Cybersecurity Lead Analyst

What we’re looking for

• Experience in Cybersecurity Operations, Incident Response or threat detection.
• Hands-on knowledge of SIEM, log analysis and malicious activity detection.
• Familiarity with security technologies such as IDS/IPS, firewalls, proxies and antimalware solutions.
• Good understanding of networking concepts and Windows/Linux/UNIX environments.
• Knowledge of cybersecurity frameworks and standards such as NIST, OWASP or ISO 2700x.
• Familiarity with cloud environments such as AWS, Microsoft Azure or Google Cloud.
• Strong analytical and problem-solving skills, combined with the ability to share knowledge and provide technical support to others.

Cybersecurity Lead Analyst

Location: Kraków, Poland
Work model: Hybrid, 6 days per month from the client’s office in Kraków
Employment model: Outsourcing via Antal

We are looking for an experienced cybersecurity professional to join an international environment focused on threat detection, security monitoring and incident response.

This is a hands-on expert role combining advanced security analysis with the opportunity to improve detection capabilities, develop response processes and provide technical guidance to other team members.

What we offer

• Cooperation with Antal in an outsourcing model.


• Opportunity to work in an international cybersecurity environment.


• Real impact on the development of Incident Response and threat detection capabilities.


• Exposure to SIEM, security monitoring, cloud technologies and security automation.


• Hybrid working model with only 6 days per month from the client’s office in Kraków.


• An expert-level position with room to share knowledge and contribute to technical improvements.

,[Investigate and respond to cybersecurity alerts and incidents., Identify threats and malicious activity using security data and monitoring tools., Develop and improve detection use cases and Incident Response playbooks., Enhance security monitoring, detection and threat hunting processes., Collaborate with Cybersecurity and IT teams on complex security incidents., Provide technical guidance and share cybersecurity expertise within the team.] Requirements: SIEM, Cybersecurity, Windows, Linux, Unix, IDS/IPS, Firewall, NIST, OWASP, AWS/ GCP/ Azure, playbook