Senior Security Consultant – Incident Response

Do you want to be on the frontline when serious cyber incidents hit? You will lead complex investigations, guide customers through crises, and help shape our incident response services. You will join a highly skilled, collaborative team working with some of the most interesting and challenging cyber cases in the market.

Make a real impact in high‑stakes incidents

You will be part of a small, expert Incident Response team handling everything from ransomware to targeted attacks across large, complex environments. You will work closely with customers, helping them stay calm, informed and in control during critical situations. You will collaborate with specialists across MDR, Intelligence and Consulting, learn from unique cases, and contribute to the development of tools, methodologies and publications. At CSIS, we invest in your growth with dedicated training time, certifications, and peer learning - in an open, diverse and friendly culture built on “We commit, We care, We succeed together.”

When you join CSIS, you will get an interesting job in a company and an industry which is growing. You will get interesting challenges, that truly make a difference for our customers, and you will be able to take ownership for your work from start to finish. And you will not least get 130+ fantastic colleagues from all over the world. Besides that, you will get:

• Flexible work from home arrangements • A competitive salary and personal benefit package • 5 weeks holiday, plus 5 extra days off each year • Health Insurance, a pension, plus life and disability insurance • Healthy, varied lunches (incl. vegetarian and allergy options) • Home-baked goods, healthy snacks, coffee, tea and sodas in the office • Social activities and company events throughout the year • Paid mobile phone subscription and home internet

Your new job

In this client-facing role, you will lead major incident response engagements, support multiple customers, guide junior responders, and help clients strengthen their detection and response capabilities. You will work across diverse environments, industries, and technologies, making adaptability and strong communication essential.

Your responsibilities will be:

• Incident Response & Investigations (Client-Facing) • Lead complex and high-severity incident response engagements for customers across varied infrastructures (on-prem, cloud, hybrid). • Perform advanced forensic analysis across a variety of data sources (disk, memory, network, malware, cloud) and provide clients with clear, actionable findings. • Coordinate response activities with client technical teams, management, and legal/compliance contacts. • Develop accurate incident timelines, attribution assessments (where possible), and root-cause analyses. • Customer Communication & Advisory • Act as a trusted advisor to clients during and after incidents, providing guidance on containment, recovery, and long-term improvements. • Deliver polished, professional technical reports and executive summaries for clients. • Present findings to technical teams as well as to senior leadership and non-technical stakeholders. • Preparedness, Consulting & Continuous Improvement • Assist clients with incident readiness assessments, IR playbook creation, tabletop exercises, and contribute to CSIS’s MDR detection engineering. • Contribute to development of internal incident response methodologies, tooling, and best practices. • Mentor and guide junior team members during engagements and internal training.