Digital Forensics Jobs: Germany
61 current openings, updated daily. Links to original listings.
Senior Consultant Digital Forensics & Incident Response – Forensics
EY
Hamburg
Join a forensic consulting team combating financial crime and cyber threats. Conduct digital forensic investigations, analyse system artefacts, support live-response engagements, examine malicious files, and deliver IR workshops and assessments for national and international clients.
View JobSenior Consultant Cyber – Digital Forensic Incident Response
Deloitte
Leipzig, Saxony
Join a global cyber consulting team conducting digital forensic and incident response investigations, including evidence preservation, cybercrime analysis, regulatory compliance, and advising clients on cyber prevention and security standards.
View JobManager Digital Forensics & Incident Response (DFIR) – Cyber Security
EY
Düsseldorf, North Rhine-Westphalia
Lead digital forensic investigations and incident response engagements across endpoint, network, and cloud environments. Analyse cyberattacks, reconstruct attack chains, conduct live-response measures, and develop DFIR methodologies and threat-hunting approaches for national and international clients.
View JobSenior Consultant Cyber – Digital Forensic Incident Response in Frankfurt (Main)
Deloitte
Frankfurt, Hesse
Join a global consulting team delivering digital forensic and incident response services. Conduct forensic analysis, evidence preservation, cybercrime investigation, and cyber-prevention advisory for clients across diverse sectors in Germany.
View JobIT-Forensik Analyst – Datensicherung
Hassmann IT-Forensik GmbH
Teltow, Brandenburg
Join a growing IT forensics team handling evidence seizure and preservation of devices including PCs, smartphones and consoles, plus data analysis, documentation and assistance in preparing court-admissible expert reports.
View JobCyber Crime Incident Responder
techculture GmbH
Cologne, North Rhine-Westphalia
Investigate and contain advanced cyberattacks including APT campaigns and ransomware, conduct forensic evidence analysis, collaborate with Interpol/Europol/FBI, and develop IR playbooks and forensic methodologies for critical infrastructure clients.
View JobSenior Security Analyst Digitale Forensik im Security Operations Center (SOC)
BWI GmbH
Cologne, North Rhine-Westphalia
Senior digital forensics analyst role within a military SOC, conducting forensic investigations, evidence preservation for disciplinary and criminal proceedings, coordinating with law enforcement, and supporting IT security operations for the German armed forces.
View JobFachinformatiker als IT Consultant
intersoft consulting services AG
Hamburg
Join a specialist DFIR team in Hamburg, handling IT security incidents, conducting forensic analysis and documentation, advising on IT infrastructure, and performing vulnerability assessments and emergency exercises for clients on-site.
View JobConsultant IT-Forensik und Incident Response
intersoft consulting services AG
Hamburg
Join a specialist DFIR consultancy team in Hamburg, handling IT security incidents, forensic analysis and reconstruction of attacks, vulnerability assessments, and producing forensic documentation for clients across various sectors.
View JobCyber Security Specialist
Hyra
North Rhine-Westphalia
Senior DFIR specialist managing full-cycle incident response, compromise assessments, and detection strategy development. Conducts penetration tests, red/purple teaming, and delivers forensic reports for national and international clients across complex security incidents.
View JobForensics Consultant
Lineal
Berlin
Lead digital forensic investigations across PCs, mobile devices, servers and cloud systems; conduct forensically sound data collection, consult with clients on best practices, and manage projects end-to-end within a global forensics team.
View JobCyber Security Analyst – Level 3
Finanz Informatik Technologie Service
Munich, Bavaria
Senior SOC analyst role leading complex incident response and digital forensics investigations, including memory forensics, timeline analysis, malware analysis, threat hunting, and detection engineering using MITRE ATT&CK, SIEM, EDR and XDR platforms.
View JobCyber Security Analyst – Level 3
Finanz Informatik Technologie Service GmbH & Co. KG
Deutschland
Senior SOC analyst role leading complex incident response, conducting deep digital forensics (memory, timeline, artifact analysis), performing malware analysis and threat hunting, developing SIEM/EDR detection rules, and mentoring junior analysts.
