Cyber Response Technical Team Lead

Nasze wymagania:
Leading and managing a team of Senior Cyber Security Analysts/Incident Responders
Owning team performance, engagement, development plans, and career progression.
Providing coaching, mentoring, and technical leadership to enhance team capabilities and expertise.
Coordinating day-to-day activities, workload prioritization, resource allocation, and team scheduling.
Managing team capacity planning, on-call rotations, shift coverage, and operational readiness.
Acting as the primary GSOC escalation point for complex and high-severity cyber security incidents.
Leading and supporting hands-on investigations, containment, eradication, and recovery activities during cyber incidents.
Providing advanced technical guidance across endpoint, network, cloud, identity, and threat investigations.
Ensuring high-quality incident response practices, investigation standards, and operational excellence.
Coordinating incident response activities with internal stakeholders, customers, and other Cyber Security teams.
Driving post-incident reviews from the GSOC perspective and ensuring lessons learned are translated into measurable improvements.
Identifying skill gaps and developing training, knowledge-sharing, and capability-building initiatives.
Supporting recruitment, onboarding, succession planning, and retention of cyber security talent within GSOC.
Acting as a Subject Matter Expert (SME) in Cyber Security projects, strategic initiatives, and customer engagements.
Providing expert input into the design, implementation, and enhancement of cyber security services and capabilities.
Driving continuous improvement of incident response processes, fine-tuning of detection rules, playbooks, tooling, and operational procedures.
Championing automation initiatives to improve GSOC efficiency, investigation quality, and response times.
Driving adoption and effective use of AI and emerging technologies across GSOC and other relevant areas where required.
Collaborating with Detection Engineering, Cyber Incident Management, Threat Hunting, Threat Intelligence, Security Engineering, and Product teams to enhance cyber defence capabilities.
Staying current with emerging threats, attacker techniques, and industry best practices to strengthen response capabilities.
Contributing to the strategic development and maturity of the organization's Cyber Response and Security Operations functions.

Mile widziane:
Industry certifications such as GCIH, GCFA, GCFE, CISSP, OSCP or SC-200.
Experience with KQL, PowerShell or Python and security automation.

Zakres obowiązków:
Leading and managing a team of Senior Cyber Security Analysts/Incident Responders
Owning team performance, engagement, development plans, and career progression.
Providing coaching, mentoring, and technical leadership to enhance team capabilities and expertise.
Coordinating day-to-day activities, workload prioritization, resource allocation, and team scheduling.
Managing team capacity planning, on-call rotations, shift coverage, and operational readiness.
Acting as the primary GSOC escalation point for complex and high-severity cyber security incidents.
Leading and supporting hands-on investigations, containment, eradication, and recovery activities during cyber incidents.
Providing advanced technical guidance across endpoint, network, cloud, identity, and threat investigations.
Ensuring high-quality incident response practices, investigation standards, and operational excellence.
Coordinating incident response activities with internal stakeholders, customers, and other Cyber Security teams.
Driving post-incident reviews from the GSOC perspective and ensuring lessons learned are translated into measurable improvements.
Identifying skill gaps and developing training, knowledge-sharing, and capability-building initiatives.
Supporting recruitment, onboarding, succession planning, and retention of cyber security talent within GSOC.
Acting as a Subject Matter Expert (SME) in Cyber Security projects, strategic initiatives, and customer engagements.
Providing expert input into the design, implementation, and enhancement of cyber security services and capabilities.
Driving continuous improvement of incident response processes, fine-tuning of detection rules, playbooks, tooling, and operational procedures.
Championing automation initiatives to improve GSOC efficiency, investigation quality, and response times.
Driving adoption and effective use of AI and emerging technologies across GSOC and other relevant areas where required.
Collaborating with Detection Engineering, Cyber Incident Management, Threat Hunting, Threat Intelligence, Security Engineering, and Product teams to enhance cyber defence capabilities.
Staying current with emerging threats, attacker techniques, and industry best practices to strengthen response capabilities.
Contributing to the strategic development and maturity of the organization's Cyber Response and Security Operations functions.

Oferujemy:
Contract of employment
Performance Bonus
Private medical care (ENEL-MED)
Cafeteria system of benefits (e.g. MultiSport card)
Additional parent privileges:
baby leave – 6 weeks leave for second parent
shortened working time after parental leave
Employer-funded group insurance
Employee Shares Plan
Extra day off for birthday
Paid time off to volunteer
Additional leave acquired over the years in the company (even 5 days more in a year)
Wellbeing Leave - additional two weeks paid leave after 10 years of service
Psychological support consultations
Access to the e-learning platforms
Internal employee referral program
Hybrid working model from Poland with a few days in Warsaw office per month
Attractive office location in Warsaw - Gdański Business Center
Additional entitlements for people with disabilities - Work Without Barriers
Work environment that promotes diversity - Diversity Charter