Sysco

Supplies food and kitchen goods to restaurants

Analyst Tier 2 - Cybersecurity Operations

Security Operations & Incident ResponseConfirmed live in the last 24 hours

Full-timeKraków, PolandNo salary listed

About the Job

Requirements

Requires 2–4 years of experience on a Computer Incident Response Team (CIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC), or Security Operations Center (SOC).
Requires a degree in Computer Science or Information Technology, or equivalent work experience.
Requires experience supporting cybersecurity operations in a large enterprise environment.
Requires experience with incident response, network traffic analysis, and log analysis; the ability to prioritize and distinguish potential intrusion attempts from false alarms; and experience managing and tracking investigations through resolution.
Requires experience with a security information and event management (SIEM) and log management solution.
Requires familiarity with at least one of the NIST Incident Response Lifecycle, Cyber Kill Chain, or MITRE ATT&CK framework.
Requires at least one active security certification, such as CCNA Security, GCIA, GCIH, CYSA+, Security+, or another related security certification.
Requires experience with one or more of Qradar SIEM/Cortex XSOAR, SentinelOne, Proofpoint Email, Azure Suite, or Zscaler.

Responsibilities

Correlate threat data from multiple sources to establish threats and their impact on the network.
Assess data and recommend appropriate countermeasures; facilitate tracking, preliminary investigation handling, and reporting of security events and computer incidents.
Perform remediation actions and apply lessons learned to security incident investigation and resolution.
Monitor, identify, and resolve security events by analyzing, investigating, and prioritizing events based on risk and exposure.
Develop processes to analyze data and produce accurate, meaningful, readily interpreted results based on user requirements and use cases.
Develop processes aligned with enterprise incident response activities and coordinate closely with other Security Operations Center teams.
Create custom tool content to enhance security operations team capabilities.
Manage the collection, documentation, and research of security events generated by the SOC monitoring platform and infrastructure.
Support Security Incident Management aligned with NIST standards.
Develop technical documentation, including Standard Operating Procedures, runbooks/playbooks, and incident response plans.
Support training development with analysts and tabletop exercises.
Assist with or lead tool configuration and content creation.

JOB DESCRIPTION

Job Title: Analyst (Tier 2) - Cybersecurity Operations

Work Mode & Environnent

Location: Kraków, Poland

Shift work : 4x10 per week Sunday - Wednesday or Wednesday - Saturday

Working Hours: 9.00 am to 7.00 pm Local time

Hybrid work: 2 days in office and 2 days remote

Job Type: Full time

Responsibilities and Duties

Cybersecurity SOC Tier 2 analyst must be able to do the following:

Correlate threat data from various sources to establish the threat/impact against the network.

After assessment of the data, recommend appropriate countermeasures, facilitating tracking, preliminary handling of investigations, and reporting of all security events and computer incidents.

Remediation actions and apply lessons learned to security incident investigation and resolution

Perform monitoring, identification and resolution of security events to detect threats through analysis, investigations and prioritization of events based on risk/exposure

Develop processes which analyzes data, producing accurate, meaningful, easily interpreted results based on user requirements and use cases

Develop processes which align with enterprise incident response activities and coordinate closely with other teams within the Security Operations Center

Create custom tool content to enhance capabilities of security operations teams

Manage the collection, documentation and research of security events generated by the SOC monitoring platform and infrastructure

Provide support to Security Incident Management aligned with NIST standards

Technical writing experience

Standard Operating Procedures

Runbooks/Playbooks

Incident Response Plans

Support training develop with both analysts and tabletop exercises

Assist or lead the effort in Tool configuration and content creation

Qualifications:

2-4 years of experience on one of the following team(s): Computer Incident Response Team (CIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC) or a Security Operations Center (SOC)

Degree in Computer Science, Information Technology, or equivalent work experience

Experience supporting Cyber Security Operations in a large enterprise environment

Experience with Incident Response, analysis of network traffic, log analysis, ability to prioritize and differentiate between potential intrusion attempts and false alarms, managing and tracking investigations to resolution

Experience with SIEM & Log Management solution

Familiarity with one of the following; NIST Incident Response Lifecycle, Cyber Kill Chain, Adversarial Tactics, Techniques & Common Knowledge (ATT&CK) Metrics

CCNA Security, GCIA, GCIH, CYSA+, Security+ or other related security certifications

At minimum there must be one active security certification

Experience with one or more of the following tools:

Qradar SIEM/Cortex XSOAR

SentinelOne

Proofpoint Email

Azure Suite

Zscaler

Why Join Us

Be part of a global cybersecurity team protecting a dynamic enterprise environment.

Opportunity to work with modern security technologies and drive tool innovation.

Collaborative culture with professional development opportunities.

Hybrid work model with our Kraków office as the primary location.

Benefits:

Private medical care

Hybrid working

Cafeteria platform

MultiSport card

Life insurance

Integration events

Complimentary coffee and tea available in the office

Convenient on-site parking for employees

Modern and well-equipped office with dedicated relaxation and leisure areas, including Xbox and foosball

About the Company

Sysco

Supplies food and kitchen goods to restaurants

Sysco buys, stores and delivers food, kitchen supplies and equipment to restaurants, hospitals, schools, hotels and other businesses that cook away from home. Alongside national brands, it sells its own Sysco Brand line of foods and supplies, which fills a large share of the cases it ships. Its biggest product groups are fresh and frozen meats, canned and dry goods, and frozen produce and baked goods. Customers order through Sysco sales representatives or online, and Sysco delivers from distribution centers across North America and Europe, earning money on the difference between what it pays suppliers and what customers pay for delivered goods. Sysco was founded in 1969, began public operations in 1970 and is based in Houston, Texas.

Company size: 10,001+
Company stage: IPO
Headquarters: Houston, TX
Founded: 1969

Recently Posted Jobs

Explore more opportunities at Sysco

See more jobs