Cyber Operations Integration Specialist Miejsce pracy: Kraków Technologies we use Expected AWS Microsoft Azure Google Cloud Platform Microsoft Sentinel Splunk Operating system Windows macOS Linux About the project Join our Global Cybersecurity Operations team and help shape advanced threat defense strategies in a world-class financial environment! As a Cybersecurity Operations Integration Specialist, you will play a critical role in strengthening the organization’s cybersecurity framework by integrating threat modeling expertise with the MITRE ATT&CK framework into operational processes. This position requires a deep understanding of cyber operations, threat intelligence, and the ability to anticipate and mitigate potential threats. You will work closely with various cybersecurity teams to ensure robust defense mechanisms are in place and continuously improved. Sounds like your kind of challenge? Your responsibilities In this role, you will be responsible for developing and implementing advanced threat models to identify potential vulnerabilities and attack vectors within the organization’s systems and networks. You will leverage the MITRE ATT&CK framework to map and understand adversary tactics, techniques, and procedures (TTPs), ensuring these insights are integrated into daily operations and strategic planning. You will conduct regular assessments of the organization’s security posture, recommending enhancements based on threat modeling and ATT&CK analysis. Additionally, you will lead the development of advanced analytical and search capabilities to detect complex threats and insider activities. Collaboration will be key, as you will engage with internal and external stakeholders to leverage intelligence and strengthen threat detection capabilities across the enterprise. Note: Detailed project information will be shared during the recruitment process. Our requirements Proven experience in threat modeling and strong knowledge of the MITRE ATT&CK framework. Extensive background in cybersecurity operations, including threat detection, incident response, and vulnerability management. Strong analytical and problem-solving skills, with the ability to think like an adversary. Excellent communication and interpersonal skills for effective collaboration with cross-functional teams. In-depth knowledge of cyber threat intelligence and its practical application. Proficiency in cybersecurity tools and platforms for threat detection and analysis. Ability to work independently and as part of a team in a fast-paced environment. Knowledge and hands-on experience with common cybersecurity technologies such as IDS/IPS/HIPS, AV, EDR, Firewalls, and Proxies. Familiarity with network protocols (TCP, UDP, DNS, DHCP, IPSEC, and protocol analysis tools. Strong understanding of enterprise infrastructure, including Windows, Linux, and networking hardware. Experience with cloud platforms (AWS, Azure, Google Cloud) and their security tools. Proficiency with SIEM tools (e.g., Splunk Enterprise Security, Microsoft Sentinel) and cloud-based data lake solutions for real-time security analysis. Optional Experience in cybersecurity or technical roles, ideally in finance or other regulated sectors. Industry-recognized certifications such as CEH, EnCE, SANS GSEC, GCIH, GCIA, CISSP. Formal education in Information Security, Cybersecurity, Computer Science, or equivalent experience. Certifications in core security platforms (SIEM, SOAR, EDR, XDR, NDR) and operating systems (Windows, Linux, MacOS). This is how we organize our work This is how we work at the clients site agile This is how we work on a project Continuous Deployment Continuous Integration issue tracking tools What we offer Flexible cooperation model – choose the form that suits you best (B2B, employment contract, etc.) Hybrid work setup – remote days available depending on the client’s arrangements Collaborative team culture – work alongside experienced professionals eager to share knowledge Continuous development – access to training platforms and growth opportunities Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more High quality equipment – laptop and essential software provided Benefits sharing the costs of sports activities private medical care sharing the costs of professional training & courses life insurance Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference. Mindbox Sp. z o.o. At Mindbox, we connect top IT talents with technology projects for leading enterprises across Europe. Our focus is on matching your skills with work that matters – projects that use modern tech stacks, solve real business challenges, and give you space to grow. By joining us, you’ll deliver technology solutions for well-known brands, supported by the Mindbox team that values knowledge-sharing and continuous development. We make sure you have the tools, flexibility, and guidance to do your best work – and to keep moving forward in your career.