(Senior) Incident Responder (m/f/d)

  • CANCOM
  • Aachen
  • Berlin
  • Frankfurt am Main
  • Frankfurt am Main
  • Hamburg
  • Hamburg
  • Hamburg
  • Hannover
  • Köln
  • Košice
  • Leipzig
  • München
  • Stuttgart
  • Presence / Mobile
  • Work experience
  • Technical occupations (other)
  • Fulltime
(Senior) Incident Responder (m/f/d), 1. image

ABOUT CANCOM

At CANCOM, you will be surrounded by an innovative, agile and sustainable environment. More than 5.300 employees work day in, day out to improve collaboration and exchange in various areas of life by using modern IT solutions. Do you want to be a part of it and take the next step in your career? Then join us on our Digital Journey. We are looking forward to meet innovative and open minded people from all different areas. What matters to us is that you are dynamic, self-driven, and eager to reach for excellence as a team.

YOUR NEW JOB

  • Analyzing and handling security-related incidents, including root cause analysis and impact assessment
  • Coordinating incidents and advising clients on appropriate countermeasures and remediation strategies
  • Threat hunting in various IT and cloud environments (on a regular and ad hoc basis) to identify hidden threats
  • Conducting forensic investigations in Windows, Linux, and cloud infrastructures, as well as providing support for chain-of-custody processes
  • Tracking attacker activities across different log sources, systems, and platforms
  • Working in SIEM, XSOAR, EDR, and NIDS environments to efficiently handle incidents and optimize detection
  • Participating in the 24/7 on-call rotation to provide support during critical security incidents

THIS IS YOUR PROFILE

  • Excellent knowledge of modern IT infrastructures (Windows, Linux, Azure, AD) and relevant forensic artifacts
  • Experience with common incident scenarios such as BEC, system compromises, ransomware, and domain compromises
  • In-depth understanding of log sources, SIEM analysis, and attacker behavior across various environments
  • Expertise in at least two specialized areas (e.g., cloud forensics, macOS IR, mobile forensics, malware analysis, threat intelligence)
  • Strong ability to evaluate complex data and identify security-relevant patterns
  • Structured and clear documentation, as well as precise risk assessment even with limited data
  • Proficiency in using various EDR tools and vendor-specific solutions

OUR BENEFITS

  • Flexible working hours and mobile office in coordination with the manager
  • State-of-the-art equipment including company phone, which may also be used privately
  • Discounts thanks to the "Corporate Benefits" portal
  • Bike leasing
  • Free beverages & vitamins (fruit)
  • Further training opportunities
  • Employee events
  • Sascha Sturm
  • Team Leader Recruiting
  • +49 89 54054-5454