About this role
Location: Warsaw/remote work
About the job
KMD Security Operations Center (SOC) is the backbone of our organization’s IT security, ensuring constant protection by monitoring systems, detecting threats and responding to incidents. As we expand our team to deliver 24/7/365 system monitoring, we’re seeking driven professionals ready to make an impact. If you’re passionate about cybersecurity and want to grow your skills in a collaborative and fast-paced environment, we’d love to have you on our team! Your future role: Work in 24/7/365 rotational schedule Manage, investigate and respond to security incidents using EDR and SIEM tools.
Prepare comprehensive post-incident reports, including root cause analysis, mitigation actions, and recommendations for future improvements. Develop and refine detection rules and response playbooks to enhance security measures. Perform in-depth threat intelligence analysis to identify and mitigate potential threats. Collaborate with IT teams to implement robust security measures. Stay updated on emerging threats and evolving attack techniques to ensure proactive defence strategies.
What you bring
2+ years of SOC experience working with EDR/SIEM tools (Microsoft and CrowdStrike stack preferred). Familiarity with Microsoft Azure. Proficient in threat detection, analysis, and response. Knowledgeable in malware analysis, attack methodologies, and threat intelligence. Strong troubleshooting and analytical skills. Excellent communication and documentation skills. Fluent in written and spoken English and Polish. Eager to learn new skills and technologies, committed to continuous development in the field. Hold a master’s degree in cybersecurity, information technology, or a related field, or possess equivalent experience. Comfortable with non-standard working hours, including nights, weekends and public holidays. Availability for employment contract