Senior Incident Response Consultant — Remote Ready

CSIS SECURITY GROUP A/S; Frederiksberg; Hybride; DKK 900 000 - 1 200 000; Plein temps

Avantages offerts par ce poste

Flexible work from home arrangements

Health insurance & pension

5 weeks holiday + 5 days

Résumé du poste

CSIS SECURITY GROUP A/S is seeking a Senior Security Consultant – Incident Response to lead major incident engagements across on-prem, cloud, and hybrid environments. You will guide clients through crises, collaborate with MDR and consulting peers, and help strengthen detection and response capabilities.

You will work with diverse environments, travel occasionally, and contribute to tooling and playbooks while mentoring junior responders and delivering clear, actionable outcomes.

Qualifications

• Hands-on incident response experience, ideally in a consultancy, MSSP, DFIR, or CSIRT environment.
• Proven track record leading multi-client or multi-environment incident investigations.
• Deep knowledge of Windows, Linux, and Active Directory security.
• Strong knowledge of network protocols and security.
• Strong experience with SIEM and EDR tools, including detection logic, log correlation, and threat analysis.
• Advanced digital forensics experience (memory, disk, log, network).
• Familiarity with evidence handling, chain-of-custody standards, and forensic reporting.
• Strong understanding of attack techniques and threat actor behaviours (MITRE ATT&CK).
• Experience in cloud investigations (Azure/AWS/GCP logs, identity, telemetry).
• Danish speaker – English only can be accommodated.

Responsabilités

• Lead complex and high-severity incident response engagements for customers across varied infrastructures (on-prem, cloud, hybrid).
• Perform advanced forensic analysis across data sources (disk, memory, network, malware, cloud) and provide actionable findings.
• Coordinate response activities with client teams, management, and legal/compliance contacts.
• Develop accurate incident timelines, attribution assessments, and root-cause analyses.
• Act as a trusted advisor to clients during and after incidents, guiding containment and recovery.
• Deliver professional technical reports and executive summaries for clients.
• Present findings to technical teams, senior leadership and non-technical stakeholders.
• Mentor junior team members during engagements and training.

Connaissances

Incident response

Digital forensics

Cloud investigations

Windows security

Linux security

SIEM

EDR tools

Client-facing communication

Leadership

Outils

Sentinel/Defender

CrowdStrike

Disk/memory forensics

Description du poste

CSIS SECURITY GROUP A/S is seeking a Senior Security Consultant – Incident Response to lead major incident engagements across on-prem, cloud, and hybrid environments. You will guide clients through crises, collaborate with MDR and consulting peers, and help strengthen detection and response capabilities.

You will work with diverse environments, travel occasionally, and contribute to tooling and playbooks while mentoring junior responders and delivering clear, actionable outcomes.