Full-Time CSIRT Analyst - Incident Response Team

• Analyzing technical artifacts (host forensics, network forensics, log analysis, and malware triage) to identify the attacker's Tactics, Techniques and Procedures (TTPs), Indicators of Compromise (IOCs).
• Recommending actions for containment and remediation of the incident.
• Providing remediation recommendations in an investigation report for cleaning up and hardening the systems under attack.
• Monitoring for new vulnerabilities, technologies, and attack methods on IT components, and develop investigative tools.

• Supporting a hospital targeted with ransomware.
• Intervening in the crisis unit of an industrial company.
• Carrying out a digital forensics investigation to understand the origin of an attack and identify the attacker's TTPs.
• Rebuilding a compromised information system together with a CISO and the IT department.

• Reacts quickly and calmly in difficult situations.
• Educates others on situations, procedures for blocking attacks, and prevention methods.
• Keeps abreast of the latest cybersecurity news through daily monitoring.
• Passionate about security and seeking impactful projects.

• German (C1)
• English (full professional proficiency)

What is the last date for applying to the job?

Which countries are accepted for this remote job?