CSIRT Member

Sophie Cartier

Due to a rapidly growing volume of engagements, we are looking for an Incident Response and Forensic Analyst to join our Incident Response Team. The ideal candidate brings solid expertise and hands-on experience to help protect our customers from cyberattacks.

Join our team and defend the digital future with us!

Your tasks

• Investigate and triage suspicious activity on workstations and information systems, from initial doubt to confirmed incident.
• Assist clients in managing security incidents, including APT intrusions, ransomware, BEC, data exfiltration, insider threats, web application compromises, phishing and credential theft, etc.
• Conduct proactive threat hunting to identify past or ongoing compromises.
• Lead kick-off meetings and present clear, actionable analyses to clients.
• Collaborate closely with the SOC to improve real-time detection capabilities.
• Contribute to the full range of team activities, including tabletop exercises and threat intelligence.
• Enhance team expertise by enriching methodologies, sharing research (tools, articles, insights), and developing and testing tools.
• Build and deliver training sessions in academic or professional environments.
• Promote CSIRT activities through impactful publications.

Your Skills

• At least 3 years in a SOC/CSIRT environment, including 2 years of hands-on incident response involving advanced threats (APT, ransomware, BEC).
• Deep understanding of operating system internals and/or reverse engineering (Windows internals, Win32 API, Active Directory, GNU/Linux), as well as hands-on forensics and incident response in public cloud environments (Azure/AWS/GCP, including M365/Entra ID).
• Familiarity with incident response tools and processes (e.g. Velociraptor, KAPE, Plaso).
• Proficiency in scripting or development to automate repetitive tasks, such as intrusion detection scenarios.
• You are willing to work at our office in Aarau and participate in a 24/7 on-call rotation, with potential emergency travel to customer sites.
• Fluency in German and strong English skills are a must. Knowledge of French is a plus

Job Ref: bkNYT0leekVZXl9GS15DRUQQSVlDWF5qWVpJWQRJQg==