HG
(Senior) Digital Forensics & Incident Response (DFIR) Consultant (m/w/d)
Contract type
Ongoing
Work mode
Hybrid · Garching, Germany
Experience
Senior · Not stated
Level inferred from job title
Job description
A (Senior) Digital Forensics & Incident Response Consultant who conducts forensic investigations of cyberattacks and IT security incidents and supports clients in handling them.
At a glance
- Employment
- Full-time · Employee (employment agreement)
- Work mode
- Hybrid · Garching, Germany
- Languages
- German – fluent, English – good
What you'll do
- Conduct forensic investigations of cyberattacks and IT security incidents and analyze affected systems and environments
- Secure digital traces on clients, servers and in network and cloud environments in a structured and traceable way
- Identify attack paths, reconstruct the course of security incidents and assess their cause and extent
- Prepare investigation results in technical reports and understandable management summaries for the target audience
- Support customers in handling security incidents, especially analysis, containment and remediation of affected systems
- Carry out compromise assessments, OSINT analyses and threat hunting activities and support threat intelligence and customer workshops
- Continuously develop methods, processes and tools in the Digital Forensics & Incident Response area
What we're looking for
- Several years of practical experience in digital forensics, having already investigated real security incidents
- Sound knowledge of forensic analysis of Windows and Linux systems, EDR alerts, log data and cloud environments
- Knowledge of current attack techniques, typical attacker procedures and relevant tactics, techniques and procedures, e.g. MITRE ATT&CK
- Familiarity with common forensic tools
- Analytical, hypothesis-driven and careful working style, keeping an overview even under time pressure
- Ability to explain complex technical results understandably and represent them to IT teams, management and other stakeholders
- Professional demeanor in critical situations and ability to develop pragmatic, implementable solutions with customers
- Very good German and good English skills, written and spoken
- Willingness to take on separately compensated on-call duty for the 24/7 incident response service in rotation with colleagues
Nice to have
- Experience in incident response or OSINT analyses
- Knowledge of macOS, mobile device or network forensics
- Experience with Microsoft 365, Azure or AWS as well as IOC scanners such as THOR
- Knowledge of Python or PowerShell
Benefits
- Free drinks, coffee and snacks
- Attractive benefits on request, from job ticket to kindergarten subsidy
- Flexible working hours and the option to work mobile
- Open, trusting corporate culture and independent working, including in the home office
- Modern office in Garching with a view of the Alps and shared lunches
Apply
About HvS-Consulting GmbH
People – Process – Technology
Specialists for cyber security offering services such as security audits, incident response, awareness training and multimedia design.
Mission
Help organizations protect themselves through the right interplay of technologies, processes and people, convinced that society's values must also be protected in cyberspace.
Key facts
- Garching
- Cyber Security
- Specialists for cyber security
- Modern office in Garching near Munich with a view of the Alps
- Operates a 24/7 incident response service
What they value
- Every opinion is heard and valued, from intern to management
- Open, trusting corporate culture
- Independent working is valued