View JobSenior Cyber Response Analyst / Active TS/SCI
Peraton
Wiesbaden
Senior analyst leading cyber incident response operations for DoDIN-Europe, conducting malware analysis and digital forensic investigations, managing SIEM workflows, producing threat intelligence reports, and mentoring junior analysts. Requires active TS/SCI clearance.
View JobIT-Forensischer Analyst
FZ forensic.zone GmbH
Mittweida
Full-time IT forensic analyst role involving documentation, preservation and analysis of digital evidence, recovery of deleted data, and preparation of expert forensic reports. Suitable for graduates or students in digital forensics or computer science.
View JobSenior Digital Forensics and Incident Response Consultant
NTT DATA Europe & Latam
Hamburg
Experienced DFIR consultant needed to support clients during security incidents, performing host and network forensic analysis, malware reverse engineering, root cause analysis, and proactive IR planning using frameworks such as MITRE ATT&CK.
View JobSenior Consultant Cyber – Digital Forensic Incident Response
Deloitte
Düsseldorf, North Rhine-Westphalia
Join a global consulting team delivering digital forensic and incident response services, including cyberforensic analysis, court-admissible evidence handling, cybercrime investigation, and regulatory compliance advisory for clients across multiple sectors.
View JobCyber Security Specialist
Haystack
Germany
Advise national and international clients on IT security incidents, handling DFIR cases including attack reconstruction and containment. Develop detection and response concepts, conduct security assessments, and perform penetration tests and red/purple team operations.
View JobIT-Forensikerin/IT-Forensiker
Land Niedersachsen
The Oldenburg Munsterland
IT forensics investigator role within a tax investigation authority, analysing digital evidence in tax crime cases, including reverse engineering of IT systems, POS manipulation detection, source code analysis, and cryptocurrency seizure.
View JobSenior Consultant Digital Forensics & Incident Response – Forensics
EY
Stuttgart
Senior DFIR consultant role based in Stuttgart with nationwide scope, focusing on digital forensics and incident response investigations for a consulting practice. Competitive salary offered.
View JobIncident Response Lead – Germany *
Coalition, Inc.
Berlin
Lead cyber incident response engagements for customers in Germany, conducting forensic investigations, analysing compromised systems, identifying IOCs, managing breaches, and providing remediation guidance. Fluency in German and English required.
View JobSenior Cyber Incident Response Investigator
Accenture
Essen
Investigates and responds to complex cyber incidents end-to-end, conducting host, network and log forensics, malware analysis, threat hunting and remediation planning for clients across international environments.
View Job(Senior) Expert*in- IT-Forensik
Bafin
Bonn, North Rhine-Westphalia
Plan, conduct and document IT forensic investigations at supervised financial institutions, recover and analyse digital evidence, produce court-admissible reports, develop forensic infrastructure, and advise internal teams on forensic methods and tools.
View JobDigital Forensic Analyst
ZEISS Group
Oberkochen, Baden-Württemberg
Conduct digital forensic investigations into security incidents, collect and preserve evidence, support the CSIRT with expert analysis, perform threat hunting, produce forensic reports, and deliver training on forensic best practices.
View JobSenior Cyber Incident Response Investigator
Accenture DACH
Munich, Bavaria
Investigate and respond to complex cyber incidents end-to-end, performing host, network and malware forensics, threat hunting, and remediation planning for global clients in a consulting environment. Requires strong IR and digital forensics expertise.
View JobCyber Security Analyst – Level 3
Finanz Informatik Technologie Service
Nuremberg, Bavaria
Senior SOC analyst role leading Level 3 incident response, conducting deep digital forensics (memory, timeline, artefact analysis), proactive threat hunting, malware analysis, detection engineering, and mentoring junior analysts in a financial sector SOC.
