{"id":3535678,"url":"https://alion.io/job/itds-poland-expert-cybersecurity-incident-response-analyst","title":"Expert Cybersecurity Incident Response Analyst","company":{"id":879,"name":"ITDS Poland","domain":"itds.pl","url":"https://alion.io/company/itds","size_band":null,"is_staffing_agency":false,"employer_type":"staffing","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kraków, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":23100,"max":27930,"currency":"PLN","period":"month","gross":null,"usd_annual":85080},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"EnCase","optional":false},{"name":"FTK","optional":false},{"name":"GCP","optional":false},{"name":"IDA Pro","optional":false},{"name":"Kali Linux","optional":false},{"name":"Linux","optional":false},{"name":"OWASP","optional":false},{"name":"SIEM","optional":false},{"name":"The Sleuth Kit","optional":false},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-10-30T16:15:17Z","employer_posted_date":null,"last_verified_at":"2026-10-30T16:15:17Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Defend the digital frontier — lead the detection, response, and evolution of global cybersecurity operations!\nKrakow-based opportunity with a hybrid work model, requiring six days per month from the office.\nAs an Expert Cybersecurity Incident Response Analyst, you will be working for our client, a global organization protecting its technology and information estate against evolving cyber threats. You will help detect, investigate, contain, mitigate, and remediate security incidents while strengthening monitoring, detection, threat hunting, and response capabilities across the organization.\nYour main responsibilities:\nRespond to cybersecurity alerts across the global technology and information estate, identifying harmful behaviors and events.\nLead incidents through containment, mitigation, remediation, and eradication, contributing detailed root cause analysis to post-incident reviews.\nDevelop and implement new detection use cases and response playbooks across security platforms.\nReview and approve use cases and playbooks created by cybersecurity colleagues.\nAssess and continuously improve the effectiveness of analytical processes, playbooks, tooling, and workflows.\nApply structured analytical methodologies to enhance threat intelligence and operational effectiveness.\nProvide expert-level technical guidance and leadership across threat hunting, monitoring, detection, analysis, and response.\nMentor cybersecurity colleagues and collaborate with Cybersecurity and IT teams to improve capabilities and automate operational processes.\nYou're ideal for this role if you have:\nAt least 5 years of experience in cybersecurity incident response, security operations, or a related field.\nExcellent investigative, analytical, problem-solving, troubleshooting, and decision-making skills.\nExperience defining and refining operational procedures, workflows, and processes for monitoring and detection.\nStrong knowledge of cybersecurity frameworks, including OWASP, ISO 2700x, CIST, and NIST.\nGood understanding of network protocols, including TCP, UDP, DNS, DHCP, IPSEC, and HTTP.\nTechnical expertise in analyzing threat event data, evaluating malicious activity, and identifying attacker tactics.\nDemonstrated experience with SIEM tools, log management suites, Big Data, and cloud-based security solutions.\nKnowledge of cybersecurity technologies, operating systems, cloud platforms, and incident response or forensic tools.\nIt is a strong plus if you have:\nA developed external peer network for sharing cybersecurity intelligence.\nExperience with IDS/IPS/HIPS, advanced anti-malware, firewalls, proxies, or MSS technologies.\nFamiliarity with AWS, Azure, and Google cloud platforms.\nKnowledge of tools such as EnCase, FTK, Sleuthkit, Kali Linux, or IDA Pro.\nLanguage Required for the role: Fluent English.\nEligibility for the role: Only candidates with an existing legal right to work in Europe will be considered for this role.\n#MAKEYourCareerBETTER\nInterested? Apply now and include your CV (preferably in English) along with a statement confirming your consent to the processing and storage of your personal data.\nTech stack\nCybersecurity incident response\nSIEM Tools\nThreat Hunting & Detection\nNetwork Protocols (TCP/UDP/DNS/HTTP)\nSecurity Frameworks (NIST/ISO 27001/OWASP)\nPlaybook & Use Case Development\nMalware Analysis\nCloud Security (AWS/Azure/GCP)\nDigital Forensics Tools (EnCase/FTK/Kali)\nIDS/IPS/Firewall Technologies","description_format":"text","description_chars":3440,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Incident Response","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-10-30T17:25:30Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":11,"reasons":["seen:0","velocity","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":85080,"is_top_pay":false},"html_url":"https://alion.io/job/itds-poland-expert-cybersecurity-incident-response-analyst","json_url":"https://alion.io/job/itds-poland-expert-cybersecurity-incident-response-analyst.json","meta":{"generated_at":"2026-10-31T07:25:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"assistant_verified","counted_by":"address","units_charged":1,"used_today":1875,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":879},"rest":"https://alion.io/mcp/rest/get_company?id=879"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fitds-poland-expert-cybersecurity-incident-response-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fitds-poland-expert-cybersecurity-incident-response-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fitds-poland-expert-cybersecurity-incident-response-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/itds-poland-expert-cybersecurity-incident-response-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fitds-poland-expert-cybersecurity-incident-response-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3535678}},{"tool":"search_jobs","arguments":{"company":"itds.pl","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3535678},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}