Digital Forensics Jobs: Germany
81 current openings, updated daily. Links to original listings.
Senior Consultant IT Forensik Incident Response
HiSolutions AG
Germany
Senior consulting role combining digital forensics and incident response, investigating cyberattacks, securing court-admissible digital evidence, analysing attack vectors, and supporting affected organisations through crisis containment and recovery — both remotely and on-site.
View Job(Senior) Manager – Digital Forensics / Cyber Forensics in Köln
Deloitte
Cologne, North Rhine-Westphalia
Lead digital and cyber forensics investigations into cybercrime and economic crime, managing incident response projects, developing forensic service offerings, and supporting business development across Germany.
View JobIT-Experte / Informatiker / IT-Forensiker beim Landesamt zur Bekämpfung der Finanzkriminalität Nordrhein-Westfalen (LBF NRW)
Ministerium der Finanzen des Landes Nordrhein-Westfalen
Düsseldorf
Join a state financial crime agency as a digital forensics specialist, securing and examining digital evidence from devices and cloud systems during search operations, supporting investigators across ten regional offices in North Rhine-Westphalia.
View JobWissenschaftliche Mitarbeiterin / wissenschaftlicher Mitarbeiter der forensischen Informations- und Kommunikationstechnik
Bundeskriminalamt
Wiesbaden, Hesse
Research scientist role at Germany's federal criminal police office, developing and validating new forensic methods for vehicle infotainment systems, including security feature bypass, reverse engineering, and publication of findings.
View JobCyber Security Analyst – Level 3
Finanz Informatik Technologie Service
Stuttgart, Baden-Württemberg
Senior SOC analyst role leading complex incident response and digital forensics investigations, conducting memory forensics and timeline analysis, performing malware analysis, driving detection engineering, and mentoring junior analysts within a financial-sector security operations centre.
View JobManaging Consultant Incident Management / DFIR
HiSolutions AG
Bonn
Lead incident response and DFIR engagements for clients, managing containment and forensic analysis both remotely and on-site. Mentor consultants, deliver resilience workshops, and help organisations recover from cyber incidents.
View JobSenior Consultant IT Forensik Incident Response
HiSolutions AG
Frankfurt am Main, Hesse
Join a cybersecurity consultancy to investigate IT security incidents, conduct digital forensic examinations, preserve court-admissible evidence, and support clients through crisis response, containment and recovery — both remotely and on-site.
View JobSenior Digital Forensics and Incident Response Consultant
NTT DATA Europe & Latam
Munich, Bavaria
Senior DFIR consultant role supporting clients across the full incident lifecycle — from preparation and IR planning through to forensic analysis, malware reverse engineering, root cause analysis, and management-level reporting.
View JobManager Digital Forensics & Incident Response (DFIR) – Cyber Security
EY
Hamburg
Lead digital forensic investigations and incident response engagements across endpoint, network and cloud environments, analysing cyberattacks, reconstructing attack chains and managing technical response from initial triage to executive reporting.
View JobManaging Consultant Incident Management / DFIR
HiSolutions AG
Berlin
Lead incident response and DFIR engagements for clients across Germany, managing containment, forensic analysis and recovery. Guide senior consultants, deliver resilience workshops, and help shape the firm's IR service offering.
View JobIT-Spezialist/in für Mobilfunkforensik
Land Niedersachsen
Lunenburg, Lower Saxony
A permanent, full-time mobile forensics specialist role within a regional police criminal investigation unit, responsible for forensic acquisition and analysis of mobile devices, court-ready reporting, malware detection, and delivering training to law enforcement staff.
View JobIncident Response Expert
Michael Page
Düsseldorf, North Rhine-Westphalia
A senior contract role developing and implementing incident response frameworks, playbooks and SOPs covering ransomware, identity compromise, cloud abuse and lateral movement, with advisory responsibilities across SOC and security teams.
View Job(Senior) Incident Responder
CANCOM
Hamburg
Join a security operations team handling incident response, threat hunting, and forensic investigations across Windows, Linux, and cloud environments. Advise clients on remediation, conduct workshops, and participate in 24/7 on-call support for critical security events.
