(Cloud) Incident Response Consultant

About Invictus Incident Response

We are a company specializing in incident response with a strong focus on the cloud. Our mission is to help organizations remain undefeated (Invictus) against cyberattacks. More and more incidents are occurring in the cloud, and we aim to be the very best at handling them. We are growing and looking for a Cloud Incident Response Specialist to join our team.

What will you do?

Help organizations affected by a cybersecurity incident in the cloud. Sometimes that means preserving digital evidence in cloud environments (AWS, Microsoft Azure/Entra ID, Google Cloud, and Microsoft 365) to investigate how attackers gained access. This includes analyzing log sources such as CloudTrail, Azure/Entra sign-in logs, and the Unified Audit Log; investigating business email compromise; and unraveling attacks targeting identity and SaaS platforms. You may also advise organizations on how to correctly mitigate an incident.

In addition to responding to cloud security incidents, you will spend time developing open-source tools to enable incident responders worldwide to do their work more effectively. Improving existing processes and tooling is also part of the role. We also expect you to contribute ideas and effort toward growing Invictus into the world’s most valuable incident response firm.

What does the ideal candidate look like?

• Experienced — This is not an entry-level position. We are looking for someone with 3 to 5 years of demonstrable incident response experience, preferably with a clear cloud component.
• Cloud knowledge — You are comfortable in at least one of the major public clouds (AWS, Azure/Entra ID, Google Cloud) and/or Microsoft 365, and motivated to deepen your knowledge of the others.
• Technical skills — Critical for solving the sometimes complex problems our clients face.
• Flexible — IR work is often difficult to plan. We expect a degree of flexibility and, when necessary, on-site support at client locations.
• Self-starter — Someone who can identify opportunities and act on them without waiting for direction from above.
• Accountable — You work primarily remotely or on-site at client locations. A strong sense of ownership and responsibility is essential to succeed in this role.
• Entrepreneurial mindset — Technical skills matter, but the ability to anticipate client needs and market shifts is equally important.
• Knowledge sharer — You enjoy sharing knowledge through blogs, presentations, or videos.
• Easy to work with — We have no room for egos. We are looking for someone who can both give and receive feedback gracefully.
• Education — A completed MSc. or BSc. in Computer Science or Computer Security/Forensics is a plus, not a requirement. Cloud certifications (e.g., AWS/Azure/GCP security) are also a plus.
• Dutch language — We are based in the Netherlands and many of our partners are Dutch, so Dutch-speaking candidates are preferred.

What do you get in return?

• Base annual salary between €70,000 and €85,000 depending on knowledge and experience
• Bonus based on individual and company performance
• The opportunity to become a stakeholder in Invictus through equity/stock options
• Training and development (e.g., cloud-focused certifications)
• Home office equipment provided

P.S. Recruiters, intermediaries, staffing agencies, and others active in the HR space: we are currently hiring directly only. Thank you for your understanding.