{"id":2177932,"url":"https://alion.io/job/sysco-analyst-tier-2-cybersecurity-operations","title":"Analyst (Tier 2) - Cybersecurity Operations","company":{"id":1771007,"name":"Sysco","domain":"sysco.com","url":"https://alion.io/company/sysco-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":30000,"max_usd":65000,"period":"year","method":"role_seniority_country_cell","sample_n":8},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Cortex","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Incident Management","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Zscaler","optional":false},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-10-09T14:25:26Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-12T17:50:59Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"JOB DESCRIPTION\nJob Title: Analyst (Tier 2) - Cybersecurity Operations\nLocation: Kraków, Poland\nResponsibilities and Duties:\nAnalyst (Tier 2) - Cybersecurity Operationsmust be able to do the following:\nCorrelate threat data from various sources to establish the threat/impact against the network.\nAfter assessment of the data, recommend appropriate countermeasures, facilitating tracking, preliminary handling of investigations, and reporting of all security events and computer incidents.\nRemediation actions and apply lessons learned to security incident investigation and resolution\nPerform monitoring, identification and resolution of security events to detect threats through analysis, investigations and prioritization of events based on risk/exposure\nDevelop processes which analyzes data, producing accurate, meaningful, easily interpreted results based on user requirements and use cases\nDevelop processes which align with enterprise incident response activities and coordinate closely with other teams within the Security Operations Center\nCreate custom tool content to enhance capabilities of security operations teams\nManage the collection, documentation and research of security events generated by the SOC monitoring platform and infrastructure\nProvide support to Security Incident Management aligned with NIST standards\nTechnical writing experience:\nStandard Operating Procedures\nRunbooks/Playbooks\nIncident Response Plans\nSupport training develop with both analysts and tabletop exercises\nAssist or lead the effort in Tool configuration and content creation\nQualifications:\n2-4 years of experience on one of the following team(s): Computer Incident Response Team (CIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC) or a Security Operations Center (SOC)\nDegree in Computer Science, Information Technology, or equivalent work experience\nExperience supporting Cyber Security Operations in a large enterprise environment\nExperience with Incident Response, analysis of network traffic, log analysis, ability to prioritize and differentiate between potential intrusion attempts and false alarms, managing and tracking investigations to resolution\nExperience with SIEM & Log Management solution\nFamiliarity with one of the following; NIST Incident Response Lifecycle, Cyber Kill Chain, Adversarial Tactics, Techniques & Common Knowledge (ATT&CK) Metrics\nCCNA Security, GCIA, GCIH, CYSA+, Security+ or other related security certifications\nAt minimum there must be one active security certification\nExperience with one or more of the following tools:\nQradar SIEM/Cortex XSOAR\nSentinelOne\nProofpoint Email\nAzure Suite\nZscaler\nWorking Hours:\n09.00 am to 07.00 pm local time\nWhy Join Us:\nBe part of a global cybersecurity team protecting a dynamic enterprise environment.\nOpportunity to work with modern security technologies and drive tool innovation.\nCollaborative culture with professional development opportunities.\nHybrid work model with our Kraków office as the primary location.","description_format":"text","description_chars":3038,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Hybrid work","Professional development"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Wholesale","Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-09T14:25:26Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.662,"p_room":0.9,"age_days":2,"expected_fill_days":4,"reasons":["conf:2","velocity","win:mid","comp:junior,brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/sysco-analyst-tier-2-cybersecurity-operations","json_url":"https://alion.io/job/sysco-analyst-tier-2-cybersecurity-operations.json","meta":{"generated_at":"2026-10-12T20:16:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32882,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1771007},"rest":"https://alion.io/mcp/rest/get_company?id=1771007"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsysco-analyst-tier-2-cybersecurity-operations"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsysco-analyst-tier-2-cybersecurity-operations"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsysco-analyst-tier-2-cybersecurity-operations"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sysco-analyst-tier-2-cybersecurity-operations\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsysco-analyst-tier-2-cybersecurity-operations"}]}