Senior Incident Responder m/f/d

CANCOM SE; Köln; On-site; EUR 65,000 - 90,000; Full time

Job summary

CANCOM SE in Köln, Nordrhein-Westfalen, Germany is seeking an experienced security professional to analyze and handle security incidents across IT and cloud environments. The role involves root cause analysis, impact assessments, and guiding clients on countermeasures and remediation strategies.

You will perform threat hunting, conduct forensic investigations, and track attacker activity across diverse log sources and platforms.

Responsibilities

• Analyzing and handling security-related incidents, including root cause analysis and impact assessment
• Coordinating incidents and advising clients on appropriate countermeasures and remediation strategies
• Threat hunting in various IT and cloud environments to identify hidden threats
• Conducting forensic investigations in Windows, Linux, and cloud infrastructures, and supporting chain-of-custody processes
• Tracking attacker activities across log sources, systems, and platforms
• Working in SIEM, XSOAR, EDR, and NIDS environments to efficiently handle incidents and optimize detection
• Participating in 24/7 on-call rotation to provide support during critical security incidents

Job description

• Analyzing and handling security-related incidents, including root cause analysis and impact assessment
• Coordinating incidents and advising clients on appropriate countermeasures and remediation strategies
• Threat hunting in various IT and cloud environments on a regular and ad hoc basis to identify hidden threats
• Conducting forensic investigations in Windows, Linux, and cloud infrastructures, as well as providing support for chain-of-custody processes
• Tracking attacker activities across different log sources, systems, and platforms
• Working in SIEM, XSOAR, EDR, and NIDS environments to efficiently handle incidents and optimize detection
• Participating in the 24/7 on-call rotation to provide support during critical security incidents