Security Operations Center (SOC) Senior Analyst

Location: Warsaw, Poland; hybrid work with office presence required three times per week. Working hours are 2pm–10pm.

Salary: 259,100–323,900 PLN per year

Company

hirify.global develops medicines focused on fighting cancer and improving access to treatment.

What you will do

• Lead advanced analysis of SIEM alerts, endpoint telemetry, network traffic, and threat intelligence.
• Investigate patterns, anomalies, indicators of compromise, and emerging threats.
• Develop and tune detection rules, correlation logic, and alerting thresholds.
• Oversee the configuration, optimization, and health of SIEM, EDR, IDS/IPS, SOAR, firewall, and log analysis tools.
• Automate repetitive investigations and workflows using scripting or SOAR platforms.
• Coordinate critical incident response, escalation, audits, risk assessments, and security control evaluations.

Requirements

• At least 3 years of hands-on SOC or equivalent security experience, including incident response and threat analysis.
• Strong knowledge of the Cyber Kill Chain, MITRE ATT&CK, modern threat actor techniques, endpoint security, network security, and operating systems.
• Experience with security event monitoring, triage, log analysis, network traffic analysis, and forensic investigation.
• Proficiency with SIEM, EDR, IDS/IPS, vulnerability management, and related security technologies.
• Knowledge of NIST, ISO 27001, and other compliance frameworks, plus a Bachelor’s degree or equivalent practical experience.
• Familiarity with Python, PowerShell, or Bash for security data analysis and log parsing; relevant certifications such as GCIH, GCFA, or CompTIA CySA+ are expected.

Nice to have

• Experience guiding junior SOC analysts and serving as a subject-matter expert in cross-team security discussions.
• Experience evaluating security technologies and contributing to security architecture decisions.

Culture & Benefits

• Hybrid work model with regular office collaboration in Warsaw.
• Participation in on-call rotations and escalation coverage for critical events.
• Work with IT teams, security leadership, and third-party partners.
• Environment focused on continuous learning, collaboration, analytical thinking, and driving excellence.