Senior Cyber Incident Response Analyst

About the Role

The role is based in Bulgaria, and you will be working as part of a global team of cybersecurity professionals. Integrity360 is a leading independent cybersecurity specialist, operating across Europe, Africa, the Caribbean, and North America. The company has a strong focus on innovation, collaboration, and continuous growth, making it an exciting place to work.

What You Will Do

• Respond to cyber incidents and manage the incident response process
• Conduct threat hunting and adversary detection in customer networks
• Perform detailed intrusion analysis, including host and network analysis
• Conduct malware reverse engineering and digital forensics
• Provide Cyber Threat Intelligence services to clients
• Deliver proactive client services, including compromise assessments and tool recommendations
• Evaluate and recommend tools and technologies for incident response
• Work closely with clients to understand their security needs and provide recommendations for improvement
• Develop and maintain a security incident response plan (IRP)
• Collaborate with other teams to ensure effective incident response and management

What We Are Looking For

• Strong understanding of malware, emerging threats, and adversary tactics, techniques, and procedures (TTPs)
• Ability to work directly with customers and demonstrate services delivered in a face-to-face setting
• Experience in incident management and incident communication
• Strong analytical and problem-solving skills
• Ability to think critically and provide advice or recommendations when necessary
• Understanding of ITIL processes and experience working with ITIL frameworks
• Logical thought mindset and experience developing reusable processes and data architectures
• Professional/native Bulgarian and professional English language skills
• Technical knowledge of host intrusion analysis, Windows (Endpoint and Server), Unix, and network intrusion analysis

Nice to Have

• Experience working with security tools for detection, diagnosis, containment, and remediation
• Knowledge of SANS, PCI DSS, ISO 27001, and ISO 20000 frameworks
• Certifications in Security Essentials (GSEC), Hacker Techniques & Incident Handling (GCIH), Host (GCFE/GCFA) & Network (GNFA) Forensics, Malware Analysis (GREM)
• Experience working in a fast-paced, dynamic environment

Benefits and Perks

• Competitive salary and benefits package
• Opportunity to work with a leading independent cybersecurity specialist
• Collaborative and dynamic work environment
• Professional development and training opportunities
• Flexible working hours and remote work options
• Access to cutting-edge security tools and technologies
• Recognition and reward for outstanding performance
• Comprehensive health and wellness programs
• Generous paid time off and holiday allowance

• Make sure you have a strong understanding of malware, emerging threats, and adversary TTPs, as this is a critical requirement for the role.
• Highlight your experience in incident management and incident communication, and be prepared to provide examples of your experience.
• Emphasize your ability to work directly with customers and demonstrate services delivered in a face-to-face setting.
• Be prepared to discuss your analytical and problem-solving skills, and how you think critically to provide advice or recommendations.
• Show your passion for cybersecurity and your willingness to learn and develop your skills in a fast-paced, dynamic environment.
• If you have experience working with security tools, highlight this in your application, as it is a desirable skill for the role.
• Be prepared to discuss your knowledge of ITIL processes and experience working with ITIL frameworks, as this is an important aspect of the role.