Incident Response Lead – Germany *
Coalition - Germany
Berlin
The Role
This position leads cyber incident response engagements for customers across Germany and the wider region, conducting forensic investigations across Windows, Linux, and macOS environments, analysing diverse log sources, coordinating with vendors and team members, producing case reports, and advising clients on remediation strategies and information security risk.
Skills & Experience
Candidates require hands-on experience with digital forensics tooling, log analysis across firewall, web, and database sources, and IOC identification. The ability to communicate complex technical findings clearly to both technical and non-technical stakeholders is essential, as is fluency in both German and English. Awareness of the current regulatory landscape is expected.
Who It Suits
This role suits an experienced incident responder who thrives in a fast-paced, investigative environment and is comfortable operating with autonomy. Someone eager to help build out a regional practice from an early stage, contribute to internal process development, and stay current with evolving threat landscapes and security trends will find it particularly rewarding.
Typical advertised salary for Incident Response roles in Germany: €81,000–€115,000 (median €86,000 — from 10 recent listings analysed by Forensic Focus).
Learn More/Apply





