Incident Response Lead

What you'll do

• Lead incident response engagements to guide customers through forensic investigations and containment of security incidents.
• Investigate data breaches by analyzing Windows, Linux, and Mac OS X systems using forensics tools.
• Analyze firewall, web, and database logs to identify evidence of malicious activity and indicators of compromise.
• Provide technical case reports for threat researchers and tailored risk management guidance for business customers.
• Evaluate customer security programs and infrastructure to recommend improvements and long-term remediation strategies.
• Track emerging security practices to build internal processes and improve company products.
• Monitor German and EU regulatory environments to ensure compliance with local security and privacy expectations.
• Build and maintain trusted relationships with local customers and partners to grow the regional presence.

What we're looking for

• Fluency in German and English at a minimum C1 level.
• Bachelor’s Degree in Computer Science, Information Security, Engineering, or a related field.
• 5+ years of experience in incident response or digital forensics.
• Proficiency with forensic tools such as Velociraptor, Axiom, FTK, SIFT, Volatility, ELK, WireShark, Plaso, and Skadi.
• Experience with EDR tools like CrowdStrike Falcon, Carbon Black, or Sentinel One.
• Knowledge of TCP/IP protocols, network assessment, and security frameworks such as NIST, HIPAA, and PCI.
• Familiarity with GDPR and German/EU regulatory considerations regarding data privacy and incident handling.
• Experience deploying tools to AWS and familiarity with cloud-based platforms for assessment.