{"id":3749777,"url":"https://alion.io/job/mindbox-cybersecurity-lead-analyst","title":"Cybersecurity Lead Analyst","company":{"id":53456,"name":"Mindbox","domain":"mindboxgroup.com","url":"https://alion.io/company/mindbox","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Traffit","truth_index":{"grade":"A","score":86,"open_postings":53,"ghost_share":0,"stale_share":0.528,"repost_share":0.038,"time_to_fill_p50_days":55,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"EnCase","optional":false},{"name":"FTK","optional":false},{"name":"GCP","optional":false},{"name":"IDA Pro","optional":false},{"name":"Kali Linux","optional":false},{"name":"Linux","optional":false},{"name":"OWASP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SQL","optional":false}],"status":"live","first_seen_at":"2026-11-04T11:31:44Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-07T13:24:33Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"At Mindboxwe connect top IT talents with technology projects for leading enterprises across Europe.\nWe are seeking a highly analytical and motivated Cybersecurity Analyst to join the Global Defense Operations team within a global cybersecurity organisation.\nGlobal Defense Operations delivers a range of advanced Network Defense services -including threat monitoring, detection, and incident response-protecting the company, its customers, and partners from a continuously evolving threat landscape.\nAs part of this team, you will play a critical role in detecting, investigating, and responding to cyber threats while helping design and implement new defensive capabilities against sophisticated attacks. You will work collaboratively with cybersecurity experts worldwide to maintain security resilience across cloud, network, and application environments.\nSounds like your kind of challenge?\nResponsibilities\nFlexible cooperation model \nHybrid work setup - 6 days per month from the offcie\nCollaborative team culture - work alongside experienced professionals eager to share knowledge \nContinuous development - access to training platforms and growth opportunities \nComprehensive benefits - including Interpolska Health Care, Multisport card, Warta Insurance, and more \nHigh quality equipment - laptop and essential software provided \nRequirements\nMonitor and analyse alerts across a large-scale enterprise environment to identify malicious activity and respond to potential threats in real time.\nContain, mitigate, and remediate security incidents in collaboration with the Incident Response and SOC teams.\nConduct root cause analysis and contribute findings to post-incident reviews to strengthen defenses and reduce recurrence.\nApply structured analytical methodologies to improve the quality and speed of threat detection and response capabilities.\nDevelop, test, and deploy new detection use cases and playbooks across security platforms.\nReview and refine existing automation workflows to ensure coverage and accuracy.\nIdentify opportunities for process automation and orchestration to enhance response efficiency.\nMaintain and improve incident triage processes to assess severity, impact, and priority of events.\nProvide technical guidance and mentoring for less-experienced analysts, sharing threat intelligence and best practices.\nCollaborate with cybersecurity engineering and infrastructure teams to ensure that new security controls, logging, and analytics capabilities are effective and scalable.\nContribute to continuous improvement initiatives, advising on new tools, methods, and playbook optimisations.\nNote:Detailed project information will be shared during the recruitment process.\nBenefits\nExcellent investigative and analytical skills; natural curiosity and the ability to think like an attacker.\nStrong experience in incident analysis, threat detection, and response within an enterprise environment.\nHands-on knowledge of network protocols (TCP, UDP, DNS, HTTP, DHCP, IPSEC, etc.) and cybersecurity frameworks (NIST, ISO 2700x, OWASP, CIS).\nProficiency with security technologies such as SIEM, IDS/IPS, endpoint protection (EDR/XDR), firewalls, proxies, malware prevention, and forensics tools.\nFamiliarity with cloud security concepts and platforms (AWS, Azure, GCP).\nBasic knowledge of digital forensics and incident analysis tools (e.g., EnCase, FTK, Kali Linux, IDA Pro).\nExperience with at least one scripting or query language (Python, PowerShell, SQL, or KQL) is an advantage.\nAbility to define, optimise, and document security operational procedures and workflows.\nStrong written and spoken English and ability to communicate complex topics clearly to both technical and non-technical stakeholders.\nNice to have:\nExperience developing operational intelligence and detection rules using big-data or log management platforms.\nParticipation in red-team / blue-team exercises or experience with threat hunting.\nFamiliarity with service automation and orchestration platforms (SOAR).\nJoining this project you’llbecome part of Mindbox - a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’llback you up every step of the way, accelerate your development, and ensure your skills make a difference.","description_format":"text","description_chars":4282,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Growth opportunities","Hybrid work"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Workflow & Process Automation (RPA, BPM)","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-04T14:45:21Z"}],"visa":[],"liveness":{"score":70,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.695,"p_room":1,"age_days":2,"expected_fill_days":55,"reasons":["conf:0","stale_co","urgency","velocity","win:early","comp:brand"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/mindbox-cybersecurity-lead-analyst","json_url":"https://alion.io/job/mindbox-cybersecurity-lead-analyst.json","meta":{"generated_at":"2026-11-07T15:56:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22108,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":53456},"rest":"https://alion.io/mcp/rest/get_company?id=53456"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmindbox-cybersecurity-lead-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmindbox-cybersecurity-lead-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmindbox-cybersecurity-lead-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mindbox-cybersecurity-lead-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmindbox-cybersecurity-lead-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3749777}},{"tool":"search_jobs","arguments":{"company":"mindboxgroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3749777},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}