Lead Security Consultant – Incident Response / CSIRT | 100% Remote

Project overview

Industry: IT

For an organization with isolated zones, we are looking for a Lead Security Consultant for Incident Response, CSIRT setup, and forensics. 100% remote, starting from 12.10.2026.

Responsibilities

Profile – Required (please document with projects in your CV)

Advantageous

Application

Please complete the following qualification form so we can review your profile for this project:

https://pea-global.com/bewerben?vac=VA_000137

• Set up Incident/CSIRT process with tool-supported case management
• Lead real security incidents to completion
• Incident response without remote access and manufacturer services
• Implement reporting obligations (NIS2/BSIG, Art. 33 GDPR)
• Forensics: evidence preservation, disk and RAM analysis, chain of custody
• Derive detection requirements, conduct tabletop exercises, and crisis communication
• Own leadership of real security incidents
• Forensics Tools: Velociraptor, Autopsy, Volatility
• SIEM: Wazuh, Elastic Security, Graylog or OpenSearch; Sigma rules
• Threat Intelligence: MISP, OpenCTI, YARA; Case Management: TheHive
• German citizenship, residence in Germany
• Ransomware incidents including recovery
• MITRE ATT&CK and response automation
• GCIH, GCFA or CISM

Project details

Germany / 100% Remote

from 12.10.2026

Experience Level: Expert / Lead

Security Clearance: required – German citizenship is a prerequisite

up to €690/day

• Start: flexible
• Duration: 12 Monate
• Remote: remote
• Location: Berlin, Deutschland, DE
• Rate: 86-86 EUR/h
• Languages: German