Incident Response Analyst

Job not on LinkedIn

🕒 July 27

🌐 Czechia, Serbia, +3 more countries – Remote

🇨🇿 Czechia – Remote 🇷🇸 Serbia – Remote 🇬🇪 Georgia – Remote 🇦🇲 Armenia – Remote 🇰🇿 Kazakhstan – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚨 Incident Response Analyst

👻 Ghost score 38%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Talentgrator

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2020

🎯 Recruiter

👥 HR Tech

🎲 Gambling

Recruitment • HR Tech • Gambling

Talentgrator is a recruitment agency specializing in IT and the iGaming (online gambling/entertainment) sector. It operates a talent marketplace and hiring platform that connects companies and candidates—offering job browsing, vacancy posting, an integrated messaging system, one-click applications, and a database of 30,000+ talents. The site highlights fast matches (300+ weekly), privacy for reviewers in the gambling industry, and tools to streamline hiring for employers and job search for candidates.

📋 Description

• Work with WAF to analyze anomalous traffic, respond to web attacks, and fine-tune rules. • Work with DLP and MDM to investigate data leaks, analyze policy violations, and collaborate with teams on findings. • Monitor and triage alerts in SIEM, analyzing events, classifying incidents, and prioritizing response. • Integrate new log sources into SIEM, including normalization, parsing, and enrichment. • Develop and improve detection rules, correlation rules, and dashboards. • Reduce MTTR by identifying bottlenecks in response processes and implementing automation and runbooks. • Participate in incident post-mortems and provide actionable recommendations. • Conduct security incident investigations by collecting artifacts, reconstructing timelines, and performing root cause analysis.

🎯 Requirements

• 3+ years of experience in Incident Response or Security Operations • Hands-on experience with SIEM platforms (Splunk, ELK/OpenSearch, Graylog, or similar) • Ability to read and interpret logs: OS (Linux/Windows/macOS), network, applications, cloud • Understanding of network protocols and traffic analysis (Wireshark, Zeek, etc.) • Knowledge of attacker tactics and techniques (MITRE ATT&CK, kill chain, IOC/TTP) • Ability to independently lead investigations from alert to final report • Scripting skills for automation (Python / Bash) • Basic understanding of integrating LLM-based tools • Native-level Russian proficiency • Nice to Have • Experience with SOAR platforms and building playbooks • Experience with EDR/XDR solutions (CrowdStrike, SentinelOne, etc.) • Participation in CTFs, red team / blue team exercises, or pentesting • Experience with cloud logs (AWS CloudTrail, GCP Audit Logs, etc.) • Experience integrating security tools via APIs and automating response using LLM

🏖️ Benefits

• 25 vacation days and 5 family days yearly • Flexible start to the workday • Support from a professional corporate coach and psychologist • Regular internal and external activities, workshops, trips, and corporate events • Access to our internal knowledge base, meetups, and team-building activities • Ongoing training in new technologies and continuous professional development support