# Incident Response Expert*Michael Page***Düsseldorf, North Rhine-Westphalia**Remote · Senior · Full-time### The RoleThis contract position centres on designing and implementing a comprehensive incident response operating model. Day-to-day work includes developing playbooks and SOPs for scenarios such as ransomware, identity compromise and cloud control plane abuse, conducting technical gap analyses, running IR exercises, and producing management dashboards on readiness gaps and residual risks.### Skills & ExperienceCandidates need at least eight years in incident response, cyber defence or security operations, with hands-on experience handling ransomware, endpoint intrusions and cloud compromise. Strong knowledge of the Microsoft Security stack, Azure and Entra ID is essential. Certifications such as GCIH, GCFA, GNFA, CISSP, SC-200 or AZ-500 are advantageous.### Who It SuitsThis role suits a seasoned IR practitioner comfortable advising both technical teams and senior stakeholders during critical incidents. Fluency in German and English is required. The fully remote engagement runs until end of Q1 2027, making it ideal for an experienced contractor seeking a structured, high-impact project assignment.Typical advertised salary forIncident Response roles in Germany:**€81,000–€115,000**(median €88,000 — from15 recent listings analysed by Forensic Focus).Compare Incident Response salaries in Germany →Certifications mentioned:GCFA · GNFA · GCIH · CISSP — find training for these on theDFIR Training Finder.Learn More/Apply #J-18808-Ljbffr
Incident Response Expert in Düsseldorf Arbeitgeber: Forensic Focus Limited
Als Senior Consultant Cyber – Digital Forensic Incident Response bieten wir Ihnen die Möglichkeit, in einem dynamischen und unterstützenden Umfeld zu arbeiten, das auf Teamarbeit und kontinuierliches Lernen setzt. Unsere Unternehmenskultur fördert Innovation und persönliche Entwicklung, während wir Ihnen Zugang zu erstklassigen Schulungen und Ressourcen bieten, um Ihre Fähigkeiten im Bereich der digitalen Forensik und Cyber-Sicherheit weiter auszubauen. Darüber hinaus profitieren Sie von flexiblen Arbeitszeiten und der Chance, an spannenden internationalen Projekten teilzunehmen, die einen echten Unterschied für unsere Kunden machen.
