Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
EY

Senior Incident Response Analyst

EY

. Independently lead the technical response to high-severity and critical cybersecurity incidents .

Posted 10/23/2026full-timeWarsaw • PolandSeniorWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading technical responses to cybersecurity incidents, including advanced analysis of various telemetry and incident investigation methodologies. Proficient in utilizing detection tools and cloud platforms while mentoring junior analysts and developing incident response strategies.

Highest-signal resume keywords
Incident ResponseThreat HuntingSIEM ToolsMITRE ATT&CK FrameworkCloud Platform Experience

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Digital ForensicsMalware AnalysisRoot Cause AnalysisNetwork SecurityEndpoint SecurityApplication SecurityData SecurityMemory AnalysisTimeline AnalysisEvidence Preservation
Soft Skills
Strong Communication SkillsAbility to Work Under Pressure
Tools & Technologies
EDR/XDRNDRSOARWindowsLinuxActive DirectoryMicrosoft Entra IDAWSMicrosoft AzureGoogle Cloud
Industry Keywords
CybersecurityIncident InvestigationPhishingRansomwareAccount CompromiseApplication AttacksData ExfiltrationService RestorationBackup ValidationPost-Recovery Monitoring

Tech Stack

Tools & technologies
AWSAzureCloudCyber SecurityLinux

About the role

Key responsibilities & impact
  • Independently lead the technical response to high-severity and critical cybersecurity incidents
  • Confirm attack scope, compromise level, attack vector, business impact and required response actions
  • Perform advanced analysis of endpoint, network, identity, application and cloud telemetry
  • Reconstruct attack paths and prepare detailed incident timelines
  • Conduct threat hunting based on indicators of compromise, attacker behaviours, tactics, techniques and procedures
  • Design, recommend and oversee containment and eradication activities
  • Analyse malware, scripts, processes, persistence mechanisms, lateral movement and privilege escalation
  • Perform root cause analysis and define measures to prevent recurrence
  • Assess risks associated with restoring systems and services
  • Support network segmentation, account and credential resets, system rebuilds, backup restoration and service recovery decisions
  • Act as technical lead during major cybersecurity incidents
  • Mentor Junior Incident Response Analysts
  • Develop, test and improve incident response playbooks
  • Prepare technical sections of post-incident reports and participate in post-incident reviews
  • Use AI-agent-supported solutions for data analysis, recommendation development and solution design

Requirements

What you’ll need
  • Several years of professional experience in Incident Response, Security Operations Centre operations, Digital Forensics and Incident Response, threat hunting or cyber defence
  • Broad knowledge of network, endpoint, operating system, application, identity and data security
  • Advanced knowledge of incident investigation methodologies and the MITRE ATT&CK framework
  • Strong experience with SIEM, EDR/XDR, NDR, SOAR, detection and forensic tools
  • Strong knowledge of Windows, Linux, Active Directory, Microsoft Entra ID and network protocols
  • Experience investigating phishing, ransomware, account compromise, application attacks and data exfiltration
  • Hands-on experience with at least one major cloud platform, such as AWS, Microsoft Azure or Google Cloud
  • Experience in digital forensics, memory analysis, timeline analysis and evidence preservation
  • Experience in recovery activities, including secure service restoration, system rebuilds, backup validation and post-recovery monitoring
  • Strong communication skills and ability to work effectively under pressure

Benefits

Comp & perks
  • Participation in projects addressing complex cybersecurity incidents across diverse technology environments
  • Access to advanced security technologies and opportunities to further develop expertise in Incident Response, threat hunting and digital forensics
  • Professional and financial support in obtaining recognised qualifications and certificates
  • EY Badges – global certification of your competencies and the opportunity to earn an MBA title from the prestigious Hult International School of Business
  • Career Counselor – professional, one-to-one guidance on career building and development
  • Psycho-educational platform – free consultations with specialists in mental health and personal development and access to educational activities
  • Benefit programme offering private healthcare with additional preventive examinations, life insurance, tickets, team sports, a language learning platform, sports cards and more