Germany Incident Response Lead — Remote-First

Coalition, Inc.; United States; Remote; USD 95,000 - 134,000; Full time

Benefits offered by this job

100% public healthcare coverage

30+ paid holidays

Annual home office stipend

Statutory pension

Mental & physical health wellness

Job summary

Coalition, Inc. is seeking an experienced Cyber Incident Response professional to help establish and expand our CIR presence in Germany.

You will serve customers in Germany and the broader region, communicating highly technical concepts in German and English. The role requires 5+ years in incident response or digital forensics, proficiency with major tools, and familiarity with GDPR and EU security requirements.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field.
• 5+ years of incident response or digital forensics experience.
• Knowledge of threat lifecycle, intrusion techniques, and exploitation methods.
• Experience with network protocols and log analysis tools.
• Familiarity with VD tools like Velociraptor, Axiom, FTK, SIFT, Volatility.
• Experience with EDR solutions (CrowdStrike, Carbon Black, SentinelOne, etc.).
• Knowledge of NIST, HIPAA, PCI frameworks; GDPR awareness.
• Strong bilingual communication (German & English).
• Experience deploying tools on AWS and cloud platforms.

Responsibilities

• Lead incident response engagements and guide customers through investigations and remediation.
• Coordinate incident response from team members and external vendors.
• Analyze Windows, Linux, and Mac systems to identify IOcs and evidence of compromise.
• Produce case reports with appropriate technical detail for researchers and customers.
• Assess customer security programs and recommend enhancements.
• Advise on solutions to navigate information security risk for clients.
• Monitor evolving security practices and help build internal processes.
• Stay informed on German and EU privacy and security regulations.
• Support Coalition’s CIR growth in Germany as a core in-country member.

Skills

Incident Response

Digital Forensics

Forensics Windows/Linux

EDR Tools

German/English Fluency

Education

Bachelor’s Degree in CS/IS/Engineering

Tools

Velociraptor

Axiom

FTK

SIFT

Volatility

ELK

Wireshark

CrowdStrike Falcon

Job description

Coalition, Inc. is seeking an experienced Cyber Incident Response professional to help establish and expand our CIR presence in Germany.

You will serve customers in Germany and the broader region, communicating highly technical concepts in German and English. The role requires 5+ years in incident response or digital forensics, proficiency with major tools, and familiarity with GDPR and EU security requirements.