C
German Senior Digital Forensics and Incident Response (DFIR) Consultant
Contract type
Ongoing
Work mode
Remote
Experience
Senior · 5+ years
Job description
A Bilingual Senior Digital Forensics and Incident Response (DFIR) Consultant role at CYPFER, leading complex investigations, performing forensic analyses across platforms, and developing strategic incident response plans for clients recovering from cyber-attacks. Fluency in English and German is essential.
At a glance
- Work mode
- Remote
- Languages
- English – fluent, German – fluent
What you'll do
- Engage on behalf of CYPFER in incident response tasks, interacting with various insurance partners, legal counsel, incident response units, client executives, and technical teams
- Utilize standard tools and methodologies to collect forensic artifacts and images from affected systems
- Perform Windows/Unix/Linux forensics and triage, and network forensics to assess compromise and investigations
- Apply mitigation strategies and concepts to remediate identified threats
- Analyze triage collections/artifacts for indicators of compromise (IoCs) and potentially malicious activity
- Review logs from host systems and appliances to identify suspicious activities
- Collect forensic disk and memory images from physical and virtual endpoints and servers
- Perform forensic analysis of physical systems, virtual machines, and network data
- Correlate events and build timelines of events
- Maintain current knowledge on emerging threats and vulnerabilities
- Analyze files for IOCs using various techniques
- Conduct limited threat research based on IOCs collected during investigations
- Collaborate and share information within and across teams and communicate effectively with client managers and executives
- Write detailed reports and summarize findings clearly and concisely
- Participate in a rotating on-call schedule; ability to work on weekends and outside normal business hours as needed
- Maintain detailed notes and draft updates and reports as required
What we're looking for
- 5+ years of experience in digital forensics, incident response, or a similar role
- Strong knowledge of Windows and Unix/Linux operating systems
- Expertise in threat hunting, network forensics, and EDR / EPP technologies
- Skilled in forensic acquisition and analysis of physical and virtual systems
- Advanced understanding of networking, routing, and firewall operations
- Working knowledge of storage technologies such as RAID, NAS, SAN, Fiber Channel, iSCSI, and NFS
- Ability to analyze and interpret logs from various sources
- Familiarity with SIEM and SOAR solutions
- Ability to perform threat research and analyze current threats
- Understanding of business email compromise (BEC) cases and investigation techniques
- Skilled in malware analysis tools and methodologies
- Understanding of an incident lifecycle and cyber-kill-chain
- Familiarity with exfiltration techniques used by threat actors
- Understand obfuscation techniques used to conceal malicious commands and traffic, and lateral movement strategies employed by threat actors
- Fully Bilingual (English/German)
- Maintain current knowledge of information security, incident response techniques, emerging threats, and tools
- Work independently and produce high-quality deliverables with minimal supervision
- Exhibit strong customer service and consulting skills
- Adhere to client and internal policies, procedures, and security practices
- Remain calm, composed, and articulate in tough customer situations
- Exhibit excellent relationship management and communication skills
- Ability to travel on short notice to a client site up to 50%; maintain flexibility to travel frequently within 24-48 hours' notice for deployments typically 1-2 weeks in duration
Nice to have
- Experience with e-discovery tools and methodologies
- Proficiency in collecting and analyzing data from mobile devices/cell phones
- Industry certifications such as MCFE, ENCE, ACE, GCFA, GCIH, GNFA, GCFE or similar are a plus
Apply
About CYPFER
A leading first-responder cybersecurity organization
CYPFER is a leading first-responder cybersecurity organization enabling clients to swiftly and effectively return to business following a cyber-attack. As a global market leader in ransomware post-breach remediation and cyber-attack first response, we consistently deliver results that exceed market standards for handling cyber-extortion and ransomware events. Our team collaborates with prominent global insurance carriers, leading law firms, and Fortune 1000 businesses.
Key facts
- cybersecurity
- Global market leader in ransomware post-breach remediation and cyber-attack first response
- Collaborates with prominent global insurance carriers, leading law firms, and Fortune 1000 businesses
Partners & customers
global insurance carriersleading law firmsFortune 1000 businesses
What they value
- Inclusive work environment