Security Analyst Detect & Respond Job at Arrive (Łódź)

Job Description

Become a Security Guardian! We are seeking a highly motivated Security Analyst (4+ years experience) to join our Detect & Respond team. Reporting to the Detect & Respond Lead, you will proactively monitor, investigate, and respond to advanced threats while partnering with engineering and infrastructure teams to reduce risk exposure through effective threat detection improvements. This role requires a keen eye for detail, strong analytical rigor, and the ability to work effectively under pressure.

Job Responsibility

Investigate and analyze security alerts from SIEM, EDR, Dark Web Monitoring & Cloud Security Tools
Provide comprehensive support for incident response activities, including containment, eradication, and recovery
Perform thorough root cause analysis and document incident findings
Develop and refine incident response playbooks
Work effectively and collaboratively with our Managed Security Service Provider (MSSP)
Conduct hypothesis-driven threat hunting across endpoint, network, and cloud environments
Leverage EDR tooling to detect lateral movement and suspicious activity
Stay continuously up-to-date on emerging threat intelligence and attacker behaviors
Managing the incident from the moment it is escalated by Tier 1 until final closure, ensuring adherence to established frameworks like the NIST or SANS incident response lifecycles
Acting as the primary technical point of contact during an active incident. This involves directing IT operations, network engineers, or system administrators on exactly what systems need to be isolated, patched, or restored
Participating in or leading post-mortem meetings after a severe incident is resolved. The Level 2 analyst is expected to identify gaps in current defenses, suggest SIEM/EDR rule tuning, and recommend process improvements to prevent a recurrence
Support ISO 27001, PCI DSS, and audit-related evidence gathering requirements
Maintain detailed documentation of investigations, procedures, and remediation
Contribute to improving SOC processes and runbooks

Requirements

4+ years of hands-on experience in a Security Analyst, SOC, or Incident Response role
Strong experience with SIEM platforms (e.g., Splunk, Sentinel, Crowdstrike, Rapid7)
Hands-on experience with EDR tools (e.g., CrowdStrike, Defender, SentinelOne)
Strong understanding of networking fundamentals, security principles, and common attack vectors
Excellent analytical, communication, and collaboration skills, with the ability to translate technical findings into business-impact language

Nice to have

Experience working in hybrid/cloud environments (AWS, Azure, or GCP)
Experience in fintech, SaaS, or product-based organizations
Exposure to cloud-native security tools (Wiz, Orca, Prisma, etc.)
Relevant industry certifications are welcome, but not required (such as Security+, CySA+, GCIH, CCSP, or AWS Security Specialty)

Arrive - All Job Offers

Select Country

Security Analyst Detect & Respond

Job Description

Job Responsibility

Requirements

Nice to have

Looking for more opportunities?

Security Analyst Detect & Respond

Security Analyst

Security Analyst

Security Analyst

IT Security Analyst

Security Analyst

Information Security Analyst

Security Analyst

Data Security Analyst

Our AI answers in your language