Cybersecurity Incident Response Officer

Antal is a leading recruitment and HR advisory company, present in Poland since 1996 and later expanded to the Czech Republic and Hungary. Across the CEE region, it employs around 150 professionals delivering a full range of services including specialist and executive recruitment, employee outsourcing, HR consulting, employer branding, and market research. The company operates with a division-based structure combining deep industry expertise with functional specialisation, providing tailored solutions for companies in every sector.

Technical Skills:

• Cybersecurity knowledge and practical experience
• Incident response experience
• Digital forensics knowledge
• Risk monitoring and security assessment
• Understanding of attacker tactics, techniques, and procedures (TTPs)

Tools & Technologies:

• Experience with EDR solutions (e.g. Tanium)
• Antivirus solutions (e.g. Trellix)
• SIEM platforms (e.g. Elastic)
• Threat intelligence and investigation tools
• Malware analysis tools (e.g. Ghidra)
• Data Loss Prevention solutions
• ServiceNow or similar ticketing/workflow platforms

Professional Skills:

• Strong analytical thinking and problem-solving abilities
• Ability to work effectively in a team environment
• Adaptability and willingness to learn
• Good communication and interpersonal skills
• Ability to work independently and deliver results within deadlines
• Ability to operate effectively in an international and matrix organization

Education & Qualifications:

• Preferably a Master’s degree in Information Security or a related field
• Fluent English skills (written and spoken)
• Proven experience as an Incident Handler, SOC Analyst, or Cyber Threat Intelligence Analyst
• Experience in digital forensics is highly valued
• Strong interest in cybersecurity research and security development

Additional advantages:

• Knowledge of French
• Cybersecurity certifications such as GREM, GCFA, Blue Team Level 1 (BTL1), Blue Team Level 2 (BTL2), Certified Red Team Expert (CRTE), Certified Red Team Professional (CRTP)

• Providing guidance on IT security standards and supporting their implementation
• Identifying and assessing cybersecurity risks, threats, and potential impacts
• Raising cybersecurity awareness across the organization
• Supporting projects with security recommendations and risk assessments
• Managing cybersecurity incidents through a dedicated Computer Security Incident Response Team (CSIRT)
• Cybersecurity incident handling and response
• Security investigations, including digital forensics activities
• Data leak prevention and analysis
• Phishing detection and investigation
• Threat hunting activities
• Cyber Threat Intelligence (CTI) analysis and reporting
• Vulnerability management