CSIRT / DFIR Lead - Remote

Overview

As a CSIRT / DFIR Lead at NVISO, you will support the evolution of the CSIRT team, focusing on incident response and forensic engagements while collaborating with the Threat Intelligence team.

In Short

• Perform host forensics, network forensics, and log analysis.
• Analyze and correlate log data and malicious software behavior.
• Support improvement projects related to automation in digital forensics.
• Conduct threat hunting engagements within customer environments.
• Assist in various threat intelligence services.
• Create Statements of Work and project plans.
• Engage with customers to ensure fruitful partnerships.
• Coach CSIRT team members in their daily activities.
• Perform technical account management for strategic clients.
• Support in Business Development tasks.

Requirements

• You are eligible for NATO Clearance.
• A minimum of 6 years of experience within DFIR and at least 3 years in People Management.
• Strong knowledge of Intrusion Analysis, Incident Response, and Forensics.
• Up to date on the latest cyber security threats and TTPs.
• Excellent analytical and problem-solving skills.
• Effective communication and interpersonal skills.

Benefits

• A training budget of 10.000€ and 10 days every 2 years.
• Working and learning from top professionals in the cyber security industry.
• Flexible working hours and home office possibilities.
• Business Bike Leasing.
• BahnCard 50 1st class + public transfer ticket.
• 30 holidays.
• Cool offices in Frankfurt, Munich, and Vienna.