Incident Responder (German speaking)

Join our team as an Incident Responder, where you will play a crucial role in containing and investigating cyber incidents, supporting systems restoration, and improving recovery processes. You will work closely with client IT teams and managed service providers, document technical work, and utilize cutting-edge AI tools in your investigations. This position offers flexible work options, competitive compensation, and opportunities for continuous learning and professional growth.

Responsibilities

• Durchführung von Eindämmungs- und forensischen Untersuchungen bei Cybervorfällen, einschließlich Ransomware und Geschäfts-E-Mail-Kommunikation.
• Unterstützung bei der Wiederherstellung von Systemen nach Cybervorfällen, einschließlich der Bewertung von Backups und dem Wiederaufbau von Servern.
• Zusammenarbeit mit IT-Teams und Managed Service Providern in verschiedenen technischen Umgebungen.
• Basic experience documenting technical work in tickets, change logs or recovery notes
• Professional working proficiency in German and English for client discussions, written updates and coordination with international response partners

Requirements

• Openness to coaching and feedback, and motivation to develop your security and investigation skills
• 2+ years of hands-on experience in IT support, systems administration, recovery or incident response
• Practical experience using AI tools for technical tasks, such as information extraction, log analysis or agentic workflows
• English - business fluent

German - business fluent

• Strong practical restoration experience, ideally with SMEs or small IT teams
• Hands-on troubleshooting and backup or restore knowledge, with willingness to learn unfamiliar technologies
• Familiarity with threat hunting and using threat intelligence to guide investigations, prioritize suspicious activity and assess indicators of compromise

Preferred

• Experience using SIEM, EDR and forensic tools, such as Windows Defender for Business, Splunk, CrowdStrike, Velociraptor, X-Ways, KAPE, Hayabusa, SOF-ELK or OpenRelik. (These are examples; experience with comparable tools is equally relevant.)