience supporting Cyber Security Operations in a large enterprise environment

- Experience with Incident Response, analysis of network traffic, log analysis, ability to prioritize and differentiate between potential intrusion attempts and false alarms, managing and tracking investigations to resolution

- Experience with SIEM & Log Management solution

- Familiarity with one of the following; NIST Incident Response Lifecycle, Cyber Kill Chain, Adversarial Tactics, Techniques & Common Knowledge (ATT&CK) Metrics

- CCNA Security, GCIA, GCIH, CYSA+, Security+ or other related security certifications

- At minimum there must be one active security certification

Experience with one or more of the following tools:

- Qradar SIEM/Cortex XSOAR

- SentinelOne

- Proofpoint Email

- Azure Suite

- Zscaler

Why Join Us

- Be part of a global cybersecurity team protecting a dynamic enterprise environment.

- Opportunity to work with modern security technologies and drive tool innovation.

- Collaborative culture with professional development opportunities.

- Hybrid work model with our Kraków office as the primary location.

Benefits:

- Private medical care

- Hybrid working

- Cafeteria platform

- MultiSport card

- Life insurance

- Integration events

- Complimentary coffee and tea available in the office

- Convenient on-site parking for employees

- Modern and well-equipped office with dedicated relaxation and leisure areas, including Xbox and foosball