Senior Cybersecurity Detection and Response Engineer

at  EY

SENIOR CYBERSECURITY DETECTION AND RESPONSE ENGINEER

Location: Wrocław / Warszawa / Katowice
Hybrid model: 2 days office/3 days remote
Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY.
We are delighted to extend an invitation for you to join the esteemed Cybersecurity Detection & Response (CDR) team within the GDS PL Consulting division. In this pivotal role, you will have the opportunity to contribute to groundbreaking projects across a multitude of critical domains, including Security Information and Event Management (SIEM), Security Operations Centers (SOC), Cyber Threat Intelligence, Endpoint Detection and Response (EDR), Network Security, and Incident Response. Your expertise will play a key role in shaping the cybersecurity landscape and protecting our clients from emerging threats.

THE EXCEPTIONAL EY EXPERIENCE. IT’S YOURS TO BUILD.

In compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow-up actions

YOUR KEY RESPONSIBILITIES

As a valued member of the Cybersecurity Detection & Response team, you will be actively involved in a diverse array of projects, tailored to align with our clients’ requirements as well as your professional expertise. Additionally, your participation will extend to contributing to the strategic development and expansion of the Cybersecurity Detection & Response (CDR) team

TO QUALIFY FOR THE ROLE, YOU MUST HAVE

• Experience in at least one of the leading SIEM solutions on the market (Microsoft Sentinel, Splunk, Elasticsearch, Google Chronicle)
• Good knowledge of distributed IT environments, preferably hands-on experience in major Cloud Infrastructures (Microsoft Azure, Amazon Web Services, Oracle Cloud Infrastructure, Google Cloud Platform)
• Advanced skills in Linux (RedHat, Debian) and Microsoft Windows operating systems security
• Familiarity with cybersecurity frameworks and threat models (MITRE ATT&CK, Cyber Kill Chain, STRIDE)
• Familiarity with cybersecurity standards (ISO27001, NIST, CSIRT, CISA)
• Good understanding of TCP/IP networks and deployment models (cloud, hybrid and on-premises)
• Familiarity with High Availability technologies and other resilience solutions
• Documentation skills, including creating and reviewing policies, procedures, SOPs, playbooks, and post-implementation documents
• Proficiency in English at the C1 level
• Willingness and preparedness for travel as required by project needs