Cyber Crime Incident Responder
techculture GmbH
Cologne, North Rhine-Westphalia
The Role
This position involves investigating and containing sophisticated cyberattacks, including APT campaigns, ransomware, and complex intrusions across national and international engagements. Practitioners conduct forensic analyses to secure digital evidence, analyse attacker infrastructures, and collaborate directly with agencies such as Interpol, Europol, and the FBI using OSINT techniques.
Skills & Experience
Candidates require at least three years of experience in incident response or digital forensics, alongside a relevant degree. Fluency in both German and English is essential. Relevant certifications are advantageous, particularly ISO/IEC 27035 Lead Incident Manager and SANS FOR508. Experience developing forensic methodologies, playbooks, and response processes is also expected.
Who It Suits
This role suits experienced forensic professionals who thrive under pressure and adapt quickly to complex, high-stakes environments. Those with a strong interest in international law enforcement collaboration and attribution work, and who are motivated to continuously refine investigative processes within an elite, close-knit team, will find this position particularly rewarding.
Typical advertised salary for Incident Response roles in Germany: €81,000–€115,000 (median €86,000 — from 10 recent listings analysed by Forensic Focus).
Compare Incident Response salaries in Germany →
Certifications mentioned: SANS — find training for these on the DFIR Training Finder.
