Senior Cyber Security Specialist
Haystack
Germany
The Role
This role centres on leading incident response engagements for national and international clients, analysing complex attacks across the kill chain and deriving containment and hardening measures. Day-to-day work also includes developing detection and response concepts, conducting security assessments, performing penetration tests, and advising client SOC, IT, and management teams.
Skills & Experience
Candidates need a strong background in Digital Forensics & Incident Response, with practical experience in threat hunting, SIEM, EDR/XDR, and red/purple teaming. Recognised certifications such as GCFE, GNFA, GCIH, or BSI-certified incident expert status are expected, alongside solid knowledge of network technologies and operating systems.
Who It Suits
This position suits an experienced DFIR professional who is equally comfortable leading critical incident engagements and advising senior stakeholders. Those who enjoy varied client-facing work, international travel, and continuous professional development in a collaborative, flat-hierarchy environment will thrive here.
Typical advertised salary for Incident Response roles in Germany: €81,000–€110,000 (median €86,000 — from 13 recent listings analysed by Forensic Focus).
Compare Incident Response salaries in Germany →
Certifications mentioned: GCFE · GNFA · GCIH — find training for these on the DFIR Training Finder.
