Cybersecurity Incident Response Officer

The Cybersecurity & IT Risks team ensures the security of information systems, manages cyber risks, supports security initiatives, and responds to cybersecurity incidents in an international environment. The team collaborates across multiple locations to strengthen security capabilities, improve incident response processes, and protect digital assets.

• Cybersecurity knowledge and practical experience
• Incident response experience
• Digital forensics knowledge
• Risk monitoring and security assessment expertise
• Understanding of attacker tactics, techniques, and procedures (TTPs)
• Experience with tools such as EDR solutions (e.g. Tanium), Antivirus solutions (e.g. Trellix), SIEM platforms (e.g. Elastic), threat intelligence and investigation tools, malware analysis tools (e.g. Ghidra), Data Loss Prevention solutions, and ticketing/workflow platforms like ServiceNow
• Strong analytical thinking and problem-solving abilities
• Ability to work effectively in a team environment
• Adaptability and willingness to learn
• Good communication and interpersonal skills
• Ability to work independently and deliver results within deadlines
• Ability to operate effectively in an international and matrix organization
• Preferably a Master’s degree in Information Security or a related field
• Fluent English skills (written and spoken)
• Proven experience as an Incident Handler, SOC Analyst, or Cyber Threat Intelligence Analyst
• Experience in digital forensics is highly valued
• Strong interest in cybersecurity research and security development

Nice to have:

• Knowledge of French
• Cybersecurity certifications such as GREM, GCFA, Blue Team Level 1 (BTL1), Blue Team Level 2 (BTL2), Certified Red Team Expert (CRTE), Certified Red Team Professional (CRTP)

• Cybersecurity incident handling and response
• Security investigations, including digital forensics activities
• Data leak prevention and analysis
• Phishing detection and investigation
• Threat hunting activities
• Cyber Threat Intelligence (CTI) analysis and reporting
• Vulnerability management
• Providing guidance on IT security standards and supporting their implementation
• Identifying and assessing cybersecurity risks, threats, and potential impacts
• Raising cybersecurity awareness across the organization
• Supporting projects with security recommendations and risk assessments
• Managing cybersecurity incidents through a dedicated Computer Security Incident Response Team (CSIRT)

Location: Warsaw, Poland with hybrid working model (50/50). Minimum 3 years of experience in cybersecurity. English language required.