Incident Response Analyst

SOFTSWISS operates across Georgia, Poland, and Serbia.

• Participate in security incident response
• Perform initial incident response measures and triage
• Execute and monitor tasks assigned based on planning results
• Develop and update playbooks for alert verification
• Monitor alerts in compliance with SLA
• Propose optimizations to tools and processes

• Basic IoC analysis skills using publicly available tools such as VirusTotal and AnyRun
• Experience with Splunk, ClickHouse, and SQL, including writing simple search queries and interpreting results
• Experience with SOAR/IRP
• General understanding of current cyber threats and common attack methods
• Basic programming skills in Python, PowerShell, or Bash for automating routine tasks
• Knowledge of Linux and Windows at a junior system administrator level
• Understanding of the MITRE ATT&CK framework and Cyber Kill Chain
• Ability to analyze and process large volumes of data, including logs and triage
• Strong communication and teamwork skills, including clear communication, asking relevant questions, and collaboration across teams during incident response
• Analytical and flexible mindset; able to consider different perspectives, build logical chains, make informed decisions, and independently suggest solutions
• Proactivity and ownership, including taking responsibility for decisions and results, checking work, learning from mistakes and feedback, and developing professional skills
• Будет плюсом: knowledge of information security best practices (NIST, ISO); basic Docker and Kubernetes knowledge; experience writing SIEM correlation rules; NTA tools; online reputation services; developing alert verification instructions or incident response scenarios; Kafka, ELK, or Graylog; strong Linux system administration; network, host, and cloud-based analysis and investigation; attack pipeline knowledge; CI/CD, software development lifecycle, and Infrastructure-as-Code; automation; log collection, delivery, and normalization; open-source endpoint and infrastructure security solutions; static and dynamic malware analysis; penetration testing or red teaming

• The position follows a 2-on-2-off shift pattern: a 12-hour day shift, a 12-hour night shift the next day, followed by 2 days off
• Private health insurance
• Sports benefits
• Comprehensive Mental Health Program
• Free online English lessons
• Local language courses
• Paid time off
• Maternity leave support
• Referral program rewards
• Upskilling, internal workshops, and participation in professional conferences and corporate events