Incident Response Analyst Expert

Responsibilities

• Coordinate and communicate IT security incidents across international teams, managing the full incident response process.
• Detect, analyze, and contain potential security incidents to ensure effective mitigation.
• Reconstruct cyber-attacks and malware, analyze sensitive data, and derive necessary remediation actions.
• Develop mechanisms to detect anomalies and attacks to initiate timely preventive measures.
• Monitor the global threat landscape and provide actionable security recommendations.
• Conduct deep-dive IT forensic investigations and create detailed incident reports.
• Advise internal projects on security-related issues and best practices.

Requirements

• 5+ years of professional experience in Incident Response, specifically leading medium to critical security incidents.
• University degree in Information Technology or a comparable field of study.
• Expert knowledge of SIEM systems (preferably Splunk), SOAR tools, and EDR solutions.
• Strong understanding of security frameworks including ISO 27001, NIST, and MITRE ATT&CK.
• Fluent business English (B2+ level) for professional communication.
• Ability to work the fixed afternoon shift (13:45 – 22:00h), Monday to Friday.
• Proven hands-on experience in triage, containment, and end-to-end security investigations.

Preferred Qualifications

• Advanced digital forensics skills, including timeline reconstruction across Windows, macOS, Linux, and cloud environments.
• Experience with cloud incident response, including cloud-native logging and identity systems.
• Knowledge of application security and investigating application-layer attacks or SaaS-specific threats.

Benefits

• Opportunities for significant professional growth, development, and promotion within a large Cyber Security organization.
• Support for continuous learning through a wide range of education and training options.
• A work environment that combines the agility of a tech company with the stability of the Schwarz Group.

About the Company

Schwarz Digits creates the technological foundation for digital sovereignty in Europe. As the IT and digital division of the Schwarz Group, we develop and manage the IT infrastructures for major retail divisions like Lidl and Kaufland. We operate as an independent provider in the external market, offering core services in Cloud, Cyber Security, Data & AI, Communication, and Workspace.