View Job(Senior) Incident Responder
CANCOM
Aachen, North Rhine-Westphalia
Join a managed security team handling complex security incidents, performing forensic investigations across Windows, Linux and cloud environments, conducting threat hunting, and advising clients on remediation and cyber resilience strategies.
View JobSenior Cyber Response Analyst
Strategic Resilience Group LLC
Cologne Bonn Region
Senior analyst role combining advanced cyber incident response with malware and forensic analysis of drives, packet captures and network logs. Requires coordinating investigations and communicating findings to both technical and non-technical stakeholders.
View JobSenior Consultant IT Forensik Incident Response
HiSolutions AG
Berlin
Senior consultant role combining digital forensics and incident response, supporting organisations through cyber crises — from forensic investigation and evidence acquisition to attack containment, emergency operations and full service restoration.
View JobSenior Digital Forensics and Incident Response Consultant
NTT DATA Europe & Latam
Ettlingen, Baden-Württemberg
A senior DFIR consultant role delivering forensic analysis at host and network level, conducting malware reverse engineering, managing incident response for enterprise clients, and producing technical and management-level reports.
View JobÜbergeordnete Technische Leitung für den Bereich Vorfall- und Malwareanalyse
Bundeskriminalamt
Wiesbaden, Hesse
Senior technical leadership position within a national criminal investigation authority, overseeing IT forensics, incident response, and malware analysis operations, including complex case leadership, evidence preservation, expert reporting, and R&D project coordination.
View JobSenior Consultant Cyber – Digital Forensic Incident Response in München
Deloitte
Munich, Bavaria
Join a global cyber consulting team to support clients in investigating and responding to cybercrime incidents. Conduct digital forensic analysis, secure court-admissible evidence, and advise on cyber prevention and regulatory compliance.
View JobSenior Digital Forensics and Incident Response Consultant
NTT DATA Europe & Latam
Rosenheim, Bavaria
Join a specialist DFIR team supporting clients across security incident preparation and response, conducting host and network forensic analysis, malware reverse engineering, root cause analysis, and producing technical and management-level incident reports.
View JobManager Digital Forensics & Incident Response (DFIR) – Cyber Security
EY
Hannover, Lower Saxony
Lead digital forensic investigations and incident response engagements across endpoint, network and cloud environments. Analyse cyberattacks, reconstruct attack chains and drive DFIR methodology development within a global professional services firm.
View JobManager Digital Forensics & Incident Response (DFIR) – Cyber Security
EY
Mannheim, Baden-Württemberg
Lead digital forensic investigations and incident response engagements across endpoint, network and cloud environments. Analyse cyberattacks, reconstruct attack chains, drive live response, and develop DFIR methodologies and threat-hunting approaches for national and international clients.
View Job(Senior) Manager – Digital Forensics / Cyber Forensics
Deloitte
Düsseldorf, North Rhine-Westphalia
Lead forensic investigations into cybercrime and economic crime, managing digital and cyber forensic projects, developing service offerings, and supporting business development across Germany at a senior consulting level.
View JobIT-Forensiker*in
Bafin
Bonn, North Rhine-Westphalia
Join a government financial regulator's forensics competency team to conduct IT forensic investigations at supervised financial institutions, analyse digital artefacts, recover data, and produce court-admissible reports in an interdisciplinary environment.
View JobSenior Consultant Digital Forensics & Incident Response – Forensics
EY
Hamburg
Join a forensic consulting team combating financial crime and cyber threats. Conduct digital forensic investigations, analyse system artefacts, support live-response engagements, examine malicious files, and deliver IR workshops and assessments for national and international clients.
View JobSenior Consultant Cyber – Digital Forensic Incident Response
Deloitte
Leipzig, Saxony
Join a global cyber consulting team conducting digital forensic and incident response investigations, including evidence preservation, cybercrime analysis, regulatory compliance, and advising clients on cyber prevention and security standards.
View JobManager Digital Forensics & Incident Response (DFIR) – Cyber Security
EY
Düsseldorf, North Rhine-Westphalia
Lead digital forensic investigations and incident response engagements across endpoint, network, and cloud environments. Analyse cyberattacks, reconstruct attack chains, conduct live-response measures, and develop DFIR methodologies and threat-hunting approaches for national and international clients.
