Cyber Incident Response Analyst

THIS IS A B2B CONTRACT FOR CANDIDATES WHO ARE BASED IN EUROPE

Codertal is looking for an experienced Cyber Incident Response Analyst to join our team and support a major international player in the airline industry. This is a hands‑on, high‑impact role within a modern Cyber Defence environment that blends outsourced SOC services with an internal CSIRT capability.

The ideal candidate is a proactive, technically strong incident responder who thrives in fast‑moving environments, understands attacker behaviour, and can elevate detection and response processes through automation, integration and continuous improvement.

Your Role

As a Cyber Incident Response Analyst, you will work closely with the SOC, Cyber Defence and Cyber Engineering teams to ensure high‑quality incident investigations, rapid response, and continuous enhancement of monitoring coverage and playbooks. You will also simulate attacker techniques to validate and strengthen cyber controls across critical infrastructure.

Key Responsibilities

• Incident triage & investigation alongside the SOC, ensuring accurate analysis, forensics and documentation.
• Escalation point for SOC alerts, coordinating with outsourced vendors and internal Cyber/IT teams.
• Operational collaboration with SOC on daily monitoring, response processes and playbook improvements.
• Process & system integration to enhance service quality and responsiveness.
• Maintain high‑quality incident records, audit trails, lessons learned and continuous improvement actions.
• Identify and validate security weaknesses using manual techniques and offensive tooling.
• Document findings with clear risk descriptions, reproduction steps, business/technical impact and remediation guidance.
• Participate in on‑call rotations for major cyber events.
• Work with SOC and Threat Management services on daily/weekly/monthly cadences, ensuring visibility of incidents and KPIs.
• Improve real‑time detection and response using SIEM, EDR, SOAR and automation.
• Develop and maintain cyber testing playbooks, SOPs, checklists.

Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

• Support tabletop exercises and simulation tests.
• Stay current with emerging threats, vulnerabilities and offensive techniques relevant to the technology stack.

Initial Success Factors

• High‑quality, complete incident investigations
• Measurable improvements in SOC use cases and playbooks
• Establishing a benchmark of current attack exposure across critical infrastructure

Required Qualifications & Experience

• 8+ years in cybersecurity and/or IT
• 4+ years in SOC, Incident Response or Offensive Security
• Proven experience in investigation, digital forensics, triage and response
• Hands‑on experience with offensive tools (Burp Suite, Nmap, Metasploit, custom scripts)
• Relevant certifications: GIAC, CISSP, OSCP, CEH or similar

Essential Skills

• Comfortable leading low‑medium severity incidents

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

• Proactive, independent thinker with strong communication skills
• Hands‑on proficiency with SIEM, Threat Intelligence, SOAR, EDR (CrowdStrike, ZeroFox, Splunk or equivalent)
• Working knowledge of Python, Bash or PowerShell
• Ability to improve operational processes and playbooks
• Ability to translate threat intelligence and incident learnings into actionable requirements

Desirable Skills

• Familiarity with MITRE ATT&CK
• Experience building dashboards for service metrics
• Experience with outsourced SOC models
• Scripting for tool integration and playbook automation

What We Offer

• Competitive daily rate
• B2B contract
• Work fully remote
• Long‑term career growth opportunities
• Exposure to a highly mature cyber environment in the aviation industry
• Work with a passionate, collaborative team of cybersecurity professionals
• Travel benefits with multiple international airlines