Consultant Security Incident Management Public I ID-277 I QUINCEY

Project overview

For our client, we are looking for a Consultant Security Incident Management (m/f/d)

Our client, a public institution, is establishing and piloting a Security Incident and CSIRT process for a self-operated environment. The project includes tool-supported case management, leading real security incidents, incident response without remote access, as well as exercises and crisis communication. The project period is planned from 02.11.2026 to 31.12.2027.

Responsibilities

• Establishment and independent implementation of a Security Incident and CSIRT process in a pilot for a self-operated environment
• Establishment of an Incident/CSIRT process including tool-supported case management
• Independent management of real security incidents until completion
• Incident response without remote access (on-site procedures, local tooling, without manufacturer analysis services)
• Consideration of reporting obligations and deadlines according to NIS2/BSIG and Art. 33 GDPR, including reporting channels from zones without external connectivity
• Derivation of logging and detection requirements in tool-independent notation
• Conception and execution of exercises, including tabletop exercises with decision-makers, crisis communication, and escalation to management

Requirements

German language skills in speaking and writing are required.

Application:

We look forward to receiving your application with your current CV (in German) and your hourly rate.

For questions, please contact us via Freelancermap or at *@*.io.

Your QUINCEY Team

• 6–10 years of professional experience in Security Incident Management
• Experience with case management tools (e.g., TheHive, RTIR, OTOBO/Znuny, Jira Service Management)
• Experience with SIEM/Log tools (Wazuh, Elastic Security, Graylog, OpenSearch)
• Willingness for security screening SÜ2
• German citizenship (client requirement)
• Experience in establishing an Incident/CSIRT process in a larger organization
• Experience in managing real security incidents
• Experience with incident response without remote access (on-site, local tooling)
• Knowledge of NIS2/BSIG
• Knowledge of Art. 33 GDPR
• Logging and detection engineering (tool-independent)
• Experience with tabletop exercises and crisis communication

Project details

02.11.2026

31.12.2027

Format: 100% Remote

Client: Client from the public sector

• Start: ab sofort
• Duration: 12 Monate
• Remote: remote
• Location: NRW, Deutschland, DE
• Languages: German