Lead Analyst (Cybersecurity)

Lead Analyst (Cybersecurity)
Kraków
NR REF.: 1187776

Your new role 

Lead Analysts are tasked with spearheading the analysis and response to cybersecurity incidents. They utilize cutting-edge threat monitoring and detection technologies to identify, analyze, and address security events.

What you39ll need to succeed 

- Exceptional investigative abilities, a relentless curiosity, and a strong drive to succeed.
- Ability to think like an adversary, demonstrating instinctive and innovative problem-solving skills.
- Strong decision-making skills, with the capability to evaluate the costs and benefits of potential actions and choose the most suitable one.
- Understanding of business needs and a commitment to providing high-quality, prompt, and efficient service.
- Knowledge of the organization’s mission, values, and goals, and the ability to consistently apply this understanding.
- Experience in defining and refining operational procedures, workflows, and processes to ensure consistent, quality execution of monitoring and detection.
- Comprehensive understanding of company39s cybersecurity principles, global financial services business models, and regional compliance regulations and laws.
- Familiarity with common industry cybersecurity frameworks, standards, and methodologies such as MITRE ATT&CK, OWASP, ISO2700x series, PCI DSS, GLBA, EU data security and privacy acts, FFIEC guidelines, CIS, and NIST standards.
- Strong communication and interpersonal skills, with the ability to produce clear and concise reports for various stakeholders.
- Proficiency in English and the local language.

Technical Expertise:

- Expertise in analyzing threat event data, evaluating malicious activity, documenting unusual files and data, and identifying attacker tactics, techniques, and procedures.
- In-depth knowledge and experience in analyzing and dissecting advanced attacker tactics, techniques, and procedures to inform control adjustments.
- Proficiency in using Security Information and Event Management (SIEM) platforms for real-time security information analysis.
- Expertise in Enterprise Detect and Response (EDR) tools for identifying, preventing, and detecting cyber threats, as well as for triage, investigation, and threat hunting.
- Cybersecurity Technologies: Detailed knowledge and experience with common cybersecurity technologies such as IDS/IPS/HIPS, advanced anti-malware prevention and analysis, firewalls, proxies, and MSS.
- Extensive knowledge of common operating systems and end-user platforms, including Windows, Linux, Citrix, ESX, OSX, etc.
- Proficiency in common network protocols such as TCP, UDP, DNS, DHCP, IPSEC, HTTP, and network protocol analysis tools.
- Experience with incident response tools, techniques, and processes for effective threat containment, mitigation, and remediation.
- Functional knowledge of scripting, programming, and/or developing bespoke tools or solutions to address unique problems.
- Functional knowledge of Security Orchestration Automation and Response (SOAR) platforms, including the development and implementation of automation routines.
- Technical experience with cloud computing platforms such as AWS, Azure, and Google.
- Basic knowledge and experience with common cybersecurity incident response and forensic investigation tools such as EnCase, FTK, Sleuthkit, Kali Linux, IDA Pro, etc.

What you39ll get in return 

- Competitive Salary
- Annual performance- based bonus
- Additional bonuses for recognition awards
- Multisport Card
- Private medical care
- Life Insurance
- One-Time reimbursement of home office set up (up to 800 PLN)
- Corporate parties and events
- CSR Initiatives
- Nursery and Kindergarten discounts
- Financial support with trainings and education
- Social Fund
- Flexible working hours
- Free parking

What you need to do now 

If you39re interested in this role, click 39apply now39 to forward an up-to-date copy of your CV, or call us now.

Hays Poland sp. z o.o. is an employment agency registered in a registry kept by Marshal of the Mazowieckie Voivodeship under the number 361.