Security Consultant Incident Management

Project overview

Your Activities

The Profile Sought

Language Requirements

• Building and independently implementing a security incident and CSIRT process in pilot operation for a self-operated environment.
• Independent management and coordination of security incidents from initial assessment to completion.
• Conception and implementation of incident response procedures for environments without remote access and external manufacturer analysis services.
• Derivation of logging and detection requirements as well as definition of suitable processes for security incident detection.
• Planning and execution of tabletop exercises including crisis communication, escalation, and involvement of decision-makers.
• 6-10 years of professional experience in Security Incident Management.
• Experience in building incident and CSIRT processes in larger organizations, including tool-supported case management.
• Experience in independently managing real security incidents to completion.
• Knowledge in incident response without remote access, including on-site procedures and local tooling without manufacturer analysis services.
• Knowledge of reporting obligations and deadlines according to NIS2, BSIG, and Art. 33 GDPR, including reporting channels from zones without external connectivity.
• Ability to derive logging and detection requirements in tool-independent notation.
• Experience in the conception and execution of security exercises, especially tabletop exercises with decision-makers.
• Experience with crisis communication and escalation towards management.
• Experience with case management tools, e.g., TheHive, RTIR, OTOBO/Znuny, or Jira Service Management.
• Experience with SIEM and log tools, e.g., Wazuh, Elastic Security, Graylog, or OpenSearch.
• German: Fluent
• English: Advanced knowledge

Project details

• Start: 2027-02-11
• Duration: 11.02.2027 - 31.12.2027
• Remote: remote
• Location: DE
• Languages: German, English