(Senior) Incident Responder

Forensic Focus Limited; Aachen; Hybrid; EUR 85.000 - 110.000; Vollzeit

Zusammenfassung

Forensic Focus Limited is seeking an experienced incident responder to analyse and triage security incidents, perform root-cause analysis, and assess impacts across Windows, Linux, and cloud environments. You will coordinate remediation for clients and conduct forensic investigations while tracking attacker activity across logs.

The role involves threat hunting, handling ransomware and domain compromises, and providing findings to technical and management levels in a high-pressure MSP setting.

Qualifikationen

• Experience with Windows, Linux, Azure and Active Directory in incident response.
• Proficient with SIEM, EDR, XSOAR and NIDS tooling.
• Specialism in at least two areas (cloud forensics, mobile forensics, malware analysis or threat intelligence).

Aufgaben

• Analyse and triage security incidents, perform root-cause analysis and impact assessment.
• Coordinate remediation for clients and conduct forensic investigations across Windows, Linux and cloud.
• Threat hunting and attacker activity tracking across log sources.
• Participate in 24/7 on-call coverage for critical incidents.

Kenntnisse

Windows

Linux

Azure

Active Directory

Cloud forensics

Mobile forensics

Malware analysis

Threat intelligence

Tools

SIEM

EDR

XSOAR

NIDS

Jobbeschreibung

The Role

The position involves analysing and triaging security incidents including root-cause analysis and impact assessment, coordinating remediation for clients, and conducting forensic investigations across Windows, Linux and cloud infrastructures. The role also includes threat hunting, attacker activity tracking across log sources, and participating in 24/7 on-call coverage for critical incidents.

Skills & Experience

Candidates should have strong knowledge of modern IT environments (Windows, Linux, Azure, Active Directory) and forensic artefacts, experience with scenarios such as ransomware, BEC and domain compromise, and proficiency in SIEM, EDR, XSOAR and NIDS tooling. Specialism in at least two areas — such as cloud forensics, mobile forensics, malware analysis or threat intelligence — is expected.

Who It Suits

This role suits an experienced incident responder or DFIR professional who is comfortable operating under pressure, communicating findings at both technical and management levels, and advising enterprise clients. Candidates seeking a senior-level position within a large managed security services environment will find this role well matched to their ambitions.