(Senior) Digital Forensics & Incident Response Specialist

What to expect

Do you feel at home in security-sensitive IT environments? For incident response deployments at customers as well as to significantly support our internal IT projects, we are looking for an experienced, passionate, and action-oriented Senior Digital Forensics & Incident Response Specialist.

As a Senior Digital Forensics & Incident Response Specialist, you support organizations of various sizes, industries, and security maturity levels in their most difficult hours during a cyber incident together with experienced team colleagues. You conduct in-depth investigations on systems or networks and help customers prepare for such situations (Digital Forensics & Incident Response Consulting).

Your diverse range of tasks includes the following:

• Incident Response & Customer Support: You are the cyber fire brigade for our customers. In the event of a cyber incident, you accompany and support them without hesitation and in close exchange – on-site or remotely.
• System Operation & Development: You apply your experience in IT operations and system engineering to operate and further develop the IT infrastructure of the DFIR team together with IT.
• Crisis Preparedness & Project Management: In quieter phases, you prepare customers for cyber incidents, conduct tabletop and crisis management exercises, and support them in further developing their SOC and CSIRT capabilities.
• Digital Forensics & Analysis: As a specialist in digital forensics and incident response, you perform in-depth technical analyses, professionally secure evidence, investigate various IT systems, and analyze malware.
• Reporting: You always document your findings precisely, with high quality, structured, and target group-oriented in written final reports in German or English.
• On-call Duty: You provide on-call service every 6–8 weeks (24/7).

What we offer you

We at Oneconsult are passionate about increasing cyber resilience, focus on structure, quality, and see ourselves as mentors. You are at the center of successfully carrying out internal and external IT projects. You are in the midst of a constantly learning organization – helping team colleagues and you will always find someone who takes time for you and supports you when things get challenging.

You can also look forward to the following:

• Your voice counts! We take time for the opinions and ideas of our employees and incorporate them into decisions
• A "du" culture where mutual respect, tolerance, and appreciation are lived, and feedback is an important part of our daily routine
• We offer you scope for action and decision-making so that you can gain your own experiences and develop further
• Modern and spacious offices, 2 minutes from Saalsporthalle and Sihlcity train stations, with ergonomic workstations with sit/stand desks
• Possibility for home office
• Participation in health-promoting measures up to 500 CHF
• Smartphone with flat-rate subscription
• Team events
• Internal and external training opportunities
• 40-hour week and at least 5 weeks of vacation
• Additional day off on your birthday
• ...and much more

What you bring

You love challenges and are not easily unsettled. You can also be a night owl sometimes and bring the willingness and flexibility for 24/7 on-call duty and emergency deployments.

Then we look forward to meeting you personally if the following qualifications round off your profile:

• Solid basic training in computer science
• Specialization and/or professional experience in cybersecurity
• You convince customers with your professional appearance as well as your pronounced communication and presentation skills
• Confident German and good English skills (spoken and written)
• French or Italian skills are an advantage
• Impeccable reputation (proof by current criminal record and debt collection register extract)

Have we ignited the fire in you? We look forward to your call or directly your application documents. It is important to us to feel your passion for cybersecurity in your insightful application, so we leave it up to you how you want to convince us of it.

Please only direct applications: inquiries from recruiters / headhunters are not desired.