Senior Cyber Response Analyst / Active TS/SCI

The Role

This position leads incident response operations for high-severity cyber events affecting DoDIN-Europe, conducting malware analysis, memory forensics, and digital investigations to determine root cause and adversary tactics. The analyst manages SIEM alert triage, refines detection logic, and produces technical and executive-level threat intelligence and incident reports.

Skills & Experience

Candidates must hold an active TS/SCI clearance. Key technical competencies include memory forensics, static and dynamic malware analysis, artifact examination, and SIEM management using Elastic Stack or Splunk. Experience developing correlation rules and communicating indicators of compromise to both technical and non-technical stakeholders is essential.

Who It Suits

This role suits a senior-level cyber analyst with a background in defence or government security operations who is comfortable leading complex investigations in a high-pressure environment. Those experienced working within DoD or military frameworks, particularly coordinating across multiple stakeholder organisations, will thrive in this on-site Wiesbaden posting.