Security & IR Analyst

We’re looking for an Automation Security & IR Analyst who’s eager to help shape and strengthen our SOC and Incident Response capabilities. You’ll play a key role in building a dynamic and evolving security environment, driving efforts to automate alert handling and streamline incident response. If you’re passionate about cybersecurity, automation, and creative problem-solving, we’d love to hear from you.

About Us

Hi. We are esh. A banking technology group with a goal to take the world of finance and march it to the 21st century by offering a technology banking solution that incorporates the efficiency of an automated, cloud-based banking operating system platform, enabling to dramatically reduce costs, time constraints and create a better financial environment between the bank and its customers.

In a reality where economic transactions are performed automatically and machine learning keeps developing and challenging traditional models, a new banking platform creates an alternative to outdated core systems used in banks today, and enables for the first time, a complete end to end platform under one modular system. We are creating not only a revolutionary technological change, but also a change in perception for all of us.

Responsibilities

• Develop and implement automation workflows to enhance alert investigation and response efficiency.
• Investigate and respond to security alerts, ensuring timely and effective resolution of incidents.
• Apply creative, out-of-the-box thinking to solve complex security challenges and strengthen SOC and IR capabilities.
• Handle cyber incidents, including forensic analysis, root cause analysis (RCA), containment, mitigation, and lessons learned.
• Work closely with DevOps and IT teams to resolve security issues and promote best practices.
• Contribute to the growth and maturity of a dynamic SOC team.
• Participate in on-call rotations for incident response outside of regular working hours.
  
  

• 5+ years of experience in a SOC/IR team or a similar security role.
• Hands-on experience in threat hunting and incident response in cloud environments (AWS) and SaaS platforms (Okta, Google Workspace, GitHub, etc.).
• Experience with security automation tools (e.g., Torq, Cortex XSOAR, Splunk SOAR) is an advantage.
• Hands-on experience with SIEM technologies such as Splunk or Coralogix.
  
  

• Strong knowledge of security technologies such as XDR, CSPM, WAF, etc.
• Solid understanding of cybersecurity principles, including threat detection, incident response, and trending cyberattacks.
• Familiarity with common cloud and SaaS attack vectors and misconfigurations.
• Excellent communication skills and fluency in English, both spoken and written, with a positive and collaborative attitude.
  
  

• Experience writing and executing incident response playbooks and procedures.