> Markdown version of [/jobs/ext/32540-cert-incident-responder](https://www.wearedevelopers.com/jobs/ext/32540-cert-incident-responder). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # CERT Incident Responder - **Company:** Stoïk - **Location:** Paris, France (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Log Analysis, Network Forensics, SentinelOne Expertise - **Published:** May 21, 2026 - **Apply:** https://fr.indeed.com/viewjob?jk=96102cb3dfb86b7e ## About the Role Do you have experience in AI?, * 3+ years of experience in DFIR, or CERT roles * Proven experience leading multiple ransomware incident responses end-to-end * Hands-on proficiency with Velociraptor, KAPE, CrowdStrike Falcon, and/or SentinelOne * Strong log analysis and network forensics skills * Skilled in AI agents usage & tool buildings through AI * Ability to communicate technical findings clearly to non-technical stakeholders * Fluent in English and a native language (Dutch, German, Italian, Spanish, French..) What We're Looking For Beyond technical skills, we're looking for someone who takes ownership under pressure, communicates with clarity and confidence, and has the judgment to make fast decisions in high-stakes situations. You will regularly be the most knowledgeable person in the room during a crisis, and we need you to act like it. ## Description As a CERT Incident Responder at Stoïk, you will own the full lifecycle of cyber incidents for our policyholders from initial triage to post-incident reporting. You will also serve as a technical advisor to our underwriting team and a critical support for our Customer Success Management team or our Sales team, helping translate complex security risk into business-level recommendations., * Lead incident response engagements (ransomware, data breaches, BEC) from containment through remediation * Conduct forensic investigations using KAPE, Velociraptor, and EDR platforms (CrowdStrike Falcon, SentinelOne) * Produce clear, client-facing incident reports for both technical and executive audiences * Provide real-time crisis communication to clients during active incidents * Support underwriters with technical risk assessments on prospects and renewals * Contribute to internal runbooks, playbooks, and tooling improvements * Participate in building tools for our SOC or CERT team ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [WeAreDevelopers LIVE - Web Performance in an AI World](https://www.wearedevelopers.com/videos/2130-wearedevelopers-live-web-performance-in-an-ai-world) - [Progressive Delivery in Kubernetes](https://www.wearedevelopers.com/videos/949-progressive-delivery-in-kubernetes) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [The Velocity Tax: The Hidden Cost of Unintentional Feature Alignment](https://www.wearedevelopers.com/videos/100022-the-velocity-tax-the-hidden-cost-of-unintentional-feature-alignment) - [Leveraging Large Language Models for Legacy Code Translation: Challenges and Solutions](https://www.wearedevelopers.com/videos/1157-leveraging-large-language-models-for-legacy-code-translation-challenges-and-solutions) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)