View JobSenior Consultant Cyber – Digital Forensic Incident Response in Frankfurt (Main)
Deloitte
Frankfurt, Hesse
Join a global consulting team delivering digital forensic and incident response services. Conduct forensic analysis, evidence preservation, cybercrime investigation, and cyber-prevention advisory for clients across diverse sectors in Germany.
View JobIT-Forensik Analyst – Datensicherung
Hassmann IT-Forensik GmbH
Teltow, Brandenburg
Join a growing IT forensics team handling evidence seizure and preservation of devices including PCs, smartphones and consoles, plus data analysis, documentation and assistance in preparing court-admissible expert reports.
View JobCyber Crime Incident Responder
techculture GmbH
Cologne, North Rhine-Westphalia
Investigate and contain advanced cyberattacks including APT campaigns and ransomware, conduct forensic evidence analysis, collaborate with Interpol/Europol/FBI, and develop IR playbooks and forensic methodologies for critical infrastructure clients.
View JobSenior Security Analyst Digitale Forensik im Security Operations Center (SOC)
BWI GmbH
Cologne, North Rhine-Westphalia
Senior digital forensics analyst role within a military SOC, conducting forensic investigations, evidence preservation for disciplinary and criminal proceedings, coordinating with law enforcement, and supporting IT security operations for the German armed forces.
View JobFachinformatiker als IT Consultant
intersoft consulting services AG
Hamburg
Join a specialist DFIR team in Hamburg, handling IT security incidents, conducting forensic analysis and documentation, advising on IT infrastructure, and performing vulnerability assessments and emergency exercises for clients on-site.
View JobSenior Security Incident Responder
techculture GmbH
Berlin
Lead incident response engagements for SMEs impacted by ransomware and BEC attacks, conducting forensic analysis, log review, containment, and producing detailed forensic reports for cyber insurers. Fully remote within Germany.
View JobConsultant IT-Forensik und Incident Response
intersoft consulting services AG
Hamburg
Join a specialist DFIR consultancy team in Hamburg, handling IT security incidents, forensic analysis and reconstruction of attacks, vulnerability assessments, and producing forensic documentation for clients across various sectors.
View JobCyber Security Specialist
Hyra
North Rhine-Westphalia
Senior DFIR specialist managing full-cycle incident response, compromise assessments, and detection strategy development. Conducts penetration tests, red/purple teaming, and delivers forensic reports for national and international clients across complex security incidents.
View JobForensics Consultant
Lineal
Berlin
Lead digital forensic investigations across PCs, mobile devices, servers and cloud systems; conduct forensically sound data collection, consult with clients on best practices, and manage projects end-to-end within a global forensics team.
View JobCyber Security Analyst – Level 3
Finanz Informatik Technologie Service
Munich, Bavaria
Senior SOC analyst role leading complex incident response and digital forensics investigations, including memory forensics, timeline analysis, malware analysis, threat hunting, and detection engineering using MITRE ATT&CK, SIEM, EDR and XDR platforms.
View JobCyber Security Analyst – Level 3
Finanz Informatik Technologie Service GmbH & Co. KG
Deutschland
Senior SOC analyst role leading complex incident response, conducting deep digital forensics (memory, timeline, artifact analysis), performing malware analysis and threat hunting, developing SIEM/EDR detection rules, and mentoring junior analysts.
View JobSenior Cyber Response Analyst / Active TS/SCI
Peraton
Wiesbaden
Senior analyst leading cyber incident response operations for DoDIN-Europe, conducting malware analysis and digital forensic investigations, managing SIEM workflows, producing threat intelligence reports, and mentoring junior analysts. Requires active TS/SCI clearance.
View JobIT-Forensischer Analyst
FZ forensic.zone GmbH
Mittweida
Full-time IT forensic analyst role involving documentation, preservation and analysis of digital evidence, recovery of deleted data, and preparation of expert forensic reports. Suitable for graduates or students in digital forensics or computer science.
View JobSenior Digital Forensics and Incident Response Consultant
NTT DATA Europe & Latam
Hamburg
Experienced DFIR consultant needed to support clients during security incidents, performing host and network forensic analysis, malware reverse engineering, root cause analysis, and proactive IR planning using frameworks such as MITRE ATT&CK.
