SOC Analyst (Shift Lead) (f/m/d)

The Security Operations Center (SOC) Analyst (Shift Lead) is responsible for monitoring, triaging, and responding to security events across a complex enterprise environment. This role leads investigations through to root cause by partnering with internal teams and subsidiary organizations, ensuring timely response to detections and reports while maintaining high-quality monitoring, investigation, and incident-handling practices across the shift team.

As a Shift Lead, you will gain hands-on people leadership experience by guiding your shift crew and partnering closely with the Manager, Security Operations to deliver consistent, high-quality service as part of the Danaher Threat Management Center.

This role operates on a 24/7 shift model (Panama schedule):

• 12-hour shifts (2-2-3 rotation)

• Rotating day and night shifts (monthly)

• Includes weekends and holidays

• Operates on a hybrid work model (combining remote and office-based shifts)

As part of a large and established security organization, this position offers significant career growth for top performers, including opportunities to move into Incident Response, Cyber Engineering, and other cybersecurity disciplines.

This is a Danaher Corporate role, hosted by our Cytiva operating company in Kraków, and will be an on-site role in Kraków.

In this role, you will have the opportunity to:

• Monitor, respond to, and investigate cybersecurity events such as phishing, malware detections, brand monitoring alerts, and other security detections across a complex organization.

• Lead shift operations to ensure consistent execution of monitoring, investigation, and incident-handling processes.

• Escalate incidents to higher Tiers following defined procedures

• Support, mentor, and reinforce team standards and core values across your shift crew.

• Collaborate with internal stakeholders to document and continuously improve processes and procedures for handling escalations and investigations.

• Support Incident Response activities, including containment and eradication, in coordination with relevant teams.

The essential requirements of the job include:

• 2+ years of experience in an IT Operations and/or Security Operations environment.

• Strong analytical and problem-solving skills with high attention to detail.

• Excellent interpersonal and communication skills, with the ability to work effectively across multiple teams.

• Solid understanding of security principles, common attack types, and industry best practices.

Preferred skills and experience:

• Experience working in a large, global, and complex enterprise environment.

• Hands-on experience with security technologies such as SIEM/SOAR, EDR, IPS, WAF, email security, cloud security, and/or threat intelligence platforms.

• Prior experience collaborating with IT and cybersecurity teams in an operational setting (e.g., SOC, NOC, Incident Response, or Security Engineering).