Cyber Response Technical Team Lead in Warsaw

Nasze wymagania:

• Leading and managing a team of Senior Cyber Security Analysts/Incident Responders
• Owning team performance, engagement, development plans, and career progression.
• Providing coaching, mentoring, and technical leadership to enhance team capabilities and expertise.
• Coordinating day-to-day activities, workload prioritization, resource allocation, and team scheduling.
• Managing team capacity planning, on-call rotations, shift coverage, and operational readiness.
• Acting as the primary GSOC escalation point for complex and high-severity cyber security incidents.
• Leading and supporting hands-on investigations, containment, eradication, and recovery activities during cyber incidents.
• Providing advanced technical guidance across endpoint, network, cloud, identity, and threat investigations.
• Ensuring high-quality incident response practices, investigation standards, and operational excellence.
• Coordinating incident response activities with internal stakeholders, customers, and other Cyber Security teams.
• Driving post-incident reviews from the GSOC perspective and ensuring lessons learned are translated into measurable improvements.
• Identifying skill gaps and developing training, knowledge-sharing, and capability-building initiatives.
• Supporting recruitment, onboarding, succession planning, and retention of cyber security talent within GSOC.
• Acting as a Subject Matter Expert (SME) in Cyber Security projects, strategic initiatives, and customer engagements.
• Providing expert input into the design, implementation, and enhancement of cyber security services and capabilities.
• Driving continuous improvement of incident response processes, fine-tuning of detection rules, playbooks, tooling, and operational procedures.
• Championing automation initiatives to improve GSOC efficiency, investigation quality, and response times.
• Driving adoption and effective use of AI and emerging technologies across GSOC and other relevant areas where required.
• Collaborating with Detection Engineering, Cyber Incident Management, Threat Hunting, Threat Intelligence, Security Engineering, and Product teams to enhance cyber defence capabilities.
• Staying current with emerging threats, attacker techniques, and industry best practices to strengthen response capabilities.
• Contributing to the strategic development and maturity of the organization's Cyber Response and Security Operations functions.

Mile widziane:

• Industry certifications such as GCIH, GCFA, GCFE, CISSP, OSCP or SC-200.
• Experience with KQL, PowerShell or Python and security automation.

Oferujemy:

• Contract of employment
• Performance Bonus
• Private medical care (ENEL-MED)
• Cafeteria system of benefits (e.g. MultiSport card)
• Additional parent privileges: baby leave - 6 weeks leave for second parent shortened working time after parental leave
• Employer-funded group insurance
• Employee Shares Plan
• Extra day off for birthday
• Paid time off to volunteer
• Additional leave acquired over the years in the company (even 5 days more in a year)
• Wellbeing Leave - additional two weeks paid leave after 10 years of service
• Psychological support consultations
• Access to the e-learning platforms
• Internal employee referral program
• Hybrid working model from Poland with a few days in Warsaw office per month
• Attractive office location in Warsaw - Gdański Business Center
• Additional entitlements for people with disabilities - Work Without Barriers
• Work environment that promotes diversity - Diversity Charter