Cybersecurity Incident Response Officer
⚲ Warszawa
Do uzgodnienia
Wymagania
- English
Opis stanowiska
Cybersecurity Incident Response Officer
Location: Warsaw, Poland (hybrid working model – 50/50)
Experience: Minimum 3 years of experience in cybersecurity
Language: English requiredAbout the Team
The Cybersecurity & IT Risks team is responsible for ensuring the security of information systems, managing cyber risks, supporting security initiatives, and responding to cybersecurity incidents.
The team works within an international environment, collaborating with cybersecurity professionals across multiple locations. Its mission is to strengthen security capabilities, improve incident response processes, and support the organization in protecting its digital assets.
Key areas of responsibility include:
• Providing guidance on IT security standards and supporting their implementation
• Identifying and assessing cybersecurity risks, threats, and potential impacts
• Raising cybersecurity awareness across the organization
• Supporting projects with security recommendations and risk assessments
• Managing cybersecurity incidents through a dedicated Computer Security Incident Response Team (CSIRT)
Role Overview
We are looking for a skilled Cybersecurity Incident Response Officer to join the CSIRT team and support cybersecurity incident management activities.
The role focuses on investigating security events, responding to incidents, identifying threats, and improving the organization’s security posture.
Responsibilities
The role may include involvement in the following activities:
• Cybersecurity incident handling and response
• Security investigations, including digital forensics activities
• Data leak prevention and analysis
• Phishing detection and investigation
• Threat hunting activities
• Cyber Threat Intelligence (CTI) analysis and reporting
• Vulnerability management
Required Skills & Expertise
Technical Skills
• Cybersecurity knowledge and practical experience
• Incident response experience
• Digital forensics knowledge
• Risk monitoring and security assessment
• Understanding of attacker tactics, techniques, and procedures (TTPs)
Tools & Technologies
Experience with some of the following tools is an advantage:
• EDR solutions (e.g. Tanium)
• Antivirus solutions (e.g. Trellix)
• SIEM platforms (e.g. Elastic)
• Threat intelligence and investigation tools
• Malware analysis tools (e.g. Ghidra)
• Data Loss Prevention solutions
• ServiceNow or similar ticketing/workflow platforms
Professional Skills
• Strong analytical thinking and problem-solving abilities
• Ability to work effectively in a team environment
• Adaptability and willingness to learn
• Good communication and interpersonal skills
• Ability to work independently and deliver results within deadlines
• Ability to operate effectively in an international and matrix organization
Education & Qualifications
• Preferably a Master’s degree in Information Security or a related field
• Fluent English skills (written and spoken)
• Proven experience as an Incident Handler, SOC Analyst, or Cyber Threat Intelligence Analyst
• Experience in digital forensics is highly valued
• Strong interest in cybersecurity research and security development
Additional advantages:
• Knowledge of French
• Cybersecurity certifications such as:• GREM
• GCFA
• Blue Team Level 1 (BTL1)
• Blue Team Level 2 (BTL2)
• Certified Red Team Expert (CRTE)
• Certified Red Team Professional (CRTP)
Position Details
Position: Cybersecurity Incident Response Officer
Location: Warsaw, Poland
Work model: Hybrid (50/50)
Why apply for an Antal job offer?
When your application is successful, you will be supported by a dedicated Consultant who will stay in regular contact with you (via email or phone), help you prepare for interviews with your future employer, and ensure a smooth and professional recruitment process.
About Antal
Antal is a leading recruitment and HR advisory company, present in Poland since 1996 and later expanded to the Czech Republic and Hungary. Across the CEE region, we employ around 150 professionals who deliver a full range of services – from specialist and executive recruitment, employee outsourcing and HR consulting, to employer branding and market research.
Our division-based structure combines deep industry expertise with functional specialisation, enabling us to provide tailored solutions for companies in every sector. We act as a trusted partner for both employers and candidates, sharing our knowledge and guiding them through every stage of the talent journey. We connect exceptional people with the right opportunities and help organisations build successful teams.
Discover our latest job openings: https://en.antal.pl/candidates
Follow us on LinkedIn: https://www.linkedin.com/company/antalpoland
Location: Warsaw, Poland (hybrid working model – 50/50)
Experience: Minimum 3 years of experience in cybersecurity
Language: English requiredAbout the Team
The Cybersecurity & IT Risks team is responsible for ensuring the security of information systems, managing cyber risks, supporting security initiatives, and responding to cybersecurity incidents.
