Senior Incident Response Manager – Remote, Berlin

This is a fully remote position, open to applicants in Germany.

📋 Description

• Lead, coordinate, and manage incident response engagements — starting from the initial alert and intake call all the way to the final report.

• Conduct rapid analysis and containment of IT security incidents (Rapid Response) across system, network, and application levels by advising clients and their service providers.

• Create and implement remediation strategies to mitigate damage and restore affected systems.

• Generate reports, including comprehensive forensic final reports.

• Facilitate communication and actions between insurers, policyholders, and their IT service providers.

• Document and process incidents for forensic evidence preservation and root cause analysis.

• Enhance incident response procedures and playbooks to continually improve responsiveness.

• Perform post-incident evaluations (lessons learned) and devise preventive strategies.

• Collaborate closely with internal IT teams, business units, and external partners as part of the incident management workflow.

• Jointly expand and maintain the existing incident response toolkit with the Incident Response Management team, further increasing automation and utilizing AI.

⛳️ Requirements

• A minimum of 5 years of relevant experience in incident response, cyber defense, blue team operations, or IT forensics.

• Extensive hands-on experience in rapid analysis, containment, and remediation of cybersecurity incidents.

• Strong knowledge of current attack methods (e.g., ransomware, phishing, APTs) and defensive strategies.

• Significant experience in IT forensics, including malware analysis.

• Solid understanding of network technologies, operating systems (Windows, Linux), and cloud platforms (M365, AWS, Azure, Google Cloud).

• Capability to act decisively and maintain structure under high-pressure situations.

• Exceptional communication skills, particularly in conveying complex issues to management (C-level), IT teams/service providers, and non-technical personnel.

• Experience advising clients post-IT security incidents and developing and enhancing IT security strategies.

• Proficiency in German (C1 or native) and strong English skills (minimum B-level) are mandatory.

🏝️ Benefits

• Remote-first: work from anywhere in Germany as long as you have a stable, fast internet connection and can ensure data protection and IT security.

• Collaborate with great colleagues who bring a wealth of experience to the team.

• Participate in regular team events.

• Benefit from continuous development through our learning culture — with a personal learning and conference budget, access to books, online courses, regular workshops, and cross-functional sessions with the entire team.

• Enjoy working with a fantastic team in our centrally located office in the heart of Kreuzberg.

• Receive attractive additional benefits — including a discounted Deutschlandticket for the Berlin office and a €50 monthly meal allowance.