Senior Incident Response Manager – Remote, Berlin

Responsibilities

• Lead, coordinate and execute incident response engagements — from the initial alert and intake call through to the final report
• Rapid analysis and containment of IT security incidents (Rapid Response) at system, network and application levels by guiding clients and their service providers
• Develop and implement remediation plans to limit damage and restore affected systems
• Produce reports, including forensic final reports
• Coordinate actions and procedures between insurers, policyholders and their IT service providers
• Document and forensically process incidents for evidence preservation and root cause analysis
• Improve incident response processes and playbooks to continuously enhance responsiveness
• Conduct post-incident analyses (lessons learned) and develop preventative measures
• Work closely with internal IT teams, business units and external partners as part of incident management processes
• Joint expansion and maintenance of the existing incident response toolset together with the rest of the Incident Response Management team (further increasing automation and additional use of AI)

Qualifications

• At least 5 years of relevant experience in incident response, cyber defense, blue team operations or IT forensics
• Deep hands‑on experience in rapid analysis, containment and remediation of cybersecurity incidents
• Solid knowledge of current attack techniques (e.g., ransomware, phishing, APTs) and defensive measures
• Extensive, in‑depth experience in IT forensics (including malware analysis)
• Good understanding of network technologies, operating systems (Windows, Linux) and cloud environments (M365, AWS, Azure, Google Cloud)
• Ability to act decisively and remain structured under high time pressure
• Excellent and targeted communication skills, especially for conveying complex issues to management (C‑level), IT teams/service providers and non‑technical staff
• Advising clients after IT security incidents and creating and expanding IT security concepts
• Fluent German (C1 or native) and strong English skills (minimum B‑level) are required

Core Competencies

Demonstrates extensive experience in incident response and IT forensics, with a strong focus on rapid analysis, containment, and remediation of cybersecurity incidents. Proficient in developing and implementing effective remediation plans and improving incident response processes while maintaining clear communication with technical and non‑technical stakeholders.