View JobSenior Consultant Cyber – Digital Forensic Incident Response
Deloitte
Düsseldorf, North Rhine-Westphalia
Join a global consulting team delivering digital forensic and incident response services, including cyberforensic analysis, court-admissible evidence handling, cybercrime investigation, and regulatory compliance advisory for clients across multiple sectors.
View JobCyber Security Specialist
Haystack
Germany
Advise national and international clients on IT security incidents, handling DFIR cases including attack reconstruction and containment. Develop detection and response concepts, conduct security assessments, and perform penetration tests and red/purple team operations.
View JobIT-Forensikerin/IT-Forensiker
Land Niedersachsen
The Oldenburg Munsterland
IT forensics investigator role within a tax investigation authority, analysing digital evidence in tax crime cases, including reverse engineering of IT systems, POS manipulation detection, source code analysis, and cryptocurrency seizure.
View JobSenior Consultant Digital Forensics & Incident Response – Forensics
EY
Stuttgart
Senior DFIR consultant role based in Stuttgart with nationwide scope, focusing on digital forensics and incident response investigations for a consulting practice. Competitive salary offered.
View JobSenior Cyber Incident Response Investigator
Accenture
Essen
Investigates and responds to complex cyber incidents end-to-end, conducting host, network and log forensics, malware analysis, threat hunting and remediation planning for clients across international environments.
View Job(Senior) Expert*in- IT-Forensik
Bafin
Bonn, North Rhine-Westphalia
Plan, conduct and document IT forensic investigations at supervised financial institutions, recover and analyse digital evidence, produce court-admissible reports, develop forensic infrastructure, and advise internal teams on forensic methods and tools.
View JobDigital Forensic Analyst
ZEISS Group
Oberkochen, Baden-Württemberg
Conduct digital forensic investigations into security incidents, collect and preserve evidence, support the CSIRT with expert analysis, perform threat hunting, produce forensic reports, and deliver training on forensic best practices.
View JobSenior Cyber Incident Response Investigator
Accenture DACH
Munich, Bavaria
Investigate and respond to complex cyber incidents end-to-end, performing host, network and malware forensics, threat hunting, and remediation planning for global clients in a consulting environment. Requires strong IR and digital forensics expertise.
View JobCyber Security Analyst – Level 3
Finanz Informatik Technologie Service
Nuremberg, Bavaria
Senior SOC analyst role leading Level 3 incident response, conducting deep digital forensics (memory, timeline, artefact analysis), proactive threat hunting, malware analysis, detection engineering, and mentoring junior analysts in a financial sector SOC.
View JobSenior Security Incident Responder
Allianz
München
Senior incident responder leading complex cybersecurity investigations across a global enterprise environment, coordinating stakeholders, developing internal tooling, analysing attack patterns, and contributing to 24/7 on-call response and security posture improvements.
View JobSenior Consultant Digital Forensics & Incident Response – Forensics
EY
Mannheim, Baden-Württemberg
Join a Forensic & Integrity Services team conducting digital forensic investigations and incident response. Analyse cyber incidents at endpoint, network and log level, examine system artefacts, support live-response operations and produce technical documentation for clients.
View JobManager Digital Forensics & Incident Response (DFIR) – Cyber Security
EY
Munich, Bavaria
Lead digital forensic investigations and incident response engagements covering endpoint, network and cloud environments. Analyse cyberattacks, reconstruct attack chains, drive containment, and develop DFIR methodologies and threat-hunting approaches for national and international clients.
View JobIncident Analyst (full time or student program)
ERNW Research GmbH
Heidelberg, Baden-Württemberg
Join an incident response team working on incident analysis, malware analysis, and forensics projects. Involves file system, memory and network forensics, log analysis, and scripting, with opportunities across consulting, training and security assessments.
View JobExperte Computer Incident Response Team (CSIRT)
BLG LOGISTICS GROUP AG & Co. KG
Bremen
Join a logistics group's CSIRT team to build and operate incident response capabilities, develop playbooks and runbooks, conduct forensic analysis, manage the full IR lifecycle, and drive continuous security improvement.
