Staff Cybersecurity Specialist – Incident Response

This is a fully remote position, open to applicants in Germany.

📋 Description

• Serve as a primary technical authority within Security Operations, taking charge of strategic enhancement initiatives.

• Oversee cyber incident response efforts from initial reporting to recovery.

• Function as the technical lead during investigations, coordinating response efforts and driving results.

• Conduct forensic examinations to ascertain the scope of attacks, their root causes, and overall impact.

• Assist clients during ongoing cybersecurity incidents by providing clear and effective technical guidance.

• Support Managed Detection and Response (MDR) and Security Operations tasks when not actively engaged in incident response cases.

• Collaborate with internal and external parties, including management, legal representatives, law enforcement, and regulatory bodies as needed.

• Mentor junior and mid-level responders, helping to enhance the technical proficiency of the team.

• Contribute to the ongoing refinement of incident response methodologies, playbooks, and operational processes.

• Report directly to the Director of Security Operations.

⛳️ Requirements

• Over 6 years of experience in cybersecurity, with substantial hands-on expertise in Incident Response, Digital Forensics, Security Operations, or related fields.

• Demonstrated ability to independently oversee and manage cybersecurity incidents from start to finish.

• Comprehensive understanding of Windows, Linux, and macOS operating systems, file systems, security architectures, and attack surfaces.

• Strong knowledge of enterprise infrastructure, networking, and principles of network security.

• Experience with Endpoint Detection and Response (EDR) platforms such as CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, or similar technologies.

• Familiarity with cloud environments and security concepts across Microsoft 365, Azure, AWS, or Google Cloud.

• Excellent investigative and analytical abilities, with experience in collecting and analyzing evidence during security incidents.

• Capable of conveying technical findings clearly to both technical and non-technical audiences.

• Background in mentoring or coaching fellow security professionals.

• Strong sense of ownership, collaboration, and communication skills.

• Proficiency in English (the internal working language).

• C2 proficiency in German (necessary for client communication).

• Experience in developing scripts, tools, or automations to aid investigations and response activities.

• Experience in conducting technical security research.

• Knowledge of threat actors and their tactics, techniques, and procedures (TTPs).

• Experience in a CERT, CSIRT, MDR, or Digital Forensics and Incident Response (DFIR) environment.

🏝️ Benefits

• A remote-friendly culture with quarterly meetups and annual company retreats in locations such as Spain, Portugal, and Italy.

• Thursday social events to foster connections.

• A generous time-off policy, which includes wellness and volunteering days.

• A meaningful mission focused on protecting organizations across Europe from genuine cyber threats.

• The chance to collaborate with top-tier professionals from national CERTs, intelligence agencies, and leading technology sectors.

• Opportunities to engage in internal research initiatives, Bug Bounty Fridays, Capture The Flag events, and other technical projects.