It all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks! This means we offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents.

All of this is built on four fundamental values that define who we are: We are Proud, We Break Barriers, We Care and No BS! 

As a CSIRT / DFIR Lead (m/w/d) DACH located in Germany you will support evolving the NVISO CSIRT team. In addition to Incident Response and forensic engagements, you will be working closely with the team on further set up and implement a sustainable strategy . Furthermore, you will work closely with the Threat Intelligence team to support in their service offering and build automations where possible.

• Perform host forensics, network forensics and log analysis in support of incident response investigations;
• Analyze and correlate log data, malicious software behavior, system state changes, and other information across multiple systems to forensically reconstruct malicious activity and impacts;
• Support improvement projects related to automation in the field of digital forensics as well as the definition and further build the CSIRT service offering and go-to-market strategy for the DACH region;
• Perform threat hunting engagements within customer environments including the technical planning of the hunt, defining the requirements, execution and reporting;
• Support in the various threat intelligence services provided to our customers;
• Assist in other engagements such as tabletop exercises, incident and forensic readiness assessments, threat intelligence related projects, etc.
• Create Statements of Work, project plans, requirements definitions,… for projects running in your team;
• Support the evaluation cycle of your team members;
• Engage with customers and assure a fruitful partnership at all times;
• Coach the CSIRT team members in their daily activities;
• Perform technical account management duties for specific top-tier, strategic clients;
• Support in Business Development tasks.

• A minimum of 6 years of experience within DFIR and at least 3 years of experience in People Management;
• Strong knowledge of Intrusion Analysis, Incident Response and Forensics;
• You are up to date on the latest cyber security threats and the Tactics, Techniques and Procedures (TTPs) attackers are currently using;
• Excellent analytical and problem-solving skills, with an eye for detail;
• Effective communication and interpersonal skills to work collaboratively with clients and cross-functional teams;
• Excellent German and English communication skills, both verbal and written;
• You are eligible for a NATO clearance. (see HERE for more information).

At NVISO, we care. We are committed to offering you a highly competitive remuneration package including financial and non-financial components:

• Working and learning from the best people in the European cyber security industry. We have multiple SANS Instructors working at NVISO, our staff has presented at popular hacking conferences (BlackHat, BruCON, OWASP, etc) and all of our technical staff can acquire deep technical security certifications (GSE, GXPN, GREM, GCFA, OSCP, etc);
• Generous training budget of 10.000 EUR + 10 man days for attending lectures rolling over 2 years;
• Support for technical growth with Cloud trainings + certifications (AWS, GCP, Azure);
• Regular team-building and fun events with legendary off-site events once a year. The location of the next team building is one of the most closely guarded secrets at NVISO… We can however disclose that we’ve visited Lisbon, Dubai and Malta over the past few years;
• Our commitment to coach and counsel you and help you grow; each employee receives a personal coach within the team, whose role is to ensure your well-being and helps you grow in your career!
• Flexible working hours and home office possibilities (incl. working abroad weeks within the EU);
• Business Bike Leasing;
• BahnCard 50 1st class + public transfer ticket;
• 30 holidays;
• Company Pension Scheme;
• Cool offices in the center of Frankfurt, Munich and Vienna (with BBQ, kicker table, table tennis, playstations, etc.).

IF YOU’RE INTERESTED, PLEASE SEND US YOUR APPLICATION!

WE’RE LOOKING FORWARD TO MEETING YOU!