IT Security Team Lead

Kennametal jest światowym liderem w dostarczaniu rozwiązań z zakresu narzędzi specjalistycznych wysokiej jakości, w tym narzędzi do obróbki skrawaniem, narzędzi tokarskich, frezarskich, wiertarskich. Naszym Klientom oferujemy szeroką gamę produktów, a także wsparcie techniczne.

IT Security Team Lead
Miejsce pracy: woj. śląskie
Nr ref.: 37021


The Security Operations Center Team Lead conducts essential cyber security incident handling activities for Kennametal. This is accomplished by leading security monitoring and incident response activities, including conducting event and incident analysis, and coordinating incident containment and remediation actions. In addition, the SOC Manager is instrumental in cyber threat and vulnerability analysis and response. The jobholder will be responsible for coordinating work across the Kennametal Security Operations Center to receive alerts and determine appropriate action, shaping detection criteria and developing operational guidelines.

We are open to any location in the country, as it is a fully remote job from Poland.


Major tasks and responsibilities

  • Serve as a senior-level technical resource for cyber security incident handling
  • Manage junior CSIRT/SOC team members
  • Support the Kennametal Managed Security Service Provider relationship
  • Provide qualified guidance on and coordinate execution of identification, analysis, response and monitoring of cyber threat and vulnerabilities

Incident Management and Monitoring

  • Manage Security incidents. Assist in developing concepts for efficient and effective security response activities.
  • Be a trusted point of contact and expertise for incidents and manage all the incident response activities including escalation to upper management.
  • Provide qualified guidance on SOC alerting conditions and necessary data sources
  • Note: this role requires some on-call duty

Vulnerability Management

  • Analyze and interpret results of vulnerability management activities using standard frameworks (CVSS)
  • Research and investigate new and emerging vulnerabilities, to include 0Day events
  • Identify and resolve false positive findings in assessment results
  • Assess compensating controls and validate their effectiveness
  • Partner with stakeholders to streamline, standardize and document vulnerability remediation procedures
  • Monitor vulnerability remediation activities
  • Integrate information from disparate sources and create tactical intelligence that is relevant to protecting the business.

Threat Management

  • Research and investigate new and emerging cyber threats and vulnerabilities through participation in external security communities.
  • Manage the collection, analysis, and dissemination of cybersecurity threat information, including controlling the quality of intelligence suppliers
  • Manage relationships with global stakeholders to identify business needs and design appropriate security controls.
  • Analyze and interpret threat information using standard frameworks (Cyber Kill Chain, MITRE ATT&CK framework)
  • Generate timely business cyber threat intelligence assessment reports to business owners and management stakeholders
  • Generate timely technical cyber threat intelligence assessment reports to IT management and stakeholders

Other Areas of Effort

  • Support the achievement of the Global IT Strategy
  • Support efforts related to the corporate Enterprise Security Dashboard


  • Master’s degree in information assurance (or related field) with minimum of 5 years’ experience or B.S in information assurance (or related field) with minimum of 10 years’ experience on a computer security incident response team
  • Expertise of security concepts and best practices related to incident management, threat and vulnerability management
  • Practical experience with identifying, analyzing, and communicating cyber threat and vulnerability information
  • Experience with key SOC technologies (SIEM, EDR, TIP, others)
  • Experience applying threat and vulnerability analyses models, including the LM Cyber Kill Chain, the Diamond Model of Intrusion Analysis, the MITR
  • ATT&CK Framework and the Common Vulnerability Scoring System (CVSS)
  • Experience with incident response within cloud environments
  • Understanding of ITIL/ service management concepts
  • Familiarity with enterprise risk management and how cyber threats and vulnerabilities integrate into ERM efforts
  • Exemplary verbal and written communication skills (English business fluent spoken and written)
  • Demonstrated ability to think strategically and perform detailed, complex analysis and data interpretation
  • Intercultural experience
  • Proven project management experience
  • Effective interpersonal skills, out-of-the-box thinking and ability to interface with all levels of staff
  • Ability to work under pressure and deal with ambiguous situations

What we offer 

  • Multisport A card that enables free entrance to gyms
  • Lunch pass A card pre-payed monthly for paying in restaurants
  • Remote working
  • Medicover Private healthcare combining high-quality specialists and fast lane Vs public services
Prosimy o dopisanie klauzuli: Wyrażam zgodę na przetwarzanie moich danych osobowych dla potrzeb niezbędnych w procesie rekrutacji.

    ISS Facility Services Sp. z o.o.

    mazowieckie / Warszawa


    Help Desk Agent ze znajomością j. chińskiego

    Job description: Receiving reports from employees about failures and technical faults in the office Registration of notifications and monitoring their status Providing employees with information on the status of notifications and implementation stages...

    LUX MED Sp. z o.o.

    mazowieckie / Warszawa, ul. Iłżecka 24f


    Koordynator / Koordynatorka Działu Raportów i Analiz w Contact Center

    Praca w wewnętrznym Contact Center Grupy LUX MED przy ulicy Iłżeckiej 24f w Warszawie. Nasze oczekiwania: wykształcenie wyższe lub w trakcie studiów (preferowane kierunki: informatyka, matematyka lub pokrewne); doświadczenie w zarządzaniu...

    Fujitsu Technology Solutions Sp. z o.o.

    wielkopolskie /


    Service Process Leader for Service Request & Catalogue Mgt with German

    Process Management Ensuring the process is executed appropriately at each described step Ensuring the appropriate inputs/outputs are being produced Delivery of the process related trainings Ensuring process awareness in the Team, Business Units and other...

Więcej ofert pracy

Podobne oferty pracy

  • IT CONNECT Sp. z o.o.t

    mazowieckie / Warszawa


    Specjalista ds. Bezpieczeństwa Technicznego IT

    Zapewnienie stosowania Polityk Bezpieczeństwa Informacji w ramach Usług świadczonych przez Biuro IT Analiza ryzyka technicznego występującego w ramach Usług IT oraz podejmowanie działań w celu zmniejszania wykrytego ryzyka Koordynacja...

  • Motorola Solutions Systems Polskat

    małopolskie / Kraków


    Junior Security Engineer

    Company Overview Motorola Solutions is there for our customers when everything is on the line. In extreme moments — when a hurricane lands or when a fire breaks out. And in everyday moments — when a package arrives just in time for the holiday or...

  • Miejskie Przedsiębiorstwo Wodociągów i Kanalizacji w Warszawie S.A.t

    mazowieckie / Warszawa, ul. Zaruskiego 4


    Operator w Centrum Cyberbezpieczeństwa

    Dołącz do zespołu monitorującego bezpieczeństwo teleinformatyczne Spółki. Naszym pracownikom oferujemy: zatrudnienie w oparciu o umowę o pracę na stanowisko Starszy Inspektor/ Specjalista/ Starszy Specjalista pracę w oparciu o wartości...