Role in brief
SOFTSWISS seeks a Middle Incident Response Analyst for their Security Operations team. The role focuses on detecting and responding to security incidents while enhancing SOC processes. Candidates with experience in security incident analysis and a strong investigative mindset should consider applying.
About the role
As a Middle Incident Response Analyst at SOFTSWISS, you will play a crucial role in the Security Operations team. Your primary responsibilities will include detecting, investigating, and responding to security incidents, ensuring that threats are mitigated swiftly and effectively.
The role requires a hands-on approach to improve SOC processes and automation. Success in this position will be measured by your ability to balance security and performance while implementing remedial measures for any breaches that occur.
The salary range for this position is between $51,750 and $86,250.
Skills that matter here
- Splunk: This role utilizes Splunk for monitoring and analyzing security incidents.
- Python: Python will be used for automating processes and enhancing incident response.
- ELK: Experience with ELK is important for effective log management and analysis.
- Clickhouse: Clickhouse is utilized for data querying and analysis in security contexts.
- Gitlab: Gitlab may be used for version control in security automation projects.
- Wazuh: Wazuh is essential for monitoring security events and compliance.
Who this role suits
- A candidate with a background in information security engineering or analysis.
- Someone who possesses strong analytical and investigative problem-solving skills.
- A team player who is comfortable working in a dynamic environment.
- An individual with intermediate or higher English proficiency.
From the employer
- Upgrade SOC processes & response automation;
- Respond to cybersecurity incidents;
- Investigate security incidents and instigate remedial measures to address breaches;
- Immerse yourself in the specifics of systems and processes to achieve a balance of security and performance.
- Practice with SIEM, EDR, IDS/IPS, IRP/SOAR events analysis;
- Familiarity with SecOps processes, i.e., monitoring, triaging, investigating, and threat intelligence;
- More than one year of experience as an information security engineer/analyst;
- Strong investigative and analytical problem-solving skills;
- Intermediate or higher English level.
- Private insurance (depending on contract type);
- Paid gym membership;
- Comprehensive Mental Health Program;
- Free English lessons (online);
- Local language courses;
- +1 day off per calendar year;
- Referral program rewards;
- Upskilling, internal workshops, and participation in professional conferences and corporate events.
Questions about this role
What is the remote policy?
The position is remote.
What is the seniority level for this role?
This is a middle-level position.
How can I apply for the job?
You can apply through the SOFTSWISS careers website.