Senior Incident Responder m/f/d

At CANCOM, you can expect an innovative, agile and sustainable environment. More than 4,000 employees work every day to improve collaboration and exchange in various areas of life with the help of modern IT solutions. Do you want to be a part of it and take the next step in your career? Why don't you become part of our Digital Journey. We are looking forward to people from a wide range of disciplines who are open to new things, have innovative ideas and want to advance goals together as a team.

• Analyzing and handling security-related incidents, including root cause analysis and impact assessment
• Coordinating incidents and advising clients on appropriate countermeasures and remediation strategies
• Threat hunting in various IT and cloud environments on a regular and ad hoc basis to identify hidden threats
• Conducting forensic investigations in Windows, Linux, and cloud infrastructures, as well as providing support for chain-of-custody processes
• Tracking attacker activities across different log sources, systems, and platforms
• Working in SIEM, XSOAR, EDR, and NIDS environments to efficiently handle incidents and optimize detection
• Participating in the 24/7 on-call rotation to provide support during critical security incidents

• Excellent knowledge of modern IT infrastructures Windows, Linux, Azure, AD and relevant forensic artifacts
• Experience with common incident scenarios such as BEC, system compromises, ransomware, and domain compromises
• In-depth understanding of log sources, SIEM analysis, and attacker behavior across various environments
• Expertise in at least two specialized areas e.g., cloud forensics, macOS IR, mobile forensics, malware analysis, threat intelligence
• Strong ability to evaluate complex data and identify security-relevant patterns
• Structured and clear documentation, as well as precise risk assessment even with limited data
• Proficiency in using various EDR tools and vendor-specific solutions

• Flexible working hours and mobile office in coordination with the manager
• State-of-the-art equipment including company phone, which may also be used privately
• Discounts thanks to the 'Corporate Benefits' portal
• Bike leasing
• Free beverages & vitamins fruit
• Further training opportunities
• Employee events

Sascha Sturm
Team Leader Recruiting

+49 89 540 54-5454

Opens our external application portal in a new tab