Cyber Defence · Global Security Operations Centre (GSOC) Level 1 Analyst​

Cyber Defence · Global Security Operations Centre (GSOC) Level 1 Analyst​

📍 Warszawa /​ Hybrid

📄 Contract of employment

🆔​ ​PL250802​

As part of the Cyber Defence team in the Global Security Operations Centre, you will provide security monitoring, triage, and investigation of potential incidents, and help to constantly improve the ways that the team works so that we can keep up with the latest threats against our business.

Fast and effective identification and triage of potential incidents is essential for us to protect our critical data and assets, and you will be at the forefront of this exciting area of Cyber Security, protecting the business and our interests daily. Level 1 Analyst will be the primary inception for triage and investigation of alerts and incidents reported or detected within the SOC.

You will need to have a good technical aptitude, a calm approach under pressure, excellent communicative skills to technical and nontechnical audiences, and have a genuine passion for security.

Requirements:

▪​ Safely acquire and preserve the integrity of cyber security data required for incident analysis to help determine whether further investigation is required.

▪ Level 1 Analyst will be responsible in confirming that the incident is in fact a true positive requiring an investigation and potentially remediation or mitigation then escalate incidents according to the defined process.

▪ Triage alerts, security incidents and seeking out potential security issues through log analysis, and use of tools such as SIEM, UEBA, EDR, etc.

▪ Ensure timely response to any cyber incident to minimize risk exposure and production down time, including interacting with different technical teams and business areas where needed.

▪ Determine the type of support required, coordinate with the respective team or POC.

▪ Attend handover calls to support L2 in communicating handover to next shift.

▪ Recommend alert for tuning to minimize false positives.

▪ Recommend or assist L2s/L3s with creation or update of KBs, processes and runbooks.

Responsibilities:

▪ You will be working as part of a 24/7 SOC across different locations and therefore you must be a true team player, with theability and desire to engage with different internal stakeholders and colleagues to deliver the very highest standards of serviceand support.

▪ 2 - 3 Years’ Experience working as part of a mature cyber defence centre or security operations centre.

▪ To be effective, you need to have great troubleshooting skills, the ability to research problems and the ability to effectivelycommunicate during stressful times, while keeping a cool, calm, and friendly approach when dealing with stakeholders andcolleagues.

▪ Solid time management skills and be dependable.

▪ Hands on experience of using a SIEM, UEBA, and EDR as a Level 1 security analyst.

▪ Leading Investigations and comfortable talking to stakeholders and colleagues on both a technical and non-technical level.

▪ Great verbal and written communication skills, and the ability to write reports in a structured methodology.

▪ BSc/MSc in a security field or equivalent experience working within a security related function.

▪ To be inquisitive, with a strong sense of personal responsibility for learning and self-development.

▪ Being able to identify common attack techniques within the context of specific technologies.

▪ Working knowledge of networking protocols/technologies (e.g. TCP, IP, HTTP/HTTPS).

▪ Working knowledge of Unix, Linux, and Windows operating systems.

▪ Any relevant security certifications (CompTIA Security+, GIAC GSEC (SANS 408), CEH, or industry recognized equivalent).

▪ Any relevant network certifications (Network +, CCNA, etc.).

▪ Knowledge of other key IT fields (such as Web Applications, databases, Active Directory, network security systems such asweb proxies, firewalls & data loss protection).

▪ Exposure to attack and penetration methods and tools.

▪ Working knowledge of scripts, tools, or methodologies to enhance our incident investigation and processes (such as Python,PowerShell, etc.).

We offer:

▪​ You can work remotely or from the office – choose the model that best supports your comfort and efficiency. A flexible working model is our standard, not an exception.

▪​ Stability and security – an employment contract with a global organization that has a strong market position and a modern approach to business.

▪​ Clear and competitive salary – tailored to your experience and engagement. We value the real impact you bring.

▪​ Opportunities for growth – we support obtaining a brokerage license, offer training, and create space for professional development.

▪​ A positive work environment – a supportive team, well-defined processes, and a culture based on mutual respect.

▪​ Holiday vouchers – we support your rest and travel plans.

▪​ Emergency financial support – we’re here when life brings the unexpected.

▪​ Holiday gift packages – we celebrate together.