JobCubby JobCubby
Sign up
Sysco

Analyst (Tier 2) - Cybersecurity Operations

Sysco Poland

Food and Beverage Services · 10,001+ employees

2 d ago
security Mid (2-5 yrs) Full-time Poland
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

The analyst will monitor, identify, and resolve security events while correlating threat data to assess network impact. They are also responsible for developing incident response processes, creating custom tool content, and documenting security investigations.

What they look for

Cybersecurity operations Incident response Threat analysis Log analysis Network traffic analysis SIEM Log management Technical writing NIST standards Tool configuration Risk assessment Security event monitoring Playbook development Vulnerability prioritization Security certification

Requirements

Candidates must have 2-4 years of experience in a SOC or incident response environment and hold at least one active security certification. A degree in Computer Science or Information Technology is required, along with proficiency in SIEM tools and incident response frameworks.

Benefits

Professional development opportunities Hybrid work model

Full description

JOB DESCRIPTION

Job Title: Analyst (Tier 2) - Cybersecurity Operations 

Location: Kraków, Poland

Responsibilities and Duties:

Analyst (Tier 2) - Cybersecurity Operations  must be able to do the following:

  • Correlate threat data from various sources to establish the threat/impact against the network.
  • After assessment of the data, recommend appropriate countermeasures, facilitating tracking, preliminary handling of investigations, and reporting of all security events and computer incidents.
  • Remediation actions and apply lessons learned to security incident investigation and resolution
  • Perform monitoring, identification and resolution of security events to detect threats through analysis, investigations and prioritization of events based on risk/exposure
  • Develop processes which analyzes data, producing accurate, meaningful, easily interpreted results based on user requirements and use cases
  • Develop processes which align with enterprise incident response activities and coordinate closely with other teams within the Security Operations Center
  • Create custom tool content to enhance capabilities of security operations teams
  • Manage the collection, documentation and research of security events generated by the SOC monitoring platform and infrastructure
  • Provide support to Security Incident Management aligned with NIST standards

Technical writing experience:

  • Standard Operating Procedures
  • Runbooks/Playbooks
  • Incident Response Plans
  • Support training develop with both analysts and tabletop exercises
  • Assist or lead the effort in Tool configuration and content creation

Qualifications:

  • 2-4 years of experience on one of the following team(s): Computer Incident Response Team (CIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC) or a Security Operations Center (SOC)
  • Degree in Computer Science, Information Technology, or equivalent work experience
  • Experience supporting Cyber Security Operations in a large enterprise environment
  • Experience with Incident Response, analysis of network traffic, log analysis, ability to prioritize and differentiate between potential intrusion attempts and false alarms, managing and tracking investigations to resolution
  • Experience with SIEM & Log Management solution
  • Familiarity with one of the following; NIST Incident Response Lifecycle, Cyber Kill Chain, Adversarial Tactics, Techniques & Common Knowledge (ATT&CK) Metrics
  • CCNA Security, GCIA, GCIH, CYSA+, Security+ or other related security certifications
  • At minimum there must be one active security certification

Experience with one or more of the following tools:

  • Qradar SIEM/Cortex XSOAR
  • SentinelOne
  • Proofpoint Email
  • Azure Suite
  • Zscaler

Working Hours:

  • 09.00 am to 07.00 pm local time

Why Join Us:

  • Be part of a global cybersecurity team protecting a dynamic enterprise environment.
  • Opportunity to work with modern security technologies and drive tool innovation.
  • Collaborative culture with professional development opportunities.
  • Hybrid work model with our Kraków office as the primary location.

Similar roles