Overview

SOFTSWISS is hiring an Incident Response Analyst to join our Security Operations team. We are looking for a hands-on specialist who will be responsible for detecting, investigating, and responding to security incidents, while continuously improving SOC processes and automation to ensure fast and effective threat mitigation.

Purpose of the role

In this role, you will be responsible for monitoring and responding to cybersecurity incidents, conducting in-depth investigations, and implementing remediation measures to prevent future threats. You will work closely with internal systems and processes to balance security and performance, while contributing to the development and automation of SOC workflows to improve overall incident response efficiency.

What you'll do

• Upgrade SOC processes & response automation;
• Respond to cybersecurity incidents;
• Immerse yourself in the specifics of systems and processes to achieve a balance of security and performance.
• Investigate security incidents and instigate remedial measures to address breaches.
• The position operates on a 2-on-2-off shift pattern, encompassing a 12-hour day shift, a 12-hour night shift the next day, and 2 free days after that.

Tech stack

Splunk; / Clickhouse; / Gitlab; / Python; / ELK; / Wazuh.

Who you are

Required Experience

• Practice with SIEM, EDR, IDS/IPS, IRP/SOAR events analysis.
• Familiarity with SecOps processes, i.e., monitoring, triaging, investigating, and threat intelligence.
• More than one year of experience as an information security engineer/analyst.
• Strong investigative and analytical problem-solving skills.
• Intermediate or higher English level.

Nice to have

• Experience with Clickhouse, Splunk, Kafka, ELK, Graylog, etc.