Аналитик по реагированию на киберинциденты

Cyber Incident Response Analyst (Remote – Azerbaijan)

Budget: up to 200 EUR/day (B2B)

Client: Irish Airline Company

We are looking for an experienced Cyber Incident Response Analyst based in Azerbaijan to join the Cyber Defence function of a major Irish airline company. This is a long‑term, 1‑year remote contract, working fully in Irish business hours (09:00–17:30 IST).

Role Overview

You will work closely with the SOC and internal Cyber Defence teams, handling incident investigations, triage, digital forensics, and continuous improvements of detection and response processes. The role involves hands‑on work with SIEM, EDR, SOAR and offensive security tooling.

Key Responsibilities

• Perform incident triage and investigations together with the SOC
• Act as escalation point for security events and coordinate response activities
• Improve SOC playbooks, detection use cases and operational processes
• Validate internal/external security weaknesses using manual and automated techniques
• Document findings with clear risk descriptions and remediation guidance
• Support tabletop exercises and cyber readiness simulations
• Stay updated on emerging threats, attacker techniques and MITRE ATT&CK

Required Experience

• 4–5 years experience in SOC / Incident Response
• Strong hands‑on experience with SIEM, EDR, SOAR (Splunk, CrowdStrike, SentinelOne, etc.)
• Practical knowledge of offensive tools (Nmap, Burp Suite, Metasploit, scripts)
• Experience with digital forensics, event triage and incident handling
• Good English communication skills
• Ability to work Irish business hours

Nice to Have

• Familiarity with MITRE ATT&CK
• Experience with outsourced SOC environments
• Scripting (Python, Bash, PowerShell)

Contract Details

• Remote from Azerbaijan
• 1‑year contract
• Up to 200 EUR/day (B2B)
• Work schedule aligned with Irish business hours
• If you meet the criteria and are interested, please send your CV, daily rate expectation, and years of SOC experience.