(Senior) Incident Response Consultant (f/m/d)

The Job

Does that get you up in the morning?

• Carrying out digital forensic investigations as part of interdisciplinary incident response projects
• Initiation of remediation measures to mitigate risks and contain potential damage in security incidents
• Derivation of customized measures to increase the cyber resilience of affected customers
• Documentation of investigation results and public presentation to customers

Skills

What we’re looking for^*

• Completed, relevant technical training with at least 5 years of experience in the SOC or Incident Response (DFIR) area
• Experience with:
  • Windows and Linux forensics
  • File system, storage and network forensics.
  • Thor log analysis
  • Current IR tools, e.g. Elastic, Plaso, Timesketch, Velociraptor, Thor
  • Knowledge of common SIEM solutions
  • Experience in the use of EDR tools for threat hunting purposes.
  • Linux (CLI) and scripting
• Experience with advanced persistent threats and their TTPs (especially lateral movement)
• Support of ransomware victims
• Remediation consulting, planning & execution
• Willingness to travel
• Willingness to participate in on-call duties
• German language skills at B2 level and English language skills at C1 level

*Courage to leave a gap: You don’t meet our requirements completely? We are still looking forward to your application!