Aviva

Security Analyst (Global SOC)

In short

This is a Security Analyst role in Aviva's Global Security Operations Centre (GSOC), covering daily cyber threat monitoring and end-to-end incident response across the Aviva Group globally, operating on 12h shifts as part of a 24/7/365 team. The role involves real-time threat detection and mitigation, driving incidents through the full lifecycle, threat correlation, detection rule tuning, and writing GSOC playbooks and response plans. It requires at least 1 year of hands-on SOC Analyst experience, English at B2/C1 level, knowledge of NIST, ITIL, MITRE ATT&CK and Cyber Kill Chain frameworks, strong networking and OS fundamentals, and hands-on experience with DLP, EDR, SIEM, Firewalls, IPS/IDS and SOAR tools. It is based in Warsaw, Poland, in a hybrid work model with a few office days per month.

About the Role
Aviva is looking for a Security Analyst responsible for daily cyber threat monitoring and response across Aviva Group globally. You won't just be watching alerts; you'll be managing incidents end-to-end, mitigating threats and having real impact on how we operate, detect and respond to cyber incidents.
Join our high-octane Global Security Operations Centre (GSOC), where no two days - and no two threats - are ever the same. We're looking for a passionate SOC Analyst to join a world-class team defending our organization 24/7/365, operating on 12h shifts.
Why Join Us?
•In-House Power: We manage our security internally. Here, you aren't just a consultant; you have direct influence over our actual defence mechanisms.
•Constant Evolution: Forget the routine. You'll face complex, evolving challenges that keep your skills sharp.
•Cyber - One of Aviva's Key Priorities: We must ensure our colleagues, customers and business are safe. Cyber security is deeply embedded in our organisation and its importance is recognized across the Group. Investing in our people, capabilities and technologies is at the heart of our values.
•Career Progression: We love seeing our people grow. We put our colleagues first by enabling and supporting career development within cyber and other areas.
What Will You Be Doing?
•Real-Time Defence: Monitoring IT security breaches, responding to cyber incidents to ensure threats are adequately mitigated.
•Incident Ownership: Driving cyber incident response through the lifecycle, from the detection to containment, eradication and recovery.
•Threat Correlation: Connecting the dots between different cyber threats to see the bigger picture.
•Detection Optimization: Recommending improvements for correlation rules and fine-tuning our "radar."
•Documentation Mastery: Drafting GSOC technical playbooks, response plans, and processes.
•Subject Matter Expertise: Acting as an SME for GSOC and Detection & Response projects.
What We're Looking For
•Experience: At least 1 year of hands-on working as a SOC Analyst.
•Communication: English at a minimum B2/C1 level (written and spoken).
•Framework Knowledge: Solid understanding of the NIST standard for incident management, ITIL Foundation, the MITRE ATT&CK and the Cyber Kill Chain.
•Autonomy: The ability to work independently, make critical decisions under pressure and tight time scales.
•Technical Foundations: Strong grasp of networking (Protocols, ISO/OSI) and IT service operations, knowledge of Windows, Linux, iOS, and Active Directory.
•Tool Proficiency: Hands-on experience with DLP, EDR, SIEM, Firewalls, IPS/IDS, and SOAR.
•Being Ahead of the Game: A hunger for OSINT, proactive approach to incident response and picking up tasks, providing improvement ideas.
In Aviva Services Excellence Centre, We Provide
•Contract of employment
•Performance Bonus
•Private medical care (ENEL-MED)
•Cafeteria system of benefits (e.g. MultiSport card)
•Additional parent privileges:
•baby leave – 6 weeks leave for second parent
•shortened working time after parental leave
•Employer-funded group insurance
•Employee Shares Plan
•Extra day off for birthday
•Paid time off to volunteer
•Additional leave acquired over the years in the company (even 5 days more in a year)
•Wellbeing Leave - additional two weeks paid leave after 10 years of service
•Psychological support consultations
•Access to the e-learning platforms
•Internal employee referral program
•Hybrid working model from Poland with a few days in Warsaw office per month
•Attractive office location in Warsaw - Gdański Business Center
•Additional entitlements for people with disabilities - Work Without Barriers
•Work environment that promotes diversity - Diversity Charter

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot