Required skills
- Incident Response
- Forensics
- SIEM
- Wazuh
- Elastic Security
- Graylog
- OpenSearch
- Sigma rules
- Threat Intelligence
- MISP
- OpenCTI
- YARA
- TheHive
- Velociraptor
- Autopsy
- Volatility
- NIS2
- BSIG
- GDPR Art. 33
- Tabletop Exercises
- Crisis Communication
- GCIH
- GCFA
- CISM
- German Citizenship
Languages: German
Job description
Seeking an experienced Lead Security Consultant for Incident Response and Forensics to build and manage CSIRT processes for an organization with isolated zones. The role is 100% remote and requires a German security clearance.
Project overview
Industry: IT Services & Consulting
For an organization with isolated zones, we are looking for a Lead Security Consultant for Incident Response and Forensics. 100% remote, starting immediately.
Responsibilities
Profile
Required:
Experience:
Advantageous:
Security Requirement
A security clearance is necessary for the project. It will be conducted anew for the project. Willingness is sufficient, an existing clearance is not required.
- Build Incident/CSIRT process with tool-supported case management
- Lead real security incidents to completion
- Incident response without remote access and vendor services
- Implement reporting obligations (NIS2/BSIG, Art. 33 GDPR)
- Forensics: Evidence preservation, disk and RAM analysis, Chain of Custody
- Derive detection requirements, conduct tabletop exercises, and manage crisis communication
- Own leadership of real security incidents
- Forensics Tools: Velociraptor, Autopsy, Volatility
- SIEM: Wazuh, Elastic Security, Graylog or OpenSearch; Sigma rules
- Threat Intelligence: MISP, OpenCTI, YARA; Case Management: TheHive
- GCIH, GCFA or CISM advantageous
- Expert level
- German citizenship (security clearance required), resident in Germany
- Professional experience at Principal/Lead level
- TheHive
- Wazuh
- Velociraptor
- Volatility
- NIS2
- MITRE ATT&CK
- GCIH
Project details
Germany / 100% Remote
Immediately
Experience Level: Principal
Security Clearance: Willingness required
up to €690/day
- Start: 2026-10
- Remote: remote
- Location: Deutschland, DE
- Languages: German
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on FreelancerMap DE