Overall Technical Lead for Incident and Malware Analysis (m/f/d)

Senior technical management in IT-Forensics with the focus (IT-Safety) incident analysis and malware analysis, in particular by: Responsible initiation, planning, implementation and coordination of outstanding, innovative research and development projects Interim development and implementation of solution proposals for highly complex problems, for example by developing and adapting specialist software tools Consideration, evaluation, optimization and automation of highly geared and often time-critical work processes Leading cooperation in and management of operational situations in outstandingly complex cases, in particular by: Handling operations and large-scale damages Recognize technical approaches for the targeted information collection in dynamic “ad hoc” locations with resolution of regularly existing target conflicts IT security with a focus on networkforensic data protection and highly complex, unknown server structures Conducting outstanding complex incident and malware analyses under high time pressure Preparation and approval of investigation reports and/or opinions and their representation in court Participation in police training For the following reasons, the readiness for flexible working time design is assumed: Multi-activity missions, in the context of national and international cooperation, take place occasionally (approximately 1 – 2 per year) and are in most cases well planned. Participation in multi-day operating situations takes place occasionally (approximately 1 – 2 per year), usually takes place, but is spontaneously required in exceptional cases. If necessary, multi-working by arranged services outside the regular working time is necessary, e.g. in case of support in managing BAO charges and in the context of executive measures. Participation in the IT-Forensik-Rufwillingness. The amount of time is usually a few weeks per year per person. Special organization These framework conditions are dynamic. Changes related to the perception of tasks may require adjustments or shifts.

Completed academic studies (university diploma, magistrate or master) of computer science or a comparable completed academic studies, e.g. electrical engineering, physics, mathematics, with IT orientation and At least 5 years of relevant practical experience in IT security incident analysis, such as “Incident Response”, “Penetration Testing”, “Development with Vulnerabilities, Attack Vectors and Patterns”, malware analysis and driving licence of class B or Class III (must be present at the latest at the time of adjustment)

On top You bring outstanding and highly specialized, technical knowledge in the field of IT-Forensics or IT-Safety/Malware Analysis. You have many years of experience in the project management of highly complex research and development projects according to scientific standards in the field of IT. You bring many years of experience (at least five years) in software development/programming with You have good knowledge of English (level B1 [GER]); a corresponding proof in accordance with the common European reference framework for languages is desirable. Good cooperation and team-oriented action are of course for you. You have a very good oral and written expression, have good cognitive and organizational skills, are resilient and independent and flexible in the task.

A good feeling: meaningful job in an upper federal authority with exciting, versatile and challenging tasks Team culture: Open communication, flat hierarchies and work in in interdisciplinary teams focusing on collaboration, creativity and mutual support Work-life balance: 30 days vacation, overtime compensation, 24. and 31.12. Working free, flexible working time, part-time in different models and the possibility of mobile work Always up to date: comprehensive internal and external training Remuneration: Group 15 TV EntgO Bund, Grouping according to tariff provisions TV EntgO Bund and present personal conditions, A 15 BBesO deposited, beaming in the presence of the conditions under civil and running conditions; Ordering officers to transfer to BKA