CERT Incident Responder - Full Remote - German speakers

Join Stoïk as a CERT Incident Responder, where you will manage the full lifecycle of cyber incidents for our policyholders. You will lead incident response engagements, conduct forensic investigations, produce incident reports, provide crisis communication, support underwriters with technical risk assessments, and contribute to internal improvements. The ideal candidate has 3+ years of experience in DFIR or CERT roles, proven experience leading ransomware incident responses, and is fluent in English and a native language (German, Italian, Spanish, French, etc.). This is a fully remote position.

• Lead incident response engagements (ransomware, data breaches, BEC) from containment through remediation.
• Conduct forensic investigations using KAPE, Velociraptor, and EDR platforms (CrowdStrike Falcon, SentinelOne).
• Produce clear, client-facing incident reports for both technical and executive audiences.