{"id":3168920,"url":"https://alion.io/job/ey-junior-incident-response-analyst","title":"Junior Incident Response Analyst","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Wrocław, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":30000,"max_usd":67000,"period":"year","method":"role_seniority_country_cell","sample_n":8},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"IAM","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-23T18:04:39Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-28T18:14:02Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Join a team that supports clients in detecting, investigating and responding to cybersecurity incidents. In this role, you will carry out operational incident response activities in accordance with established procedures and playbooks, maintain accurate case documentation and promptly escalate incidents requiring senior expertise. You will gain hands-on experience in analysing cyber threats, containing incidents and supporting the safe recovery of affected systems.\nEY.AI - in this role, you will work in an environment where AI agents are part of the team and everyday project delivery. You will use solutions tailored to your role and team that support data analysis, recommendation generation and solution design.\nYour scope of duties\nAnalyse alerts generated by SIEM, EDR/XDR, email security, IAM, firewall and cloud security tools;\nPerform alert triage and determine whether an event constitutes a security incident;\nAssess the severity and scope of incidents, identify affected assets and evaluate the potential business impact;\nCollect and analyse logs, endpoint artefacts, account activity, IP addresses, domains, file hashes and process information;\nIdentify indicators of compromise, including suspicious logins, processes, files, domains and network connections;\nPerform containment actions, such as isolating hosts, blocking indicators of compromise, suspending accounts and resetting passwords;\nSupport eradication and recovery activities by verifying that threats have been removed and systems have been safely restored;\nBuild incident timelines and maintain complete case documentation;\nPerform root cause analysis and identify information required for further investigation;\nContribute to updates of incident response playbooks, knowledge base articles and lessons learned documentation;\nParticipate in on-call rotations and incident response exercises, where applicable.\nOur requirements\nBasic knowledge of digital forensics and evidence preservation;\nKnowledge of cybersecurity, computer networks, operating systems and authentication mechanisms;\nFamiliarity with SIEM, EDR/XDR, firewalls, proxies, IAM platforms and log analysis tools;\nScripting skills in PowerShell, Bash or Python;\nUnderstanding of common attack techniques, including phishing, credential theft, malware, brute-force attacks, lateral movement and privilege escalation;\nBasic knowledge of MITRE ATT&CK and the incident response lifecycle;\nBasic understanding of cloud environments, including IAM, logging, compute, storage and networking.\nWhat we offer\nProfessional and financial support in obtaining recognised qualifications and certificates;\nEY Badges - global certification of your competencies and the opportunity to earn an MBA from the prestigious Hult International School of Business;\nCareer Counselor - professional, one-to-one guidance on career building and development;\nPsycho-educational platform - a package of free consultations with specialists in the broad field of mental health and personal development, as well as access to educational activities;\nBenefit programme offering private healthcare with additional preventive examinations, life insurance, tickets, team sports, a language learning platform, sports cards and much more, available both online and offline.\nRecruitment stages\nApply. If this is your first application, create a profile and upload your CV.\nLet’s talk. You will meet Talent Acquisition experts and members of your future team.\nAbout EY Poland\nWe are a global consulting and technology company.\nWe make a difference by transforming and changing services, products, organisations and even the rules of the game. We combine business and technology expertise with artificial intelligence and human talent. We help organisations solve complex problems, make better decisions and implement positive change.\nWe provide confidence in data, opinions, standards, technology and security.\nEvery day, we take on challenges, analyse opportunities, create prompts, conduct research, collaborate, ask the right questions, plan, model, code, experiment and learn. We create solutions that are essential to our clients.\nThis is where friendships, relationships and lifelong memories are made.\nThis is where you do difficult and meaningful work with supportive and exceptional people.\nWe employ more than 400,000 exceptional people in over 150 countries worldwide. In Poland, our team consists of more than 7,000 people working in Warsaw, Gdańsk, Katowice, Kraków, Łódź, Poznań, Szczecin, Rzeszów and Wrocław, as well as at our Global Delivery Services centres in Warsaw and Wrocław.\nWe care about the environment, not only the business environment. As part of our plan, we have reduced our global greenhouse gas emissions by 40% compared with the 2019 baseline.\nEY is an equal opportunity employer. We value and promote the diversity of knowledge, experience and perspectives within our community. We create an environment based on respect, openness and collaboration, where everyone can grow and make a meaningful impact. Through our “Poziom Wyżej bez Barier” programme, we support employees with disabilities in pursuing their professional ambitions and aspirations.\nEY provides equal opportunities to all candidates throughout the recruitment process, regardless of gender, age, race, religion, sexual orientation, origin, disability or any other legally protected characteristic, in accordance with applicable law.","description_format":"text","description_chars":5436,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-10-23T18:04:39Z"}],"visa":[],"liveness":{"score":89,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.888,"p_room":1,"age_days":4,"expected_fill_days":18,"reasons":["conf:4","velocity","win:early","comp:junior,brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/ey-junior-incident-response-analyst","json_url":"https://alion.io/job/ey-junior-incident-response-analyst.json","meta":{"generated_at":"2026-10-28T19:56:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27618,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fey-junior-incident-response-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fey-junior-incident-response-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fey-junior-incident-response-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ey-junior-incident-response-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fey-junior-incident-response-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3168920}},{"tool":"search_jobs","arguments":{"company":"ey.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3168920},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}