Manager Digital Forensics & Incident Response (DFIR) – Cyber Security

The Role

The successful candidate leads digital forensic investigations across endpoint, network, and cloud platforms, including M365, Azure, and AWS. Day-to-day responsibilities include conducting live-response measures, reconstructing attack chains, managing technical and client-facing incident response from initial triage through to management reporting, and advancing DFIR methods and threat-hunting capabilities.

Skills & Experience

Applicants should bring four to seven years of hands-on experience in incident response and digital forensics, with strong knowledge of DFIR tooling, threat analysis, and cloud forensics. Familiarity with modern attack vectors is essential. Business-level proficiency in both German and English (minimum C1) is required for client-facing work.

Who It Suits

This role suits an experienced DFIR practitioner ready to step into a managerial position within a consulting environment. Those who thrive in fast-paced, interdisciplinary teams, enjoy client communication alongside technical investigation, and are keen to shape methodology and mentor others will find it particularly rewarding.