IT Specialist for Incident Analysis (f/m/d)

Place of work: Wiesbaden, Meckenheim Scope of work: Full time/parttime Remuneration: EG 12 TV EntgO Covenant with the aim of beaming /state-like takeover to A 12 BBesO Application deadline: 24.07.2025 Start of work: at the next possible time Joblevel: Specialist Occupation: Education and studies 2. Professional group: Administration and communication Reference number: T-2025-48 Support us as an IT specialist / IT specialist (w/m/d) in the field of incident analysis of the Operational Operations and Investigation Support department. Work together with research, in the national and international context, in outstanding phenomena. Do the right thing and apply now!

Investigation of IT security incidents, partly in complex business environments, as part of national or international investigation procedures Analysis of server systems and network infrastructures, compilation of the trace position to a cross-device overall overview, accumulation of attack marks to a perpetrator or a perpetrator or grouping Operational support and advice in investigation procedures, including police executive measures for the purpose of IT security Processing of challenging, technical problems in application and investigation support (according to framework specifications) with appropriate documentation and reporting as well as, if necessary, Representation of opinions in court Cooperation in the automation of existing analysis and preparation processes, development of scripts (e.g. in Python) to optimize recurring analysis tasks Monitoring the technical development and technical assessment of the impact on police work Support for police training The willingness to design flexible working hours is assumed for the following reasons: Multi-day missions, in the context of national and international cooperation, take place occasionally (approximately 3 – 5 per year) – but in most cases well planned. Multi-day, operating situations take place regularly (about 5 – 10 per year) – usually planned, in exceptional cases also spontaneously. If necessary, additional work by arranged services outside regular working hours is necessary, for example in the case of support in managing BAO charges and in the context of executive measures. Participation in IT-Forensic readiness – the amount of time is usually a few weeks per year and person. These framework conditions are dynamic. Changes related to the perception of tasks may require adjustments or shifts.

Completed university studies (Diplom (FH) or Bachelor) of Computer Science or comparable completed university studies from the STEM area with IT orientation or comparable skills and experience, but at least a completed vocational training with IT equipment, and in addition a minimum of three years of professional experience in a corresponding profession or the corresponding comparable skills and experience, but at least a completed vocational training and, in addition, a minimum of six years of professional experience in a corresponding profession with IT orientation Class B driving licence On top They have practical experience in the field of IT-Forensics and incident analysis as well as in the handling of IT security incidents, e.g. in the context of pentesting or incident response. They have practical experience in software development or Programming, for example with script or high languages, such as Python, PHP, Ruby, C/C++, Java. They have experience in dealing with relevant software products from the field of incident analysis/incident repository, e.g. IoC scanners, triage software. They have knowledge of HTML, JavaScript and CSS as well as modern web technologies. They have good knowledge of English; proof of the common European reference framework for languages (level B1) is desirable. They are capable of team and communication, have a very good oral and written expression, have good cognitive and organizational skills, are resilient and independent and flexible in the task.

A good feeling: meaningful job in an upper federal authority with exciting, versatile and challenging tasks Work-life balance: 30 days vacation, overtime compensation, 24. and 31.12. work-free, flexible working hours, part-time in different models and the possibility of mobile work Connecting your working life with personal freedoms: Save time for your Sabbatical and realize your dreams! Remuneration: 12 TV EntgO Bund, A 12 BBesO deposit; Grouping according to tariff provisions TV EntgO Covenant and existing personal conditions, if there is no professional experience, the grouping into the pay group 11 or 10 TV EntgO Bund; beaming in the presence of the conditions laid down by the authorities; Ordering officers to transfer to BKA, BKA allowance JOBV1_EN