Manager Digital Forensics & Incident Response (DFIR) – Cyber Security
EY
Hannover, Lower Saxony
The Role
The position leads digital forensic investigations and incident response cases spanning endpoint, network and cloud platforms including M365, Azure and AWS. Day-to-day responsibilities include reconstructing attack chains, conducting live-response containment measures, and managing technical and executive-level reporting from initial triage through to management briefings.
Skills & Experience
Candidates should bring four to seven years of hands-on incident response and digital forensics experience, with strong knowledge of threat analysis, DFIR tooling and cloud forensic techniques. Proficiency in modern attack vectors and fluency in both German and English at C1 level or above are required.
Who It Suits
This role suits an experienced DFIR practitioner ready to step into a managerial position, comfortable balancing technical investigation work with client communication and team leadership. Those with a background in professional services or consulting environments, and an interest in developing DFIR methods and threat-hunting approaches, will thrive here.
Typical advertised salary for Digital Forensics roles in Germany: €51,000–€75,000 (median €51,000 — from 18 recent listings analysed by Forensic Focus).
Learn More/Apply
