Cyber Threat Analyst – Mid/Senior

About the role

Bank of Georgia’s Information Security Department is seeking a Cyber Threat Analyst to join its Security Operations Center. The role focuses on detecting, analysing and responding to cyber threats across on‑premise and cloud environments.

Key responsibilities

• Monitor infrastructure for threats using EDR, SIEM and other security tools.
• Investigate and respond to alerts from Windows and Linux systems.
• Deploy, configure and maintain cybersecurity solutions such as IPS, WAF and proxies.
• Develop and continuously improve detection rules and test cases, leveraging the MITRE ATT&CK framework.
• Participate in Purple‑Team exercises to enhance detection and response capabilities.

Required profile

• Minimum 1 year of experience in a similar security analyst role.
• Strong investigative, analytical and problem‑solving abilities.
• Proficiency in English and ability to work independently.

Required skills

• Windows and Linux operating system architecture and security.
• Experience with logging, configuration and monitoring tools on Windows/Linux.
• Hands‑on use of EDR, SIEM, Azure, AWS, GCP, IPS, WAF and proxy solutions.
• Knowledge of query languages for data search within security tools.
• Familiarity with the MITRE ATT&CK framework.
• Scripting or programming in Bash, Python or PowerShell (preferred).
• Exposure to forensic tools and penetration testing (preferred).

What we offer

• Challenging and varied work in a supportive environment.
• Opportunities for professional growth and annual certification.