Incident Response Analyst

About us

bolttech is an international insurtech with a mission to build the world’s leading, technology-enabled ecosystem for protection and insurance. With a full suite of digital and data-driven capabilities, bolttech powers connections between insurers, distributors, and customers to make it easier and more efficient to buy and sell insurance and protection products. A part of Pacific Century Group, bolttech serves customers in multiple markets across North America, Asia and Europe.

In this position you will…

Join bolttech’s Detection and Response Team (DART) and help protect our global environment through a follow-the-sun operating model.

You will:

• Detect, investigate, and respond to cybersecurity incidents across cloud, endpoint, identity, and network environments.
• Lead incidents from detection through containment, eradication, and recovery.
• Develop and improve incident response playbooks, automation, and SOAR workflows.
• Conduct threat hunting, malware analysis, and digital forensics investigations.
• Leverage AI-powered tools to accelerate detection, triage, investigation, and response.
• Partner with global technology and business stakeholders throughout the incident lifecycle.
• Support regulatory requirements including DORA and GDPR.
• Participate in on-call rotations and major incident response activities.

For you to be successful…

We are looking for someone who:

• Has a passion for cybersecurity and incident response.
• Thinks like an attacker and proactively identifies security risks.
• Thrives in fast-paced environments where speed and decisiveness matter.
• Has hands-on experience with modern security operations technologies.
• Is comfortable collaborating across regions, cultures, and time zones.
• Communicates clearly with both technical and non-technical stakeholders.
• Is eager to leverage AI and automation to improve security operations.

You will require the following qualifications and skills

• 3-5+ years of experience in Incident Response, SOC, CSIRT, or Detection & Response environments.
• Hands-on experience with SIEM, EDR/XDR, SOAR, Microsoft 365, and cloud-native security tooling.
• Strong understanding of threat detection, threat hunting, and MITRE ATT&CK.
• Experience with digital forensics and/or malware analysis.
• Scripting or automation experience (Python preferred).
• Strong knowledge of the cybersecurity threat landscape.
• Familiarity with DORA, GDPR, and regulated environments is an advantage.
• Excellent written and verbal English communication skills.

Advantages

• Experience working in a follow-the-sun SOC or CSIRT environment.
• Detection engineering or detection-as-code experience.
• Threat intelligence and advanced threat-hunting experience.
• Familiarity with AI security frameworks such as OWASP Top 10 for LLM Applications, NIST AI RMF, or MITRE ATLAS.

Diversity and Inclusion

At bolttech, we are diverse and inclusive. We value each person's unique skills, background, and identity. We never discriminate on cultural background, religion, sex, gender, gender identity or expression, sexual orientation, age, disability, veteran status, genetic information, marital or family status or any legally protected status. Everyone belongs. And because everyone’s different, we’re also flexible in the ways we work, so each person can bring their best efforts every day.