SOC Analyst (Shift Lead) (f/m/d)

The Security Operations Center (SOC) Analyst (Shift Lead) is responsible for monitoring, triaging, and responding to security events across a complex enterprise environment. This role leads investigations through to root cause by partnering with internal teams and subsidiary organizations, ensuring timely response to detections and reports while maintaining high-quality monitoring, investigation, and incident-handling practices across the shift team. 

As a Shift Lead, you will gain hands-on people leadership experience by guiding your shift crew and partnering closely with the Manager, Security Operations to deliver consistent, high-quality service as part of the Danaher Threat Management Center. 

This role operates on a 24/7 shift model (Panama schedule): 

• 12-hour shifts (2-2-3 rotation) 

• Rotating day and night shifts (monthly) 

• Includes weekends and holidays 

• Operates on a hybrid work model (combining remote and office-based shifts) 

As part of a large and established security organization, this position offers significant career growth for top performers, including opportunities to move into Incident Response, Cyber Engineering, and other cybersecurity disciplines. 

This is a Danaher Corporate role, hosted by our Cytiva operating company in Kraków, and will be an on-site role in Kraków.

In this role, you will have the opportunity to: 

• Monitor, respond to, and investigate cybersecurity events such as phishing, malware detections, brand monitoring alerts, and other security detections across a complex organization. 

• Lead shift operations to ensure consistent execution of monitoring, investigation, and incident-handling processes. 

• Escalate incidents to higher Tiers following defined procedures 

• Support, mentor, and reinforce team standards and core values across your shift crew. 

• Collaborate with internal stakeholders to document and continuously improve processes and procedures for handling escalations and investigations. 

• Support Incident Response activities, including containment and eradication, in coordination with relevant teams. 

The essential requirements of the job include: 

• 2+ years of experience in an IT Operations and/or Security Operations environment. 

• Strong analytical and problem-solving skills with high attention to detail. 

• Excellent interpersonal and communication skills, with the ability to work effectively across multiple teams. 

• Solid understanding of security principles, common attack types, and industry best practices.  

Preferred skills and experience: 

• Experience working in a large, global, and complex enterprise environment. 

• Hands-on experience with security technologies such as SIEM/SOAR, EDR, IPS, WAF, email security, cloud security, and/or threat intelligence platforms. 

• Prior experience collaborating with IT and cybersecurity teams in an operational setting (e.g., SOC, NOC, Incident Response, or Security Engineering).