Expert Cybersecurity Incident Response Analyst

Our requirements

• At least 5 years of experience in cybersecurity incident response, security operations, or a related field.
• Excellent investigative, analytical, problem-solving, troubleshooting, and decision-making skills.
• Experience defining and refining operational procedures, workflows, and processes for monitoring and detection.
• Strong knowledge of cybersecurity frameworks, including OWASP, ISO 2700x, CIST, and NIST.
• Good understanding of network protocols, including TCP, UDP, DNS, DHCP, IPSEC, and HTTP.
• Technical expertise in analyzing threat event data, evaluating malicious activity, and identifying attacker tactics.
• Demonstrated experience with SIEM tools, log management suites, Big Data, and cloud-based security solutions.
• Knowledge of cybersecurity technologies, operating systems, cloud platforms, and incident response or forensic tools.

Optional

• A developed external peer network for sharing cybersecurity intelligence.
• Experience with IDS/IPS/HIPS, advanced anti-malware, firewalls, proxies, or MSS technologies.
• Familiarity with AWS, Azure, and Google cloud platforms.
• Knowledge of tools such as EnCase, FTK, Sleuthkit, Kali Linux, or IDA Pro.

Your responsibilities

• Respond to cybersecurity alerts across the global technology and information estate, identifying harmful behaviors and events.
• Lead incidents through containment, mitigation, remediation, and eradication, contributing detailed root cause analysis to post-incident reviews.
• Develop and implement new detection use cases and response playbooks across security platforms.
• Review and approve use cases and playbooks created by cybersecurity colleagues.
• Assess and continuously improve the effectiveness of analytical processes, playbooks, tooling, and workflows.
• Apply structured analytical methodologies to enhance threat intelligence and operational effectiveness.
• Provide expert-level technical guidance and leadership across threat hunting, monitoring, detection, analysis, and response.
• Mentor cybersecurity colleagues and collaborate with Cybersecurity and IT teams to improve capabilities and automate operational processes.

About the project

This is how we organize our work

#GETREADY to meet with us!

ITDS’s Whistleblower Procedure

What we offer

• Stable and long-term cooperation with very good conditions
• Enhance your skills and develop your expertise in the financial industry
• Work on the most strategic projects available in the market
• Define your career roadmap and develop yourself in the best and fastest possible way by delivering strategic projects for different clients of ITDS over several years
• Participate in Social Events, training, and work in an international environment
• Access to attractive Medical Package
• Access to Multisport Program
• Access to Pluralsight
• Flexible hours

Benefits

• sharing the costs of sports activities
• private medical care
• flexible working time
• fruits
• integration events
• corporate gym
• saving & investment scheme
• no dress code
• coffee / tea
• drinks
• christmas gifts
• birthday celebration
• sharing the costs of a streaming platform subscription
• access to +100 projects
• access to Pluralsight

Recruitment stages

• 1.
  online interview
• 2.
  online interview

ITDS Polska Sp. z o.o.