Analityk/czka ds. Cyberbezpieczeństwa (K/M)

About the Position

Analityk/czka ds. Cyberbezpieczeństwa (K/M)

Location: Katowice

We are seeking an experienced Cybersecurity Analyst to join our team in Katowice, responsible for monitoring, analyzing, and handling security incidents in IT and OT environments. The person in this role will conduct advanced threat analysis, support incident response processes, and develop cyber threat detection mechanisms based on modern SIEM, XDR, and EDR solutions.

Responsibilities

• Analyze and handle escalated security incidents to the second line of SOC.
• Conduct activities related to detecting, analyzing, and mitigating the effects of cyberattacks.
• Correlate events and identify advanced threats in client environments.
• Analyze logs, network traffic, and security artifacts.
• Create and optimize detection rules in SIEM, EDR, and XDR systems.
• Participate in Threat Hunting processes and threat analysis.
• Support Incident Response and Digital Forensics activities.
• Develop recommendations for improving security levels.
• Create technical reports and documentation related to incident handling.
• Collaborate with administration teams, cybersecurity engineers, and clients.

Requirements

• Minimum 2 years of experience in SOC or cybersecurity.
• Experience in analyzing and handling security incidents.
• Familiarity with SIEM, EDR, and XDR tools.
• Practical knowledge of Windows and Linux systems.
• Very good knowledge of network issues (TCP/IP, DNS, HTTP/HTTPS, VPN, SMTP).
• Ability to analyze system logs, network traffic, and security events.
• Knowledge of attack methods and techniques described in MITRE ATT&CK.
• Ability to identify indicators of compromise (IOC) and analyze threats.
• Knowledge of Incident Response processes.
• Ability to prepare technical documentation and reports.
• Communicative knowledge of English to work with technical documentation.

Nice to Have

• Experience with ESET Protect, Cynet, Microsoft Defender XDR, Splunk, SecureVisio, FortiSIEM, or Wazuh.
• Knowledge of Microsoft 365 Security and Microsoft Azure cloud platforms.
• Experience in Threat Hunting.
• Knowledge of malware analysis.

We Offer

• Work in a stable and dynamically developing company.
• Employment contract.
• Flexible working hours.
• Participation in advanced cybersecurity projects.
• Access to the latest SOC, SIEM, EDR, and XDR technologies.
• Employer-funded technical training and certifications.
• Subsidies for private medical care, additional insurance, and sports passes (Medicover).
• Work in a team of cybersecurity experts.
• Real impact on the development of client security services and architecture.
• Parking available near the workplace.
• Team-building meetings.
• Fruity Tuesdays.
• Friendly atmosphere.

Apply now!