Cybersecurity Lead Analyst

Our requirements

• Excellent investigative and analytical skills; natural curiosity and the ability to think like an attacker.
• Strong experience in incident analysis, threat detection, and response within an enterprise environment.
• Hands-on knowledge of network protocols (TCP, UDP, DNS, HTTP, DHCP, IPSEC, etc.) and cybersecurity frameworks (NIST, ISO 2700x, OWASP, CIS).
• Proficiency with security technologies such as SIEM, IDS/IPS, endpoint protection (EDR/XDR), firewalls, proxies, malware prevention, and forensics tools.
• Familiarity with cloud security concepts and platforms (AWS, Azure, GCP).
• Basic knowledge of digital forensics and incident analysis tools (e.g., EnCase, FTK, Kali Linux, IDA Pro).
• Experience with at least one scripting or query language (Python, PowerShell, SQL, or KQL) is an advantage.
• Ability to define, optimise, and document security operational procedures and workflows.
• Strong written and spoken English and ability to communicate complex topics clearly to both technical and non‑technical stakeholders.

Optional

• Experience developing operational intelligence and detection rules using big‑data or log management platforms.
• Participation in red‑team / blue‑team exercises or experience with threat hunting.
• Familiarity with service automation and orchestration platforms (SOAR).

Your responsibilities

• Monitor and analyse alerts across a large-scale enterprise environment to identify malicious activity and respond to potential threats in real time.
• Contain, mitigate, and remediate security incidents in collaboration with the Incident Response and SOC teams.
• Conduct root cause analysis and contribute findings to post-incident reviews to strengthen defenses and reduce recurrence.
• Apply structured analytical methodologies to improve the quality and speed of threat detection and response capabilities.
• Develop, test, and deploy new detection use cases and playbooks across security platforms.
• Review and refine existing automation workflows to ensure coverage and accuracy.
• Identify opportunities for process automation and orchestration to enhance response efficiency.
• Maintain and improve incident triage processes to assess severity, impact, and priority of events.
• Provide technical guidance and mentoring for less-experienced analysts, sharing threat intelligence and best practices.
• Collaborate with cybersecurity engineering and infrastructure teams to ensure that new security controls, logging, and analytics capabilities are effective and scalable.
• Contribute to continuous improvement initiatives, advising on new tools, methods, and playbook optimisations.
• Note: Detailed project information will be shared during the recruitment process.

About the project

This is how we organize our work

This is how we work on a project

• Continuous Deployment
• Continuous Integration

What we offer

• Hybrid work setup – 6 days per month from the offcie
• Collaborative team culture – work alongside experienced professionals eager to share knowledge
• Continuous development – access to training platforms and growth opportunities
• Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
• High quality equipment – laptop and essential software provided

Benefits

• sharing the costs of sports activities
• private medical care
• sharing the costs of professional training & courses
• life insurance

Mindbox Sp. z o.o.