Senior CSIRT Specialist

About UsERGO Technology & Services S.A. (ET&S S.A.) was established in January 2021 following the integration of ERGO Digital IT and Atena into one entity, leveraging both companies’ strengths and best practices. As a part of ERGO Technology & Services Management AG, the technology holding of ERGO Group AG, we support millions of internal and external customers with state-of-the-art IT solutions to everyday problems.In October 2022, ET&S S.A. expanded its scope of operations by creating a Business Services unit to contribute in a new way to the growth of ERGO’s business. Acting as a co-partner and internal consultant, it adds non-IT value and supports the development of the entire ERGO Group, currently offering skills in reporting, analysis, actuarial, and input management. We are committed to fostering innovation and meeting the evolving needs of our clients worldwide.Discover how we implement AI, IoT, Voice Recognition, Big Data science, advanced mobile solutions, and business-related services to anticipate and address our customers’ future needs.About the roleCyber threats are constantly evolving, and we need experts to stay ahead. At ERGO Technology & Services, we’re looking for a Senior CSIRT Specialist to lead the security incident response process, support technical investigations, drive remediation, and strengthen our cyber resilience. You’ll play a key role in advancing ERGO’s security incident response maturity. If you’re passionate about protecting critical systems in a dynamic environment, we encourage you to apply.How you will get the job doneleading the overall incident response process, ensuring effective technical management and communication throughoutproposing and coordinating rapid response actions to address security threatsconducting and facilitating the incident response meetings with stakeholders and relevant teamstracking and coordinating the tasks performed by technical respondersparticipating in technical investigations on an as-needed basis, primarily to support the team during high-demand periodsdefining and applying containment strategiesdriving remediation measures during security incidentspreparing incident reports that detail incident response activities and technical results from investigationsimproving incident response playbooks and documentationidentifying necessary actions during the entire security incident management processmentoring and supporting the development of junior team membersSkills and experience you will needfluency in written and verbal Englishmore than 5 years of hands-on experience with hardware/software tools used in incident response, computer forensics, network security assessmentsdeep knowledge in the IT & IT security area including network protocols, security technologies, security architecture, cyber security threats and vulnerabilitiesproven experience in cyber security incident management including but not limited to ransomware attacks, data breaches, and infrastructure compromisestrong knowledge about the threat landscape including APT groups and attack tactics, techniques, and proceduresdeep expertise in incident documentation, reporting, and transforming technical information into senior management languageunderstating of security risk and mitigation strategy for IT infrastructurestrong knowledge of security processes, standards, and frameworks (SANS, NIST, etc.)strong ability to work in a multinational and complex environmentability to coordinate people in different locations and at different stakeholder levelsability to stay focused, keep calm and work under pressureexcellent communication and interpersonal skillsstrong analytical and problem-solving skillsNice to haveBachelor or Master's degree in IT/Business IT/Computer Science or a similar areaCISSP/ GCFA/ GCIA/ GCFE/ GNFA/ GREM/ GCIH/ CISM or similar certificationScripting skills (Python, visual basic, bash, PowerShell, etc.)Perks & BenefitsLet's be healthyMedical package, sports card, and numerous sports sections – these are some of the benefits that help our employees stay in good shape.Let's be balancedWork-life balance is a key aspect of a healthy workplace. We offer our employees flexible working hours, a confidential employee assistant program, as well as the possibility of remote working. However, staying at home with our in-office gaming room and dog-friendly office in Warsaw won’t be easy.Let's be smartWe organize numerous workshops and training courses. Thanks to hackathons and meetups, our specialists share their expertise with others. Additionally, we have a wide range of digital learning platforms and language courses.Let's be responsibleEach year, we participate in several CSR activities, during which, together with our colleagues, we do our best to create a better future.Let's be funCompany-wide bike races and soccer matches, film marathons in our cinema room or other engaging team-building activities – we got it coveredLet's be diverseEvery team member is valued, regardless of gender, nationality, religious beliefs, disability, age, and sexual orientation or identity. Your qualifications, experience, and mindset are our greatest benefit