Remote Jobs RockRemote Jobs Rock

Incident Responder Lead (m/f/d)

🕒 28 days ago
Incident ResponseIncident ManagementCybersecurity RecoveryBackup And Restore Workflows
Apply Now

📜 Description

  • Lead incidents from assessment to closure, setting scope, priorities and responsibilities as evidence develops.
  • Coordinate investigations and recovery across responders, specialists and client IT providers; manage dependencies and blockers.
  • Review restoration plans, backup assumptions and system dependencies, and ensure return-to-service checks are documented.
  • Explain findings, recovery options and tradeoffs to clients and keep technical and business stakeholders aligned.
  • Review and approve evidence-based incident reports, and coach responders while improving recovery runbooks.
  • Lead adoption of AI tools for investigation, recovery and automation, validating results and protecting incident data.

🛠️ Requirements

  • Professional working proficiency in German and English.
  • Typically 3+ years of relevant experience in incident response, recovery, infrastructure or technical project delivery, including complex recovery coordination.
  • Experience managing incidents, major outages or recovery projects, coordinating specialists and providers, and tracking actions, dependencies and risks.
  • Practical restoration experience and knowledge of backup and restore workflows and system dependencies.
  • Experience with SIEM, EDR and forensic tools, such as Splunk, CrowdStrike, Velociraptor, X-Ways or comparable tools.
  • Experience writing incident or root-cause reports that clearly explain evidence, findings, limitations and remediation.
  • Clear communication, sound judgement under pressure, and practical experience applying and assessing AI tools in technical work.
  • Threat hunting and threat intelligence experience is an advantage.

✨ Benefits

  • Work from home for up to two days a week.
  • 28 vacation days, plus Christmas Eve and New Year's Eve.
  • Competitive salary and equity options.
  • Subsidized Germany ticket.
  • Wellpass membership support.
  • Company pension support.
  • Access to corporate benefits.
  • Professional development support, including Udemy Business, and regular team events.
Full job description

Welcome to Baobab Risk Solutions – Your Partner for the Cyber Security of Tomorrow!
The digital world is growing – and with it, the threat of cyber attacks. Every successful attack not only jeopardizes businesses but also undermines trust in our connected society. At Baobab Risk Solutions, we are committed to making the digital world safer – proactively, sustainably, and with cutting-edge technology. Our mission: to protect companies from cyber threats before they arise, contributing to a more secure digital future.
Shape the digital security of tomorrow with us. Join a team that doesn’t just watch but actively protects. Your ideas and commitment can make all the difference. If that’s not enough, here’s more:

  • Flexible Working: With your MacBook, you can work from home two days per week and work in our modern office in Berlin the remaining days.

  • Attractive Compensation: Competitive salary and VSOP options.

  • Growth & Career: Grow with us – in a dynamic company with clear advancement opportunities.

  • and many more benefits.

Baobab Risk Solutions – Growing together. Making the digital world safer, together.

Your Mission

  • Lead incidents from initial assessment to closure. Establish scope, agree priorities, assign responsibilities and adjust the response as new evidence emerges.

  • Coordinate investigation and recovery. Bring responders, recovery specialists and client IT providers together around a clear plan, managing dependencies and resolving blockers.

  • Work across client infrastructure, including Windows, Active Directory, Microsoft 365, virtualization and backups. Bring in specialists where needed; expertise in every platform is not expected.

  • Guide clients through difficult decisions. Explain findings, recovery options and tradeoffs in plain language, keeping technical teams and business stakeholders informed.

  • Oversee safe restoration. Review recovery plans, challenge assumptions about backups and system dependencies, and ensure the checks supporting a return to service are documented.

  • Own the final report. Review and approve incident reports, ensuring conclusions, limitations and recommendations are clear and supported by evidence.

  • Coach responders, review their work and turn lessons learned into better recovery runbooks.

  • Lead the adoption of cutting-edge AI tools across incident response. Turn promising approaches into practical investigation, recovery and automation workflows, coach the team in their use, and validate results while protecting incident data.

Surefire Cyber

Principal Engagement Lead (Remote)

📅 Jul 14
Surefire Cyber👥 51 - 200 employees🏢 Computer & Network Security

Lead multiple active digital forensics and incident response engagements, guiding clients from incident scoping through recovery while coordinating teams, insurers, and legal counsel.

Digital Forensics And Incident Response (dfir)Incident ManagementCybersecurity InvestigationsLinux
WaveStrong

Sr. Lead Incident Response / Supervisor Level 5

📅 Jan 28
WaveStrong🏢 Information Technology

Leads complex incident response and threat detection work, guiding investigations, coordinating resolution of critical security incidents, and improving cyber defense operations across teams.

Incident ResponseIT Incident ManagementCybersecuritySecurity Event Investigation And Triage
ServiceNow

Staff Incident Response Engineer

🕒 yesterday
ServiceNow👥 10,000+ employees🏢 Computer Software

Leads incident response across commercial and regulated customer environments, investigating threats, coordinating remediation, conducting forensics, and strengthening security operations through playbooks, automation, and secure.

Incident ResponseDigital ForensicsThreat HuntingThreat Intelligence
Moxfive

Principal DFIR Consultant

📅 Sep 11
Moxfive🏢 Cybersecurity🤝 B2B

Lead digital forensics and incident response investigations across enterprise and cloud environments, eliminate threat actors, and help shape rigorous AI-assisted investigative methods and tooling.

Digital Forensics And Incident ResponseWindows ForensicsMac And Linux FundamentalsForensic Artifacts
Surefire Cyber

Principal Consultant, Digital Forensic and Incident Response (DFIR) (Remote)

📅 Jul 14
Surefire Cyber👥 51 - 200 employees🏢 Computer & Network Security

As a Principal Consultant specializing in Digital Forensics and Incident Response, you will lead incident response engagements, conduct advanced forensic analysis, and mentor a team of consultants.

Digital ForensicsIncident ResponseMalware AnalysisReverse Engineering

Trusted by Remote Workers