Jan Hoff Headshot

Jan Hoff

Digital Forensics and Incident Response Lead, Principal Industrial Incident Responder

Jan Hoff leads the Digital Forensics and Incident Response (DFIR) function at Dragos, Inc. where he and his team focus on using digital forensics to do incident response and help build new capabilities for detecting attacks. He started as a Principal Industrial Incident Responder analyzing and handling cybersecurity incidents in industrial environments.

Prior to joining Dragos, Jan has been protecting critical infrastructures for over a decade on the defensive and offensive track. He started his career as a consultant and sysadmin for control centers and worked at KPMG as a consultant in national and international projects for German government and private companies. He moved on to work at two of Europe’s major energy companies (RWE and E.ON) defending networks in IT and OT as well as improving the information security organization. Finally, Jan built the Red/Purple Team for IT and OT at E.ON. Additionally, Jan gives lectures on forensics, incident response and offensive security at a University of Applied Sciences in Germany.

  • M.Sc. Praktische Informatik (Practical Computer Science), Fernuniversität Hagen
  • B.Sc. Wirtschaftsinformatik (Business Computer Science), Carl von Ossietzky Universität Oldenburg
  • GIAC Certified Network Forensic Analyst, SANS
  • Offensive Security Certified Professional, Offensive Security
  • GIAC Certified Forensic Analyst, SANS
  • IT-Forensiker and EDV-Sachverständiger, modal
  • Certified Information Security Manager (not maintained), ISACA
  • ISO/IEC 27001 Lead Auditor, KPMG
  • Certified Information Systems Auditor (not maintained), ISACA
  • Certified Ethical Hacker CEH (not maintained), EC-Council
  • Licensed Penetration Tester LPT (not maintained), EC-Council