Security Analyst

3 Weeks ago • All levels

Job Summary

Job Description

As a Security Analyst, you will triage and analyze security incidents escalated by the 24/7 SOC provider, acting as an internal contact and coordinating in-depth investigations. You will correlate alerts with business context, tune detection rules in the SIEM, maintain reports, participate in threat hunting, and support simulation exercises. You will also contribute to the development of playbooks, implement defensive measures, and make hardening recommendations. This role requires strong analytical and communication skills, along with experience in cybersecurity operations and incident detection.

Must have:

Knowledge of cybersecurity operations and incident detection principles.
Hands-on experience with SIEM tools and log analysis.
Familiarity with detection tuning and correlation rules.
Strong analytical skills and threat assessment.
Understanding of networking, endpoint, and authentication logs.
Familiarity with MITRE ATT&CK framework and threat modeling.
Proficiency in reading and understanding logs from various systems.
Strong communication skills and ability to work cross-functionally.
Very good command of English.

Good to have:

Exposure to EDR, SOAR, or CSPM tools.
Familiarity with threat intelligence feeds and IOC validation.
Basic scripting skills for data manipulation or automation.
Security certifications such as Security+, GCIH, GCIA, or equivalent.
Experience in environments with outsourced SOCs or managed security providers.
Background in gaming, creative industries, or dynamic tech environments.

Perks:

Private medical care, life insurance, and pro-health campaigns.
Outstanding work atmosphere and flexible working hours.
Dedicated development budget for each employee.
Extra paid days for training and CSR.
Stable career paths and extensive training.
Financing of English and Polish language classes.
State-of-the-art offices and chillout zones.
Fully equipped kitchen and a gym.
Free car park

9 skills required

9 skills required for this role

Add these skills to join the top 1% applicants for this job

communication

budget-management

oops

storytelling

networking

linux

threat-intelligence

python

bash

Job Details

Company Description

Techland is one of the biggest video game companies in Poland, with over 30 years of experience in the gaming industry. From our studios in Wrocław and Warsaw, we’ve built an international team of more than 500 talented professionals, all dedicated to pushing the boundaries of game development.

We’re known for creating iconic franchises like Call of Juarez and the zombie genre-defining Dying Light, which has been played by over 45 million players worldwide. With a focus on open-world action, storytelling, and community engagement, we’re committed to delivering unforgettable experiences to our players.

We’re constantly striving to improve, innovate, and take on new challenges. With ambitious plans for the future, we’re looking for passionate people to be part of this exciting journey.

Job Description

Your daily tasks:

Triage and analysis of incidents escalated by our external 24/7 SOC provider.
Acting as an internal point of contact for security events and coordinating deeper investigation when needed.
Correlating alerts with internal business and technical context to identify real threats and false positives.
Reviewing and tuning detection rules in SIEM to improve quality and relevance of alerts.
Maintaining dashboards and reports for internal stakeholders and compliance purposes.
Participating in threat hunting and hypothesis-driven detection improvement.
Supporting purple teaming, simulation exercises, and post-incident analysis.
Contributing to the development of playbooks and knowledge base for security operations.
Supporting the security team in implementing defensive measures and hardening recommendations.

Qualifications

Solid knowledge of cybersecurity operations and incident detection principles.
Hands-on experience with SIEM tools and log analysis.
Familiarity with detection tuning and creating or adjusting correlation rules.
Strong analytical skills and ability to assess threats in business context.
Experience working with or managing MSSP/SOC services is a strong plus.
Understanding of networking, endpoint telemetry and authentication logs.
Familiarity with MITRE ATT&CK framework and basic threat modeling.
Proficiency in reading and understanding logs from various systems (GNU/Linux, Windows, Cloud).
Strong communication skills and ability to work cross-functionally.
Very good command of English.

Nice to have:

Exposure to EDR, SOAR or CSPM tools.
Familiarity with threat intelligence feeds and IOC validation.
Basic scripting skills for data manipulation or automation (e.g. Python, KQL, Bash).
Security certifications such as Security+, GCIH, GCIA, or equivalent.
Experience in environments with outsourced SOCs or managed security providers.
Background in gaming, creative industries or dynamic tech environments.

Additional Information

What we can offer:

A wide array of benefits: private medical care, life insurance, pro-health campaigns, gifts for different occasions.
An outstanding work atmosphere in a highly-skilled team of professionals, with flexible working hours, no dress code, and full support of the dedicated HR Business Partner.
Many opportunities for personal development: a dedicated development budget for each employee, extra two paid days for training and CSR, stable career paths, extensive internal and external training, and financing of English and Polish language classes.
State-of-the-art offices filled with chillout zones, a fully equipped kitchen, a gym (Wrocław office), and a free car park (Warsaw limited amount of space).