German Senior Digital Forensics and Incident Response (DFIR) Consultant

Stack

Responsibilities

• ▹Engage on behalf of CYPFER in incident response tasks, interacting with insurance partners, legal counsel, incident response units, and client teams
• ▹Utilize standard tools and methodologies to collect forensic artifacts and images from affected systems
• ▹Perform Windows/Unix/Linux forensics and triage, and network forensics to assess compromise
• ▹Apply skilled malware analysis tools and methodologies
• ▹Apply mitigation strategies to remediate identified threats
• ▹Analyze triage collections/artifacts for IOCs and malicious activity
• ▹Review logs from host systems and appliances to identify suspicious activity
• ▹Collect forensic disk and memory images from physical and virtual endpoints and servers
• ▹Perform forensic analysis of physical systems, virtual machines, and network data
• ▹Conduct threat research based on IOCs collected during investigations
• ▹Understand obfuscation techniques and lateral movement strategies used by threat actors
• ▹Collaborate within and across teams, communicating effectively with client managers and executives
• ▹Write detailed reports and summarize findings clearly and concisely
• ▹Participate in a rotating on-call schedule, including weekends and outside normal business hours

Requirements

• ▹Bilingual English and German
• ▹5+ years of experience in digital forensics, incident response, or a similar role
• ▹Strong knowledge of Windows and Unix/Linux operating systems
• ▹Expertise in threat hunting, network forensics, and EDR/EPP technologies
• ▹Skilled in forensic acquisition and analysis of physical and virtual systems
• ▹Advanced understanding of networking, routing, and firewall operations
• ▹Working knowledge of storage technologies (RAID, NAS, SAN, Fiber Channel, iSCSI, NFS)
• ▹Ability to analyze and interpret logs from various sources
• ▹Familiarity with SIEM and SOAR solutions
• ▹Willingness to travel on short notice, up to 50%, to client sites

Soft skills

About the company

CYPFER is a leading first-responder cybersecurity organization enabling clients to return to business rapidly following a cyber-attack. It is a global market leader in ransomware post-breach remediation, collaborating with prominent insurance carriers, law firms, and Fortune 1000 businesses.