[RTIR]SLA based on keyword

So, basically we have an installation of RT 4.4.2 configured with RTIR.
Incident reports are automatically generated into RT from an alert management application called 411(GitHub - etsy/411: An Alert Management Web Application).
All works well and the incident reports are created each time. Now we want to implement different SLA levels based on a keyword present in the incident report subject.
So basically the question is:
Can you set different SLA levels for incident reports without using different queues, using REST API to open the ticket?
Thank you!