View JobCyber-Analystin / Cyber-Analyst
Bundeskriminalamt
Wiesbaden, Hesse
Conduct technically-led cybercrime investigations including darknet platform analysis, cryptocurrency transaction tracing, digital forensics, infrastructure reconnaissance, and operational technical measures for a national criminal investigations authority.
View JobIncident Response Lead – Germany *
Coalition - Germany
Berlin
Lead cyber incident response engagements in Germany, conducting forensic investigations, analysing Windows/Linux/macOS systems, examining logs, identifying IOCs, and advising customers on remediation and long-term security improvements. Bilingual German/English required.
View JobCyber Defense Expert – Threat Detection & Response Delos Cloud
Delos Cloud GmbH
Eschborn
Join a sovereign cloud SOC protecting Germany's public sector Azure infrastructure. Monitor threats, triage alerts, coordinate incident response, and support forensic investigations, malware analysis, and threat hunting against advanced persistent threats.
View JobSenior Digital Forensic Specialist
Security Research Labs
Berlin
Lead forensic investigations, compromise assessments, and incident response engagements for critical infrastructure clients. Conduct threat hunting, produce technical reports, mentor junior consultants, and help organisations build long-term cyber resilience.
View JobCybersecurity Incident Response & Digital Forensics Manager
MAM Gruppe
Hamburg
Lead full-cycle incident investigations for a global security team based in Hamburg, covering root cause analysis, timeline building, ransomware and BEC cases, MSP technical direction, and IR playbook development.
View JobIT-Forensiker
LeySelect GmbH
Frankfurt Rhine-Main
Junior IT forensics role supporting post-cyberattack investigations, including digital evidence identification and preservation, deleted data recovery, malware analysis, attack reconstruction, and legally compliant reporting alongside experienced colleagues.
View JobIT-Forensik Analyst/Senior – Begutachtung
Hassmann IT-Forensik GmbH
Saarbrücken, Saarland
Join a specialist IT forensics team producing court-admissible expert reports. Responsibilities include evidence preservation, data processing and documentation. Suits qualified IT professionals at analyst or senior level, based onsite in Saarbrücken.
View JobGERMAN SPEAKING Senior Digital Forensics and Incident Response (DFIR) Consultant
Telescope Recruitment
Germany
Senior DFIR consultant role responding to ransomware and cyber-attacks for global clients. Responsibilities include forensic imaging, Windows forensics, IOC analysis, log review, timeline building, and delivering high-quality incident response reports. German fluency required.
View JobIT-Forensiker/-in bei der Zentralstelle Cybercrime Niedersachsen
Land Niedersachsen
Oldenburg, Lower Saxony
IT forensics expert role within a public prosecution cybercrime unit, conducting forensic data analysis, blockchain/cryptocurrency investigations, log analysis, and preparing expert reports and court testimony alongside police IT specialists.
View JobSachbearbeitung IT-Forensik
Land Niedersachsen
The Oldenburg Munsterland
IT forensics specialist role within a police mobile forensics lab, conducting digital evidence acquisition, analysis and documentation, supporting investigations, advising on IT systems, and developing forensic software tools. Court testimony required.
View JobSenior Consultant Digital Forensics & Incident Response – Forensics (w/m/d)
EY
Eschborn, Hesse
Join a Big4 Forensic & Integrity Services team conducting digital forensic investigations and incident response engagements, analysing endpoints, networks and logs, examining artefacts, supporting live-response operations and producing technical documentation for national and international clients.
View JobIT-Forensik Analyst – Datensicherung
Hassmann IT-Forensik GmbH
Saarbrücken, Saarland
Join a growing IT forensics team conducting evidence preservation and analysis of devices including PCs, smartphones, and storage media, and assisting in the preparation of court-admissible forensic reports.
View JobIT-Spezialisten/-in (m/w/d)
Land Niedersachsen
Göttingen, Lower Saxony
IT specialist role at a German public prosecution unit focusing on digital forensics, data analysis, network forensics, OSINT, dark web investigations and expert court testimony in online hate crime cases.
View JobIT-Forensiker / Analysten (mIwId)
LeySelect GmbH
Frankfurt am Main
Join a specialist cybersecurity consultancy supporting IT forensic investigations following cyberattacks. Responsibilities include digital evidence identification, data recovery, malware analysis, attack reconstruction and production of legally compliant forensic reports.
