Lead Cyber Security Specialist – Digital Forensics
Ministerie van Defensie
Zeist, Utrecht
The Role
Working within a dedicated DFIR team at a national defence cyber security centre, this role involves leading and coordinating complex digital forensic investigations and incident response activities. Day-to-day responsibilities include analysing cyber incidents, directing technical compromise investigations, supporting recovery efforts, and advising defence units on improving their digital resilience.
Skills & Experience
Candidates require at least five years of experience in cybersecurity and digital forensics, with deep knowledge of networks, malware analysis, and detection techniques. Proficiency in scripting languages such as Python and PowerShell is essential, as are relevant SANS/GIAC certifications. Experience developing hypothesis-driven threat hunting strategies is also required.
Who It Suits
This position suits an experienced DFIR professional ready to take a lead technical role in a high-stakes government defence environment. Those with a strong investigative background, a collaborative mindset, and the ability to communicate complex forensic findings clearly to stakeholders at all levels will thrive here.
Typical advertised salary for Digital Forensics roles in Netherlands: €53,000–€68,000 (median €59,000 — from 17 recent listings analysed by Forensic Focus).
Compare Digital Forensics salaries in Netherlands →
Certifications mentioned: SANS — find training for these on the DFIR Training Finder.
