Senior Digital Forensics and Incident Response Consultant, German

September 21

Apply Now

Receive Emails with Similar Jobs

CYPFER

WebsiteLinkedInAll Job Openings

Cybersecurity

CYPFER is a global leader in cyber-attack incident response and ransomware post-breach recovery. The company provides a comprehensive range of cybersecurity services, including incident response, ransomware recovery, digital forensics, and cyber risk management. It offers services such as business email compromise resolution, cloud and web application investigations, dark web monitoring, and advisory. CYPFER is known for its rapid deployment of in-house specialists, providing 24/7 global support to ensure businesses stay secure and resilient against cyber threats. With a focus on integrating seamlessly with clients' operations, CYPFER is dedicated to offering unmatched care and commitment to cybersecurity.

51 - 200 employees

🔒 Cybersecurity

📋 Description

• Lead complex digital forensics and incident response (DFIR) investigations • Conduct forensic analyses across Windows, Unix/Linux, and network environments • Develop strategic incident response plans and remediation recommendations • Engage with insurance partners, legal counsel, incident response units, client executives, and technical teams on behalf of CYPFER • Use standard tools and methodologies to collect forensic artifacts and images from affected systems • Perform forensic acquisition of physical and virtual systems, including disk and memory imaging • Triage systems and perform network forensics to assess compromise • Analyze triage collections/artifacts for indicators of compromise (IOCs) and potentially malicious activity • Review logs from host systems and appliances to identify suspicious activities • Perform malware analysis and limited threat research based on collected IOCs • Apply mitigation strategies and remediation concepts to identified threats • Correlate events and build timelines of events • Maintain current knowledge on emerging threats and vulnerabilities • Write detailed reports and summarize findings clearly and concisely for client managers and executives • Participate in a rotating on-call schedule and be available to work weekends and outside normal business hours as needed • Travel on short notice to client sites (up to 50%) for deployments typically 1-2 weeks

🎯 Requirements

• 5+ years of experience in digital forensics, incident response, or a similar role • Fluency in English and German (fully bilingual) • Strong knowledge of Windows and Unix/Linux operating systems • Expertise in threat hunting, network forensics, and EDR / EPP technologies • Skilled in forensic acquisition and analysis of physical and virtual systems • Advanced understanding of networking, routing, and firewall operations • Working knowledge of storage technologies such as RAID, NAS, SAN, Fiber Channel, iSCSI, and NFS • Ability to analyze and interpret logs from various sources • Familiarity with SIEM and SOAR solutions • Skilled in malware analysis tools and methodologies • Understanding of incident lifecycle, cyber-kill-chain, and exfiltration techniques • Ability to correlate events and build timelines of events • Experience with business email compromise (BEC) cases and investigation techniques • Ability to perform threat research and analyze indicators of compromise (IOCs) • Ability to collect forensic disk and memory images from physical and virtual endpoints and servers • Willingness and ability to travel on short notice up to 50% for deployments typically 1-2 weeks • Willingness to participate in a rotating on-call schedule, including weekends and outside normal business hours • Strong customer service, consulting, relationship management, and communication skills • Ability to work independently and produce high-quality deliverables with minimal supervision • Maintain detailed notes and draft updates and reports as required • Preferred: industry certifications such as MCFE, ENCE, ACE, GCFA, GCIH, GNFA, GCFE or similar • Preferred: experience with e-discovery tools and collecting/analyzing mobile device data