Head of Threat Hunting / CARR | f/m/d

ERGO Technology & Services S.A. (ET&S), part of Munich Re and ERGO Group, provides integrated IT and business services internationally, focusing on advanced IT and business-driven technology solutions. The company supports insurance-related processes such as finance, operations, and underwriting, operating from offices in Warsaw and Gdańsk with a multicultural environment.

• Fluent English
• Academic degree in Computer Science, Cybersecurity, IT, Engineering, or equivalent professional qualifications
• Relevant certifications such as GIAC GCIA, GCFA, GCIH, GNFA, OSCP, CISSP, or CISM are highly desirable
• Minimum 7 years in cybersecurity or information security with at least 3 years in leadership within threat hunting, incident response, or SOC/CSIRT
• Proven experience managing complex cybersecurity incidents like APTs, ransomware, data breaches, and insider threats
• Experience in corporate group structures and global matrix organizations with cross-functional teams
• Deep understanding of attacker TTPs per frameworks like MITRE ATT&CK
• Strong knowledge of network and endpoint security, operating systems (Windows, Linux), identity and access management, cloud security platforms, and security monitoring architectures
• Hands-on experience with digital forensics, malware analysis, log analysis, SIEM, Endpoint Detection & Response (EDR/XDR), SOAR, and other detection/response tools
• Ability to assess complex incidents and lead containment, eradication, and remediation
• Excellent analytical, conceptual, and communication skills for diverse audiences
• Strong leadership, team building, stakeholder management, and collaborative approach in distributed environments
• Strategic mindset focused on continuous improvement and operational excellence

• Leading, mentoring, and developing a global threat hunting team
• Designing and implementing proactive threat hunting methodologies
• Collaborating with incident response, security operations, and intelligence teams
• Analyzing emerging threat trends and communicating findings
• Establishing and maintaining threat hunting frameworks and best practices
• Aligning threat hunting with security policies and business objectives
• Managing team workload for timely detection and response
• Driving continuous improvement and innovation in threat hunting
• Coordinating global threat hunting coverage and incident escalation
• Supporting reactive threat hunting during major cyber incidents
• Consolidating and interpreting technical results for stakeholders
• Preparing communication and reporting for varied audiences including senior management
• Developing and optimizing Threat Hunting processes, guidelines, and metrics
• Evolving Threat Hunting technical capabilities including SIEM, EDR/XDR, SOAR, and Thor APT
• Supporting regional CSIRT Heads with reporting, audits, and KPIs
• Delivering contractual obligations for CA&RR Service for ERGO's affiliates
• Performing other tasks as entrusted within the role's scope

Klauzula informacyjna dotycząca przetwarzania danych osobowych kandydatów przez Ergo Technology & Services S.A., obejmująca podstawy prawne, cele przetwarzania, okresy retencji danych, prawa kandydatów, odbiorców danych oraz informacje o profilowaniu i dobrowolności podania danych osobowych.