> Markdown version of [/jobs/ext/3101265-incident-responder](https://www.wearedevelopers.com/jobs/ext/3101265-incident-responder). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Incident Responder

- **Company:** Baobab Risk Solutions
- **Location:** Berlin, Germany (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Backup Devices, Information Extraction, Log Analysis, Security Information and Event Management, Virtualization Technology, Forensic Toolkit, Break Fix, Cybercrime, Splunk
- **Published:** September 27, 2026
- **Apply:** https://startup.jobs/incident-responder-german-speaking-m-f-d-baobab-insurance-gmbh-compan-10204854

## About the Role

* Professional working proficiency in German and English for client discussions, written updates and coordination with international response partners.
 * 2+ years of hands-on experience in IT support, systems administration, recovery or incident response.
 * Experience using SIEM, EDR and forensic tools, such as Windows Defender for Business, Splunk, CrowdStrike, Velociraptor, X-Ways, KAPE, Hayabusa, SOF-ELK or OpenRelik. (These are examples; experience with comparable tools is equally relevant.)
 * Basic experience documenting technical work in tickets, change logs or recovery notes.
 * Practical experience using AI tools for technical tasks, such as information extraction, log analysis or agentic workflows.
 * Openness to coaching and feedback, and motivation to develop your security and investigation skills.

Languages

 * German - business fluent
 * English - business fluent

Requirements that give you an edge

 * Strong practical restoration experience, ideally with SMEs or small IT teams.
 * Hands-on troubleshooting and backup or restore knowledge, with willingness to learn unfamiliar technologies.
 * Familiarity with threat hunting and using threat intelligence to guide investigations, prioritize suspicious activity and assess indicators of compromise.

## Description

* Execute containment and forensic investigation of ransomware, business email compromise and other incidents: preserve evidence, analyse host and identity logs, and develop findings with specialist guidance.
 * Support systems restoration after cyber incidents: assess backups, rebuild servers and endpoints, resolve dependencies and validate services before returning them to use.
 * Work with client IT teams and managed service providers across Windows, Active Directory, Microsoft 365, virtualisation and backup environments.
 * Document technical work and communicate progress, uncertainties and blockers, escalating risks to the lead.
 * Put cutting-edge AI tools to work in investigations, recovery and automation. Experiment with new approaches, validate results and help shape how the team adopts them, while protecting incident data.
 * Improve recovery checklists, scripts and playbooks by sharing lessons from casework.


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [Data Mining Accessibility](https://www.wearedevelopers.com/videos/802-data-mining-accessibility)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [Fast, Confident, and Wrong: When AI Fails at Accessibility](https://www.wearedevelopers.com/videos/100030-fast-confident-and-wrong-when-ai-fails-at-accessibility)

## Related Articles

- [Finding Jobs in Germany](https://www.wearedevelopers.com/magazine/375-finding-jobs-in-germany)
- [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies)
- [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)