
WTW · Warszawa, Wrocław, Kraków, Katowice, Gdańsk
Cyber Defense GSOC L2 Analyst
W skrócie
zdania wybrane z oferty- Act as L1 escalation point, lead incident triage, containment, and root‑cause analysis
- Hands‑on experience with SIEM, UEBA, and EDR tools
- 4–5 years of experience in a mature SOC or cyber defence environment
Technologie
Pełny opis
z justjoin.itCYBER DEFENSE GSOC L2 ANALYST
📍 Remote (Poland)
📄 Contract of employment
Twój zakres obowiązków:
Investigate security incidents, analyze logs, and use SIEM/UEBA/EDR tools
Act as L1 escalation point, lead incident triage, containment, and root‑cause analysis
Coordinate response with technical teams, escalate critical incidents, and ensure timely resolution
Lead shift operations: task assignment, end‑of‑shift reports, and effective handovers
Improve SOC processes through documentation, alert tuning, and mentoring L1 analysts
Nasze wymagania:
4–5 years of experience in a mature SOC or cyber defence environment
Hands‑on experience with SIEM, UEBA, and EDR tools
Strong communication skills and ability to work under pressure in a 24/7 global SOC
Good knowledge of attack techniques and Linux/macOS/Windows systems
Fluent Business English; security/network certifications are a plus
To oferujemy:
Flexible work model – possibility to work primarily from home
Team‑based environment with a strong culture of knowledge sharing
Growth opportunities – access to WTW’s global expertise and resources
Great working atmosphere – a supportive team and a culture built on mutual respect
Security and stability – employment under a full‑time contract in a leading international brokerage firm
Comprehensive benefits package funded by the employer, including bonus and incentive systems
Benefity:
Prywatna opieka medyczna
Kafeteria benefitów & Multisport
Employee Assistance Program
Ubezpieczenie na życie
Hybrydowy model pracy
Volunteer Day
Dofinansowanie do okularów
Dofinansowanie nauki języków
Możliwości uzyskania uprawnień
Recognition HUB
Świadczenia socjalne ZFŚS
PPE
Treść ogłoszenia pochodzi z justjoin.it i należy do jego autora.
Historia oferty
bez zmian od publikacji- Podbita na górę listy
Pracodawca odświeżył ogłoszenie na portalu.
- Opublikowana na justjoin.it