Lead Security Analyst - Smart City

Expected

Optional

We are working with a fast-growing technology company committed to protecting its digital assets and maintaining a secure environment for its customers and employees. We seek a highly experienced and exceptionally skilled Lead Security Analyst to join our Security Operations team.

This is a critical role that will be instrumental in shaping the future of our security posture. We need an expert who can take the reins and elevate our detect and respond capabilities to the next level. This position demands a deep understanding of security principles, a proven track record of success, and the ability to lead in a fast-paced, dynamic environment. You will be responsible for designing, implementing, and managing security monitoring, threat intelligence, incident response, and vulnerability management processes. If you are a security leader with a passion for building world-class security programs and thrive on tackling complex challenges, we encourage you to apply.

• Develop a comprehensive and cutting-edge detect and respond program, encompassing people, processes, and technology.
• Evaluate, select, and implement advanced security monitoring tools (SIEM, EDR, etc.) and ensure seamless integration with our existing infrastructure.
• Establish proactive threat intelligence processes to identify and mitigate emerging threats, with a focus on advanced persistent threats (APTs).
• Define and refine incident response playbooks and procedures, incorporating industry best practices and innovative approaches.
• Conduct regular security assessments, vulnerability scans, and penetration testing to proactively identify weaknesses and vulnerabilities.
• Lead complex incident response efforts, from triage and investigation to containment, eradication, and recovery, ensuring minimal business impact.
• Perform thorough post-incident analysis to identify root causes and drive continuous improvement, leveraging advanced forensic techniques.
• Champion security awareness and best practices across the organization through comprehensive training programs and collaborative initiatives.
• Provide expert guidance on security incident response and threat mitigation to different teams, fostering a security-first culture.
• Partner with IT and engineering teams to integrate security controls into systems and applications throughout the software development lifecycle.
• Continuously evaluate and improve the effectiveness of the detect and respond program, staying abreast of industry trends and emerging technologies.
• Provide technical leadership and mentorship to security analysts, fostering their professional development and expertise.
• Mentor and coach team members, providing guidance and support to help them grow their skills and knowledge in security operations and incident response.
• Foster strong collaboration with internal teams, Managed Security Service Providers (MSSPs), and other stakeholders to ensure a unified security posture.
• Communicate security risks and recommendations to senior management, influencing strategic decision-making.

Optional

This is how we work

• Continuous Deployment
• Continuous Integration

• assistance in preparation to public speeches
• intracompany training
• mentoring
• substantive support from technological leaders
• support of IT events
• technical knowledge exchange within the company

• Knowledge sharing within our company.
• Agile and friendly atmosphere, non-violent communication and full respect for diversity.
• Possibility to choose from onsite (in Lodz, Poland) or hybrid work (meetings from time to time in our office in Łódź city centre).
• Remuneration on B2B contract: 1.200 - 1.500 PLN net/day or 19.000- 24.000 PLN gross on Employment Agreement (UoP)
• Possibility to engage not only technically, but also have an impact on the small company culture.

• sharing the costs of sports activities
• private medical care
• flexible working time
• integration events

• Interview meeting with Incubly
• Technical Meeting with the Client
• Feedback + final decision

Security Tools & Platforms

•SIEM: Splunk, Microsoft Sentinel, IBM QRadar

•EDR/XDR: CrowdStrike Falcon, Microsoft Defender, SentinelOne

•IDS/IPS: Snort, Suricata, Palo Alto Threat Prevention

•Cloud Security: AWS Security Hub, Azure Defender, Google Chronicle

•Vulnerability Management: Rapid7 InsightVM, Nessus, Qualys

•Threat Intelligence: Digital Shadows, MISP, Recorded Future

Key Protocols & Frameworks

•Network Protocols: TCP/IP, DNS, HTTP, VPN, TLS/SSL

•Security Frameworks: MITRE ATT&CK, Cyber Kill Chain, Zero Trust

•Compliance: PCI DSS, ISO 27001, NIST CSF

•Cloud Security & DevSecOps: CI/CD security integration, IaC (Terraform, Ansible)

•Threat Hunting & Incident Response: YARA, Sigma, Velociraptor

Architecture Overview

•Hybrid Security Model: On-prem & cloud security integration

•Proactive Threat Detection: AI-driven analytics, threat intelligence automation

•Security Operations Leadership: MSSP collaboration, SecOps strategy

INCUBLY SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