CERT Incident Responder - Full Remote - German speakers

Location: Fully remote; company headquarters in Paris, France

Company

hirify.global provides cyber insurance and supports policyholders through cybersecurity incident response and risk assessment.

What you will do

• Lead incident response engagements for ransomware, data breaches, and business email compromise from containment through remediation.
• Conduct forensic investigations using KAPE, Velociraptor, and EDR platforms such as CrowdStrike Falcon and SentinelOne.
• Produce clear incident reports for technical and executive audiences.
• Provide real-time crisis communication and client guidance during active incidents.
• Support underwriting, Customer Success Management, and Sales teams with technical risk assessments and business-level recommendations.
• Improve internal runbooks, playbooks, and tooling, including tools for the SOC or CERT team.

Requirements

• 3+ years of experience in DFIR or CERT roles.
• Proven experience leading multiple ransomware incident responses end to end.
• Hands-on proficiency with Velociraptor, KAPE, CrowdStrike Falcon, and/or SentinelOne.
• Strong log analysis and network forensics skills.
• Experience using AI agents and building tools through AI.
• Fluent English and a native language requirement: German, or Italian with fluent French or German.

Culture & Benefits

• Fully remote work arrangement.
• High ownership and clear communication are expected during high-stakes incidents.
• Work directly with clients, underwriters, Customer Success Management, and Sales teams.
• Full-time employment in the CERT department.

Hiring process

• Online application through the hirify.global hiring process.
• Applications are typically answered within one day.