Cybersecurity Lead Analyst

Project overview

At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe.

We are seeking a highly analytical and motivated Cybersecurity Analyst to join the Global Defense Operations team within a global cybersecurity organisation.

Global Defense Operations delivers a range of advanced Network Defense services—including threat monitoring, detection, and incident response—protecting the company, its customers, and partners from a continuously evolving threat landscape.

As part of this team, you will play a critical role in detecting, investigating, and responding to cyber threats while helping design and implement new defensive capabilities against sophisticated attacks. You will work collaboratively with cybersecurity experts worldwide to maintain security resilience across cloud, network, and application environments.

Sounds like your kind of challenge?

What you get in return

• Flexible cooperation model
• Hybrid work setup – 6 days per month from the offcie
• Collaborative team culture – work alongside experienced professionals eager to share knowledge
• Continuous development – access to training platforms and growth opportunities
• Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
• High quality equipment – laptop and essential software provided
• Monitor and analyse alerts across a large-scale enterprise environment to identify malicious activity and respond to potential threats in real time.
• Contain, mitigate, and remediate security incidents in collaboration with the Incident Response and SOC teams.
• Conduct root cause analysis and contribute findings to post-incident reviews to strengthen defenses and reduce recurrence.
• Apply structured analytical methodologies to improve the quality and speed of threat detection and response capabilities.
• Develop, test, and deploy new detection use cases and playbooks across security platforms.
• Review and refine existing automation workflows to ensure coverage and accuracy.
• Identify opportunities for process automation and orchestration to enhance response efficiency.
• Maintain and improve incident triage processes to assess severity, impact, and priority of events.
• Provide technical guidance and mentoring for less-experienced analysts, sharing threat intelligence and best practices.
• Collaborate with cybersecurity engineering and infrastructure teams to ensure that new security controls, logging, and analytics capabilities are effective and scalable.
• Contribute to continuous improvement initiatives, advising on new tools, methods, and playbook optimisations.
• Excellent investigative and analytical skills; natural curiosity and the ability to think like an attacker.
• Strong experience in incident analysis, threat detection, and response within an enterprise environment.
• Hands-on knowledge of network protocols (TCP, UDP, DNS, HTTP, DHCP, IPSEC, etc.) and cybersecurity frameworks (NIST, ISO 2700x, OWASP, CIS).
• Proficiency with security technologies such as SIEM, IDS/IPS, endpoint protection (EDR/XDR), firewalls, proxies, malware prevention, and forensics tools.
• Familiarity with cloud security concepts and platforms (AWS, Azure, GCP).
• Basic knowledge of digital forensics and incident analysis tools (e.g., EnCase, FTK, Kali Linux, IDA Pro).
• Experience with at least one scripting or query language (Python, PowerShell, SQL, or KQL) is an advantage.
• Ability to define, optimise, and document security operational procedures and workflows.
• Strong written and spoken English and ability to communicate complex topics clearly to both technical and non‑technical stakeholders.

Nice to have

Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.

• Experience developing operational intelligence and detection rules using big‑data or log management platforms.
• Participation in red‑team / blue‑team exercises or experience with threat hunting.
• Familiarity with service automation and orchestration platforms (SOAR).

Project details

• Start: flexible
• Location: Kraków, PL
• Rate: 150-175 EUR/h