The team works within an international environment, collaborating with cybersecurity professionals across multiple locations. Its mission is to strengthen security capabilities, improve incident response processes, and support the organization in protecting its digital assets.
Key areas of responsibility include:
• Providing guidance on IT security standards and supporting their implementation
• Identifying and assessing cybersecurity risks, threats, and potential impacts
• Raising cybersecurity awareness across the organization
• Supporting projects with security recommendations and risk assessments
• Managing cybersecurity incidents through a dedicated Computer Security Incident Response Team (CSIRT)
Role Overview
We are looking for a skilled Cybersecurity Incident Response Officer to join the CSIRT team and support cybersecurity incident management activities.
The role focuses on investigating security events, responding to incidents, identifying threats, and improving the organization’s security posture.
Responsibilities
The role may include involvement in the following activities:
• Cybersecurity incident handling and response
• Security investigations, including digital forensics activities
• Data leak prevention and analysis
• Phishing detection and investigation
• Threat hunting activities
• Cyber Threat Intelligence (CTI) analysis and reporting
• Vulnerability management
Required Skills & Expertise
Technical Skills
• Cybersecurity knowledge and practical experience
• Incident response experience
• Digital forensics knowledge
• Risk monitoring and security assessment
• Understanding of attacker tactics, techniques, and procedures (TTPs)
Tools & Technologies
Experience with some of the following tools is an advantage:
• EDR solutions (e.g. Tanium)
• Antivirus solutions (e.g. Trellix)
• SIEM platforms (e.g. Elastic)
• Threat intelligence and investigation tools
• Malware analysis tools (e.g. Ghidra)
• Data Loss Prevention solutions
• ServiceNow or similar ticketing/workflow platforms
Professional Skills
• Strong analytical thinking and problem-solving abilities
• Ability to work effectively in a team environment
• Adaptability and willingness to learn
• Good communication and interpersonal skills
• Ability to work independently and deliver results within deadlines
• Ability to operate effectively in an international and matrix organization
Education & Qualifications
• Preferably a Master’s degree in Information Security or a related field
• Fluent English skills (written and spoken)
• Proven experience as an Incident Handler, SOC Analyst, or Cyber Threat Intelligence Analyst
• Experience in digital forensics is highly valued
• Strong interest in cybersecurity research and security development
Additional advantages:
• Knowledge of French
• Cybersecurity certifications such as:• GREM
• GCFA
• Blue Team Level 1 (BTL1)
• Blue Team Level 2 (BTL2)
• Certified Red Team Expert (CRTE)
• Certified Red Team Professional (CRTP)
Position Details
Position: Cybersecurity Incident Response Officer
Location: Warsaw, Poland
Work model: Hybrid (50/50)
Why apply for an Antal job offer?
When your application is successful, you will be supported by a dedicated Consultant who will stay in regular contact with you (via email or phone), help you prepare for interviews with your future employer, and ensure a smooth and professional recruitment process.
About Antal
Antal is a leading recruitment and HR advisory company, present in Poland since 1996 and later expanded to the Czech Republic and Hungary. Across the CEE region, we employ around 150 professionals who deliver a full range of services – from specialist and executive recruitment, employee outsourcing and HR consulting, to employer branding and market research.
Our division-based structure combines deep industry expertise with functional specialisation, enabling us to provide tailored solutions for companies in every sector. We act as a trusted partner for both employers and candidates, sharing our knowledge and guiding them through every stage of the talent journey. We connect exceptional people with the right opportunities and help organisations build successful teams.
Discover our latest job openings: https://en.antal.pl/candidates
Follow us on LinkedIn: https://www.linkedin.com/company/antalpoland
🔍 Dekoder Ogłoszenia
🔴
hybrid working model – 50/50
Oznacza to, że będziesz musiał być w biurze 50% czasu, co może być mniej elastyczne niż się wydaje, jeśli nie ma jasnych wytycznych co do dni pracy zdalnej/stacjonarnej.
🟡
supporting security initiatives
Może oznaczać udział w projektach, które nie są bezpośrednio związane z reagowaniem na incydenty, ale są bardziej ogólnymi działaniami zwiększającymi bezpieczeństwo.
🟡
improving incident response processes
Wskazuje na potencjalną potrzebę usprawniania istniejących, być może niedoskonałych, procedur reagowania na incydenty.
🔴
The role may include involvement in the following activities:
Sformułowanie to sugeruje, że wymienione poniżej obowiązki nie są gwarantowane i mogą być jedynie potencjalnymi zadaniami.