(Senior) Cyber Security Expert (m/f/d) DFIR, Adversary Operations & Assessments
About the Company
This position is advertised for TÜV Informationstechnik GmbH in full-time or part-time (min. 24h/week)
TÜV Informationstechnik (TÜVIT) stands for 100 percent IT security. It is part of our DNA – and has been since 1995. IT security is not a trend or a hype for TÜVIT, but rather the mission to which all our employees are dedicated. Our experience and competencies are completely focused on security in information technology. Over 50 percent of DAX 30 companies and numerous international firms already benefit from TÜVIT-tested security. Because trust in the security of IT products is a major competitive advantage.
What you will move with us
You are part of our Cyber Security & Reaction Service team and support national as well as international customers in the professional handling of IT security and compliance incidents – independently, structured, and effective.
You take over the incident handling of security incidents (DFIR case) in critical situations: from the independent analysis and reconstruction of complex attacks along the Kill Chain to the derivation of reliable measures for containment and hardening.
You develop and evaluate detection and response concepts (SIEM, EDR/XDR, SOAR), perform security, compromise, and incident readiness assessments, and specifically close security gaps in processes and technologies.
You perform penetration tests as well as Adversary Operations (Red/Purple Teaming, Threat Emulation according to MITRE ATT&CK) to simulate real attacker tactics and measurably improve detection & response capabilities.
You act as a technical consultant and project lead, working closely with SOC, IT, and management teams on the customer side, contributing your expertise to the further development of services, concepts, and legally admissible expert reports, and presenting results tailored to the audience – from technical deep dives to executive summaries.
What defines you
Completed university degree in a STEM field with a focus on IT security/Digital Forensics or a comparable field with several years of relevant practical experience.
Sound knowledge of network technologies and operating systems as well as several years of practical experience in Digital Forensics & Incident Response (DFIR) and adjacent security disciplines (e.g., Threat Hunting, SIEM, SOC/CSIRT, EDR/XDR, Red/Purple Teaming) as well as a good understanding of attack and defense models such as MITRE ATT&CK or Kill Chain.
Demonstrable professional qualification in the DFIR environment, e.g., as a BSI-certified incident expert, supplemented by recognized certifications such as GCFE, GNFA, GCIH, or comparable qualifications.
Independent, structured, and responsible way of working with high team and customer orientation, enjoyment of collaboration and knowledge transfer, as well as a confident appearance – even in time-critical deployment situations.
Strong, analytical way of thinking and the ability to prepare complex technical facts and communicate them in a target-group-oriented manner across various hierarchical levels.
Very good English skills in spoken and written form as well as the willingness to undertake national and international business trips within the framework of customer projects and DFIR deployments.
What we offer
A secure job in a dedicated team with flat hierarchies.
30 days of vacation + Dec 24th and 31st off, flexible working hours of 38.5 hours/week (full-time) or at least 24 hours/week (part-time) as well as the possibility of home office.
Attractive and high-quality work equipment.
E-charging stations for vehicles.
Group-wide onboarding event, individual and subject-specific training, possibility to participate in renowned conferences, and access to virtual learning platforms.
Support through our family service - childcare, care topics, tutoring offers, and much more.
Extensive additional benefits such as free coffee and mineral water, discounted meals in the company restaurant, JobRad, access to the Corporate Benefits portal, company sports and health offers, company pension scheme, and discounted TÜV inspections for all vehicles registered to you, and much more.