Digital Forensics and Incident Response Specialist (Compromise Assessment & Rapid Response)​ | f/m/d

ERGO Technology & Services S.A. (ET&S), part of the Munich Re and ERGO Group, delivers integrated IT and business services internationally. The company specializes in advanced IT services and supports insurance-related processes like finance and underwriting. It operates offices in Warsaw and Gdansk and maintains strong global partnerships within a multicultural environment.

• Fluent English
• Proven experience in IT security
• Hands-on experience with hardware/software tools for incident response, digital forensics, and network security assessments
• Understanding of Windows internals and Active Directory environments
• Knowledge of Linux and Linux forensic skills
• Understanding of computer networking concepts and protocols
• Basic scripting language knowledge
• Strong understanding of Cyber Kill Chain, MITRE ATT&CK framework, and threat actor TTPs
• Basic understanding of MS Defender EDR and MS Sentinel with KQL for threat hunting
• Ability to stay focused and work under stress
• Communicate effectively with technical and business stakeholders
• Work well in multinational and multicultural teams
• Innovative, creative, independent, and motivated to reduce cyber risk for ERGO Group

Nice to have:

• Bachelor/Master in IT, Business IT, Computer Science or similar
• Certifications: Security+, CySA+, CEH or equivalent

• Manage scanning for Compromise Assessment and Rapid Response (CA&RR) tools
• Analyze findings from CA&RR tools, including backdoors and malicious activity
• Develop rapid response playbooks
• Analyze malware files
• Create custom YARA and Sigma rules
• Perform threat hunting using feeds from CTI Team and tools like EDR, APT Scanner, and SIEM
• Define threat remediation strategies for ERGO Group customers
• Develop and refine hypotheses and queries for threat detection
• Provide detailed reports on threat hunting against hacker groups
• Cooperate with SOC, CTI, and CSIRT technical teams

The job posting includes detailed data privacy and personal data processing information as per GDPR regulations. The employer processes candidate data based on legal obligations and consents, with specific retention periods. Data may be transferred outside the European Economic Area with guarantees for data protection. Candidates have rights regarding their personal data including access, correction, deletion, and complaint submission. Providing certain personal data is mandatory for recruitment participation. The employer does not perform automated decision-making or profiling.