Senior Cyber Incident Response Investigator (all genders)
Role details
Job location
Tech stack
Job description
Join our international network of Security professionals. You will work with innovative technologies on exciting projects, developing solutions to manage data securely. In particular, you will be able to:
-
Investigate and respond to cyber incidents You analyze security intrusions end-to-end to determine root causes, scope, and impact, using EDR solutions, SIEM data, and threat intelligence sources.
-
Perform forensics and malware analysis You conduct host, network, and log forensics as well as static and dynamic malware analysis to support effective cyber incident response across platforms.
-
Drive threat hunting and attacker analysis You proactively hunt for advanced threats, map attacker behavior to established TTP frameworks (e.g., MITRE ATT&CK), and develop high-confidence indicators of compromise. You use adversary insights to strengthen detections, improve response playbooks, and reduce dwell time.
-
Strengthen security through remediation and testing You develop and implement remediation plans and validate incident readiness through simulations and tabletop exercises.
-
Work closely with clients in a project environment You collaborate directly with clients, including on-site work when required, and remain flexible regarding travel depending on business and project needs., * Flexible working models
-
Experienced mentors and project leaders who'll guide you along the way
-
Extensive training and development offers
-
Interesting career opportunities
-
Workplace culture that supports diversity & inclusion
Requirements
Do you have experience in Malware analysis?, * Degree in Computer Science, Computer Engineering, Cybersecurity or related fields
- Minimum of 3 years of experience in cyber security, especially cyber defense and resilience, functional and technical experience required
- Solid hands-on experience in incident response, digital forensics and security operations (e.g. EDR, SIEM) with the ability to identify, analyze and respond to security incidents across different environments
- Good understanding of network traffic analysis and common Cybersecurity tools to detect and investigate threats
- Certifications such as BTL1, CISM, CISSP or SANS GIAC are a plus, as well as initial experience working with clients in a consulting environment
- Your German and English skills are excellent, both spoken and written