Full-Time CSIRT Analyst - Incident Response Team

• Analyze technical artifacts (host forensics, network forensics, log analysis, and malware triage) to identify the attacker's Tactics, Techniques and Procedures (TTPs), and Indicators of Compromise (IOCs).
• Recommend actions for containment and remediation of the incident.
• Provide remediation recommendations for cleaning up and hardening the systems under attack in an investigation report.
• Monitor for new vulnerabilities, technologies, and attack methods on IT components, and develop investigative tools.

• Support a hospital targeted with ransomware.
• Intervene in the crisis unit of an industrial company.
• Carry out a digital forensics investigation to understand the origin of an attack and identify the attacker's TTPs.
• Rebuild a compromised information system with a CISO and the IT department.

• Reactivity and ability to handle difficult situations.
• Strong communication skills to explain situations and procedures.
• Daily monitoring of cybersecurity news.
• Passion for security and projects with added value.

• German (C1)
• English (full professional proficiency)

What is the last date for applying to the job?

Which countries are accepted for this remote job?