Manager Digital Forensics & Incident Response (DFIR) – Cyber Security (w/m/d)

Berlin

Hybrid · Manager · Full-time

The Role

This position leads digital forensic investigations and incident response engagements across endpoint, network, and cloud environments. Day to day, the work spans analysing cyberattacks, reconstructing attack chains, conducting live-response actions, and delivering clear management reporting from initial triage through to resolution.

Skills & Experience

Candidates should bring four to seven years of hands-on incident response and digital forensics experience, strong familiarity with DFIR tooling, cloud forensics across M365, Azure, and AWS, and proficiency in threat analysis and threat hunting. Business-level German and English at C1 or above are required.

Who It Suits

This role suits an experienced DFIR practitioner ready to step into a leadership position, managing both technical investigations and client communications. Those who thrive in fast-moving, complex environments and enjoy developing methodologies, driving automation, and working across diverse national and international engagements will find it a strong fit.

Typical advertised salary for Digital Forensics roles in Germany: €51,000–€74,000 (median €51,000 — from 13 recent listings analysed by Forensic Focus).

Learn More/Apply

Applications are handled entirely by the employer or the original listing site. Forensic Focus aggregates and summarises public listings; details can change after publication — always confirm on the employer's page.