Incident Response Analyst

Overview

SOFTSWISS continues to expand the team and is looking for an Incident Response Analyst. We need a true, experienced, and accomplished professional who shares our culture and values.

Purpose of the Role

You’ll help protect our iGaming services, working closely with IT and product teams to ensure security and stability across our ecosystem.

Key Responsibilities

• Upgrade SOC processes & response automation.
• Respond to cybersecurity incidents.
• Immerse yourself in the specifics of systems and processes to achieve a balance of security and performance.
• Investigate security incidents and instigate remedial measures to address breaches.
• This position follows a 2-on-2-off rotating schedule:
  • 12-hour day shift.
  • Followed by a 12-hour night shift the next day.
  • Then 2 days off.

Our stack

• Splunk, Clickhouse, Gitlab, Python, ELK, Wazuh.

Required Experience

• 1+ year of experience as an information security engineer or analyst.
• Experience with SIEM, EDR, IDS/IPS, IRP/SOAR events analysis.
• Familiarity with SecOps processes (monitoring, triaging, investigating, threat intelligence).
• Strong investigative and analytical problem-solving skills.
• Intermediate or higher proficiency in English and Russian.

Nice to Have

• Expertise in network, host, and cloud-based analysis and investigation.
• Experience with AWS, Azure, GCP, Kubernetes, Docker infrastructure and related attack vectors.
• Strong understanding of attack pipelines (MITRE ATT&CK Framework, Cyber Kill-Chain).
• Experience with Clickhouse, Splunk, Kafka, ELK, Graylog, etc.
• Strong Linux system administration experience.
• Familiarity with CI/CD, software development lifecycle, Infrastructure-as-Code (Terraform/Ansible/etc).
• Proficiency in automation (Bash/PowerShell, Python).
• Experience with log collection, delivery, and normalisation.
• Strong knowledge in open-source endpoint & infrastructure security tools (Audit.d, Sysmon, AppArmor, SELinux, etc.).
• Basic static and dynamic malware analysis.
• Offensive experience (penetration testing, red teaming)