About
SOFTSWISS operates across Georgia, Poland, and Serbia.
Responsibilities
•Participate in security incident response
•Perform initial incident response measures and triage
•Execute and monitor tasks assigned based on planning results
•Develop and update playbooks for alert verification
•Monitor alerts in compliance with SLA
•Propose optimizations to tools and processes
Requirements
•Basic IoC analysis skills using publicly available tools such as VirusTotal and AnyRun
•Experience with Splunk, ClickHouse, and SQL, including writing simple search queries and interpreting results
•Experience with SOAR/IRP
•General understanding of current cyber threats and common attack methods
•Basic programming skills in Python, PowerShell, or Bash for automating routine tasks
•Knowledge of Linux and Windows at a junior system administrator level
•Understanding of the MITRE ATT&CK framework and Cyber Kill Chain
•Ability to analyze and process large volumes of data, including logs and triage
•Strong communication and teamwork skills, including clear communication, asking relevant questions, and collaboration across teams during incident response
•Analytical and flexible mindset; able to consider different perspectives, build logical chains, make informed decisions, and independently suggest solutions
•Proactivity and ownership, including taking responsibility for decisions and results, checking work, learning from mistakes and feedback, and developing professional skills
Nice to have
•Knowledge of information security best practices (NIST, ISO)
•Basic Docker and Kubernetes knowledge
•Experience writing SIEM correlation rules
•NTA tools
•Online reputation services
•Developing alert verification instructions or incident response scenarios
•Kafka, ELK, or Graylog
•Strong Linux system administration
•Network, host, and cloud-based analysis and investigation
•Attack pipeline knowledge
•CI/CD, software development lifecycle, and Infrastructure-as-Code
•Automation
•Log collection, delivery, and normalization
•Open-source endpoint and infrastructure security solutions
•Static and dynamic malware analysis
•Penetration testing or red teaming
Conditions
•The position follows a 2-on-2-off shift pattern: a 12-hour day shift, a 12-hour night shift the next day, followed by 2 days off
•Private health insurance
•Sports benefits
•Comprehensive Mental Health Program
•Free online English lessons
•Local language courses
•Paid time off
•Maternity leave support
•Referral program rewards
•Upskilling, internal workshops, and participation in professional conferences and corporate events
