Senior Incident Response Manager (m/w/d) - REMOTE oder Berlin
Core
Lead and manage critical cybersecurity incident response operations, including rapid analysis, containment, and recovery of IT security incidents across systems, networks, and applications.
Role type
Senior Incident Response Manager
Builds
Incident response playbooks, forensic reports, and resilient security postures for clients
Domain
Cybersecurity / IT Forensics
Required skills
Incident response leadership, rapid incident analysis and containment, IT forensics, malware analysis, network security, cloud security (M365, AWS, Azure, GoogleCloud), threat defense strategies, stakeholder communication, security concept development
Preferred skills
SIEM/EDR tool usage, Threat Hunting, Threat Intelligence integration
Technologies
Splunk, CrowdStrike, Velociraptor, X-WAYS, KAPE, Hayabusa, SOF-ELK, OpenRelik, Windows Defender for Business
Responsibilities
Lead and coordinate incident response operations from initial alert to final report, analyze and contain security incidents on system/network/application levels, create and implement damage limitation and recovery plans, conduct forensic investigations and documentation, coordinate with insurers and IT service providers, develop and optimize incident response processes and playbooks, perform post-incident analysis and develop prevention measures, collaborate with internal IT teams and external partners, expand and maintain the incident response tool landscape
Seniority
Senior, hands-on IC
