Senior Digital Forensics and Incident Response Consultant, German

Emploi pas sur LinkedIn

🕒 il y a 11 mois

🇳🇱 Pays-Bas – Télétravail

⏰ Temps Plein

🟠 Senior

💼 Consultant

👻 Score fantôme 46%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

CYPFER

Site WebLinkedInTous les Emplois

51 - 200 employés

💼 Conseil

📦 Logistique

🔒 Cybersecurity

Consulting • Logistics • Cybersecurity

CYPFER est un leader mondial dans les interventions en cas d'incidents de cyberattaques et la récupération post-intrusion de ransomware. L'entreprise propose une gamme complète de services de cybersécurité, incluant la réponse aux incidents, la récupération de ransomware, la criminalistique numérique et la gestion des risques cyber. Elle offre des services tels que la résolution de compromissions des e-mails professionnels, les enquêtes sur les applications cloud et web, la surveillance du dark web et le conseil. CYPFER est réputée pour son déploiement rapide de spécialistes internes, offrant un support mondial 24/7 pour assurer la sécurité et la résilience des entreprises face aux menaces cybernétiques. Avec une approche intégrée aux opérations des clients, CYPFER s'engage à offrir des soins et un engagement inégalés envers la cybersécurité.

Description

• Lead complex digital forensics and incident response (DFIR) investigations • Conduct forensic analyses across Windows, Unix/Linux, and network environments • Develop strategic incident response plans and remediation recommendations • Engage with insurance partners, legal counsel, incident response units, client executives, and technical teams on behalf of CYPFER • Use standard tools and methodologies to collect forensic artifacts and images from affected systems • Perform forensic acquisition of physical and virtual systems, including disk and memory imaging • Triage systems and perform network forensics to assess compromise • Analyze triage collections/artifacts for indicators of compromise (IOCs) and potentially malicious activity • Review logs from host systems and appliances to identify suspicious activities • Perform malware analysis and limited threat research based on collected IOCs • Apply mitigation strategies and remediation concepts to identified threats • Correlate events and build timelines of events • Maintain current knowledge on emerging threats and vulnerabilities • Write detailed reports and summarize findings clearly and concisely for client managers and executives • Participate in a rotating on-call schedule and be available to work weekends and outside normal business hours as needed • Travel on short notice to client sites (up to 50%) for deployments typically 1-2 weeks

🎯 Exigences

• 5+ years of experience in digital forensics, incident response, or a similar role • Fluency in English and German (fully bilingual) • Strong knowledge of Windows and Unix/Linux operating systems • Expertise in threat hunting, network forensics, and EDR / EPP technologies • Skilled in forensic acquisition and analysis of physical and virtual systems • Advanced understanding of networking, routing, and firewall operations • Working knowledge of storage technologies such as RAID, NAS, SAN, Fiber Channel, iSCSI, and NFS • Ability to analyze and interpret logs from various sources • Familiarity with SIEM and SOAR solutions • Skilled in malware analysis tools and methodologies • Understanding of incident lifecycle, cyber-kill-chain, and exfiltration techniques • Ability to correlate events and build timelines of events • Experience with business email compromise (BEC) cases and investigation techniques • Ability to perform threat research and analyze indicators of compromise (IOCs) • Ability to collect forensic disk and memory images from physical and virtual endpoints and servers • Willingness and ability to travel on short notice up to 50% for deployments typically 1-2 weeks • Willingness to participate in a rotating on-call schedule, including weekends and outside normal business hours • Strong customer service, consulting, relationship management, and communication skills • Ability to work independently and produce high-quality deliverables with minimal supervision • Maintain detailed notes and draft updates and reports as required • Preferred: industry certifications such as MCFE, ENCE, ACE, GCFA, GCIH, GNFA, GCFE or similar • Preferred: experience with e-discovery tools and collecting/analyzing mobile device data