It all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks! This means we offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents.

All of this is built on four fundamental values that define who we are: We are Proud, We Break Barriers, We Care and No BS! 

You have a strong interest in cyber security and believe the following to be applicable to you?

As a CSIRT / DFIR Lead (m/w/d) DACH located in Germany you will support evolving the NVISO CSIRT team. In addition to Incident Response and forensic engagements, you will be working closely with the team on further set up and implement a sustainable strategy . Furthermore, you will work closely with the Threat Intelligence team to support in their service offering and build automations where possible.

Typical tasks include but are not limited to:

• Perform host forensics, network forensics and log analysis in support of incident response investigations;
• Analyze and correlate log data, malicious software behavior, system state changes, and other information across multiple systems to forensically reconstruct malicious activity and impacts;
• Support improvement projects related to automation in the field of digital forensics as well as the definition and further build the CSIRT service offering and go-to-market strategy for the DACH region;
• Perform threat hunting engagements within customer environments including the technical planning of the hunt, defining the requirements, execution and reporting;
• Support in the various threat intelligence services provided to our customers;
• Assist in other engagements such as tabletop exercises, incident and forensic readiness assessments, threat intelligence related projects, etc.
• Create Statements of Work, project plans, requirements definitions,… for projects running in your team;
• Support the evaluation cycle of your team members;
• Engage with customers and assure a fruitful partnership at all times;
• Coach the CSIRT team members in their daily activities;
• Perform technical account management duties for specific top-tier, strategic clients;
• Support in Business Development tasks.

• You are eligible for NATO Clearance;
• A minimum of 6 years of experience within DFIR and at least 3 years of experience in People Management;
• Strong knowledge of Intrusion Analysis, Incident Response and Forensics;
• You are up to date on the latest cyber security threats and the Tactics, Techniques and Procedures (TTPs) attackers are currently using;
• Excellent analytical and problem-solving skills, with an eye for detail;
• Effective communication and interpersonal skills to work collaboratively with clients and cross-functional teams.

At NVISO, we care. We are committed to offering you a highly competitive remuneration package including financial and non-financial components:

• A training budget of 10.000€ and 10 days every 2 years;
• Working and learning from the best people in the European cyber security industry. We have multiple SANS Instructors working at NVISO, our staff has presented at popular hacking conferences (BlackHat, BruCON, OWASP, etc) and all of our technical staff can acquire deep
• Flexible working hours and home office possibilities (incl. working abroad weeks within the EU);
• Business Bike Leasing;
• BahnCard 50 1st class + public transfer ticket;
• 30 holidays;
• Cool offices in the center of Frankfurt, Munich and Vienna(with BBQ, kicker table, table tennis, playstations, etc.).