Security Incident Responder

REVELSI is a global cybersecurity, AI, software, and infrastructure services organization. We work with worldwide enterprises to design, build, secure, and operate the systems their business depends on.

Our top priority is safeguarding the fast-evolving global infrastructures and technologies.

We integrate cybersecurity into infrastructure development and operational processes, alongside software development, to proactively stay at the leading edge of industry advancements.

REVELSI TEAM

At REVELSI , we combine deep technical expertise with a Silicon Valley-inspired mindset: agile, innovative, and collaborative.

We’re a collaborative team that values performance and a positive work environment. We are committed to delivering high-quality results, supporting each other, and fostering a professional and friendly atmosphere.

We’re looking for a team player with specialized skills and ready to make an impact alongside experts in cybersecurity, network design, architecture, AI & software development, and IT management.

You’ll collaborate with experienced IT (Security) professionals, expand your skills, and enjoy the journey in a team that embraces challenges with energy and enthusiasm .

YOUR DAY-TO-DAY

• Constantly monitor security tools to identify security incidents and anomalies.
• Conduct in-depth analysis of security events to determine the scope, severity, and potential impact of incidents.
• Develop and execute incident response plans to address security threats promptly and effectively.
• Coordinate with relevant teams to contain and mitigate security incidents.
• Conduct post-incident analysis to identify the root cause and implement measures to prevent future occurrences.
• Document incident details, actions taken, and resolutions for future reference and analysis.
• Generate detailed incident reports for management and stakeholders, outlining incident details, impact, and remediation steps.
• Collaborate with cross-functional teams to ensure a cohesive response to security incidents.
• Communicate effectively with internal stakeholders and external partners regarding incident updates and resolution progress.
• Work according to established security procedures, incident response plan, and compliance requirements.
• Maintain clear documentation and facilitate smooth transition during shift handovers.
• Providing mentorship and guidance in incident response procedures and best practices to new SOC analysts.
• Proficiency in conducting advanced log queries for incident investigations.
• Create monitoring dashboards, detections to increase the protection coverage.
• Using SIEMs, like Sentinel, Splunk to efficiently respond to incidents and proactively mitigate any security risks.
• Ensure adherence to established procedures, templates and workflows by colleague analysts, fostering a cohesive and consistent approach to incident handling.

YOUR PROFILE

• Bachelor’s Degree, or an equivalent combination of formal education and experience in technical field. A Master's degree is often preferred.
• Minimum one and a half (1.5) year of experience in cybersecurity roles is required with a focus on incident response.
• Minimum one (1) year of experience with a ticketing system platform.
• Must have strong analytical and organizational skills.
• KQL and Splunk query language experience is required.
• Excellent English skills, especially in writing and comprehension is mandatory.
• Experience in conducting post-incident analysis and implementing security measures.
• Relevant certifications (e.g., Certified Incident Handler (GCIH), AZ-900, Security+, CyberOps Associate, CCNA, CySA+) are a plus.
• Problem solving with keen attention to detail.
• Proactive mindset and a curiosity-driven approach to challenges.
• Cybersecurity attacks and defense techniques.
• Cybersecurity endpoint protection solutions.
• Good understanding of networking principles and cybersecurity technologies.
• Deep understanding of cybersecurity kill chain and principles (PICERL).
• In-depth knowledge of various cybersecurity attack types and defense strategies.
• Understanding of networking protocols, traffic analysis, and packet capture.
• Scripting and programming languages (e.g., Python, PowerShell).
• Malware analysis and forensic tools.
• YARA Rules for malware recognition is a nice to have.
• Experience with cybersecurity cloud technologies is nice to have.
• Proficiency in using security tools such as SIEM system, IDS/IPS, EDR solutions, and other relevant security technologies is a nice to have.
• Proficiency in working according to established procedures and workflows.
• Open-minded and collaborative communication skills.
• Willing to work on a rotating schedule between 10:00 – 00:00, including Day Shift (10:00 – 19:00) and US Business Hours Shift (13:00 – 22:00) in a hybrid work model (4 days from the office, 1 day remote), as well as a Late Shift (15:00 – 00:00) in a fully remote work model.
• Available for working on-call.

WE VALUE OUR EMPLOYEES

At REVELSI , we create an environment that supports your well-being, growth, and work-life balance:

• Private healthcare & medical insurance
• Private dental services
• Meal vouchers
• Referral bonus program
• Learning & development opportunities
• Team buildings & events
• Pizza day and free drinks at the office
• Seasonal gifts (Christmas / Easter)
• 21 days PTO, increasing up to 25 based on seniority

Ready to Join Us?

Click “Apply” and let’s get started!

Every day is an opportunity to grow and go beyond our limits! We embrace challenges and succeed together as a team—because great things happen when we collaborate.

Equal Opportunity Employment : REVELSI is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations, and ordinances.