View JobSenior Consultant Digital Forensics & Incident Response – Forensics (w/m/d)
EY
Berlin
Join a forensic consulting team combating white-collar crime, conducting digital forensic investigations, analysing endpoint and network artefacts, supporting live-response engagements, triaging suspicious files, and delivering IR assessments for national and international clients.
View JobManager Digital Forensics & Incident Response (DFIR) – Cyber Security (w/m/d)
EY
Berlin
Lead digital forensic investigations and incident response engagements covering endpoint, network, and cloud environments. Analyse cyberattacks, reconstruct attack chains, conduct live-response measures, and develop DFIR methodologies and threat-hunting approaches for national and international clients.
View JobIT-Forensik Analyst/Senior – Begutachtung
Hassmann IT-Forensik GmbH
Teltow, Brandenburg
Assist in producing court-admissible forensic reports, conduct evidence preservation, data processing and documentation. Suitable for qualified IT specialists or graduates; training provided based on existing knowledge level. Onsite only, no remote work.
View JobSecurity Incident Responder (m/w/d)
techculture GmbH
Berlin
Technically lead cyber incident response engagements for SMEs, analysing ransomware and BEC cases, conducting forensic analysis, containing threats, and advising clients to restore controlled operations swiftly.
View JobSenior Consultant Forensic eDiscovery – Digital Forensics & Analytics (m/w/d)
Deloitte GmbH
Berlin
Senior consultant role combining digital forensics, eDiscovery and analytics for investigations into financial crime, fraud and cybercrime. Responsibilities include forensic data collection, evidence analysis, eDiscovery processing, GenAI enablement and team leadership across litigation and regulatory matters.
View JobIT-Forensiker*in (gn*) Incident Response
Certified Security Operations Center GmbH
Bornheim, North Rhine-Westphalia
Join a SOC-as-a-Service provider handling end-to-end incident response and digital forensic investigations across client environments, including malware analysis, threat hunting, DFIR toolchain development, and customer-facing incident leadership.
View JobSenior Consultant Cyber – Digital Forensic Incident Response (m/w/d)
Deloitte GmbH
Frankfurt am Main
Senior DFIR consultant role supporting clients with digital forensic analysis, evidence preservation, cybercrime investigation, and incident response. Requires hands-on forensic expertise, regulatory knowledge (ISO 27001, DORA, NIS2), and strong communication skills across technical and non-technical stakeholders.
View JobSenior Digital Forensics and Incident Response Consultant (w/m/x)
NTT Ltd
Erfurt
Senior DFIR consultant role performing host and network forensic analysis, malware reverse engineering, incident response planning and reporting. Supports clients through active security incidents, root cause analysis, IR playbook development and proactive readiness activities.
View JobIT-Forensiker (m/w/d)
Response informations design
Ingolstadt
Full-time digital forensics role producing impartial expert reports for courts, prosecutors and private clients. Responsibilities include forensic examination of digital media, cryptography, and presenting complex technical findings in legally defensible form.
View Job(Senior) Cyber Security Expert (m/w/d) DFIR, Adversary Operations & Assessments
TÜV Informationstechnik GmbH
Essen
Handles DFIR cases for national and international clients, performing forensic analysis, attack reconstruction, compromise assessments, penetration testing, and adversary operations (red/purple teaming), while advising SOC and management teams and producing court-admissible reports.
View JobSenior Digital Forensics and Incident Response Consultant (w/m/x)
NTT DATA Europe & Latam
Berlin
Senior DFIR consultant role conducting host and network forensic analysis, malware reverse engineering, incident response, root cause analysis, and producing technical and management-level reports for enterprise clients.
View Job(Senior) Manager – Digital Forensics / Cyber Forensics (m/w/d) in Berlin
Deloitte
Berlin
Lead forensic investigations into cybercrime and economic crime, conducting digital and cyber forensic analyses using specialist tools. Drive cyber incident response projects, develop innovative forensic service offerings, and support business development across Germany.
View JobGet new DFIR jobs in your inbox
A weekly round-up of every new listing on the board — no noise, unsubscribe anytime.