Senior Cyber Response Analyst

Forensic Focus Limited; Köln; Hybrid; EUR 85.000 - 120.000; Vollzeit

Zusammenfassung

Forensic Focus Limited is seeking an experienced DFIR professional to lead threat monitoring, triage and investigation across enterprise environments. You will conduct forensic and malware analysis of drives, memory captures, and network data while coordinating with incident response teams.

The role requires navigating a structured environment and engaging with senior stakeholders, balancing hands-on examination with incident coordination.

Qualifikationen

• Five years' specialised experience in intrusion detection, SIEM monitoring, forensic analysis and incident response.

Aufgaben

• Perform advanced threat monitoring, triage and investigation across enterprise environments.
• Conduct forensic and malware analysis of drives, packet captures and network logs.
• Coordinate findings with response teams and communicate clearly to technical and non-technical audiences.

Ausbildung

GCIA

GCIH

GCFE

GNFA

GREM

OSDA

Blue Team Level 2

Cisco CyberOps Professional

Microsoft Cybersecurity Architect Expert

Jobbeschreibung

The Role

The analyst performs advanced threat monitoring, triage and investigation across enterprise environments, conducting forensic and malware analysis of hard drives, solid-state drives, packet captures and network logs. Findings are coordinated with response teams and communicated clearly to both technical and non-technical audiences.

Skills & Experience

Candidates must hold at least one of: GCIA, GCIH, GCFE, GNFA, GREM, OSDA, Blue Team Level 2, Cisco CyberOps Professional or Microsoft Cybersecurity Architect Expert. A minimum of five years' specialised experience in intrusion detection, SIEM monitoring, forensic analysis and incident response is required, with solid understanding of attacker TTPs.

Who It Suits

This role suits an experienced DFIR professional comfortable operating in a structured, likely government-adjacent environment, who can move between hands-on forensic examination and incident coordination while engaging confidently with varied stakeholders at a senior level.