Required skills
- Security Incident Management
- CSIRT Process
- Incident Response
- Case Management
- NIS2
- BSIG
- GDPR
- SIEM
- Logging
- Tabletop Exercises
- Crisis Communication
- TheHive
- RTIR
- OTOBO/Znuny
- Jira Service Management
- Wazuh
- Elastic Security
- Graylog
- OpenSearch
Languages: German
Job description
Seeking an experienced Consultant for Security Incident Management to build and implement incident and CSIRT processes for a self-operated environment. The role involves managing real security incidents and adhering to regulatory requirements.
Project overview
Consultant Security Incident Management (m/f/d) – 100% Remote
For our client, we are looking for an experienced Consultant in the field of Security Incident Management (m/f/d). In the project, you will support the setup and independent implementation of a security incident and CSIRT process for a self-operated environment.
The Framework Conditions
Responsibilities
Setup and implementation of an incident/CSIRT process in a larger organization
Setup of tool-supported case management for security incidents
Independent management and processing of real security incidents until completion
Execution of incident response without remote access, including local tooling and on-site procedures
Consideration of regulatory reporting obligations and deadlines according to NIS2, BSIG, and Art. 33 GDPR
Design of reporting channels for isolated environments without external connections
Derivation of logging and detection requirements in a tool-independent form
Design and execution of security and incident response exercises
Conducting tabletop exercises with decision-makers
Support with crisis communication and escalations to management
Requirements
6–10 years of professional experience in Security Incident Management
In-depth experience in setting up and operating incident and CSIRT processes
Experience in independently processing and managing real security incidents
Knowledge of regulatory requirements surrounding NIS2, BSIG, and GDPR
Experience with case management, SIEM, and logging systems
Experience in planning and conducting incident response and tabletop exercises
Technical Environment
Incident/Case Management:
TheHive, RTIR, OTOBO/Znuny, Jira Service Management
SIEM & Logging:
Wazuh, Elastic Security, Graylog, OpenSearch
Special Requirements
Due to the client's security requirements, the following conditions are stated:
German nationality
Willingness for security clearance SÜ2
No staffing from the list of states within the meaning of § 13 Paragraph 1 Number 17 SÜG2 (according to client specification)
Interested?
Then we look forward to receiving your current profile. Please also send us your availability from November 2026 and your hourly rate.
Project details
02.11.2026
until 31.12.2027
100% Remote
Project Volume: 2,500 hours
Contract Type: Freelance
- Start: 2026-11
- Duration: 14 Monate
- Remote: remote
- Location: Deutschland, DE
- Languages: German
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on FreelancerMap DE