View JobSenior Consultant Digital Forensics & Incident Response – Forensics
EY
Mannheim, Baden-Württemberg
Join a Forensic & Integrity Services team conducting digital forensic investigations and incident response. Analyse cyber incidents at endpoint, network and log level, examine system artefacts, support live-response operations and produce technical documentation for clients.
View JobManager Digital Forensics & Incident Response (DFIR) – Cyber Security
EY
Munich, Bavaria
Lead digital forensic investigations and incident response engagements covering endpoint, network and cloud environments. Analyse cyberattacks, reconstruct attack chains, drive containment, and develop DFIR methodologies and threat-hunting approaches for national and international clients.
View JobIncident Analyst (full time or student program)
ERNW Research GmbH
Heidelberg, Baden-Württemberg
Join an incident response team working on incident analysis, malware analysis, and forensics projects. Involves file system, memory and network forensics, log analysis, and scripting, with opportunities across consulting, training and security assessments.
View JobExperte Computer Incident Response Team (CSIRT)
BLG LOGISTICS GROUP AG & Co. KG
Bremen
Join a logistics group's CSIRT team to build and operate incident response capabilities, develop playbooks and runbooks, conduct forensic analysis, manage the full IR lifecycle, and drive continuous security improvement.
View JobCyber-Analystin / Cyber-Analyst
Bundeskriminalamt
Wiesbaden, Hesse
Conduct technically-led cybercrime investigations including darknet platform analysis, cryptocurrency transaction tracing, digital forensics, infrastructure reconnaissance, and operational technical measures for a national criminal investigations authority.
View JobIncident Response Lead – Germany *
Coalition - Germany
Berlin
Lead cyber incident response engagements in Germany, conducting forensic investigations, analysing Windows/Linux/macOS systems, examining logs, identifying IOCs, and advising customers on remediation and long-term security improvements. Bilingual German/English required.
View JobSenior Consultant Digital Forensics & Incident Response – Forensics
EY
Munich, Bavaria
Join a Forensic & Integrity Services team conducting digital forensic investigations and incident response. Analyse cyber incidents at endpoint, network and log level, examine artefacts, support live-response deployments and produce technical documentation for clients.
View JobSenior Digital Forensic Specialist
Security Research Labs
Berlin
Lead forensic investigations, compromise assessments, and incident response engagements for critical infrastructure clients. Conduct threat hunting, produce technical reports, mentor junior consultants, and help organisations build long-term cyber resilience.
View JobIT-Forensiker
LeySelect GmbH
Frankfurt Rhine-Main
Junior IT forensics role supporting post-cyberattack investigations, including digital evidence identification and preservation, deleted data recovery, malware analysis, attack reconstruction, and legally compliant reporting alongside experienced colleagues.
View JobIT-Forensik Analyst/Senior – Begutachtung
Hassmann IT-Forensik GmbH
Saarbrücken, Saarland
Join a specialist IT forensics team producing court-admissible expert reports. Responsibilities include evidence preservation, data processing and documentation. Suits qualified IT professionals at analyst or senior level, based onsite in Saarbrücken.
View JobSenior Consultant Digital Forensics & Incident Response – Forensics
EY
Hannover, Lower Saxony
Join a forensic consulting team investigating cybercrime and protecting client assets. Analyse cyber incidents, examine system artefacts, support live-response engagements, assess suspicious files, and produce technical documentation for incident response and resilience assessments.
View JobGERMAN SPEAKING Senior Digital Forensics and Incident Response (DFIR) Consultant
Telescope Recruitment
Germany
Senior DFIR consultant role responding to ransomware and cyber-attacks for global clients. Responsibilities include forensic imaging, Windows forensics, IOC analysis, log review, timeline building, and delivering high-quality incident response reports. German fluency required.
View JobIT-Forensiker/-in bei der Zentralstelle Cybercrime Niedersachsen
Land Niedersachsen
Oldenburg, Lower Saxony
IT forensics expert role within a public prosecution cybercrime unit, conducting forensic data analysis, blockchain/cryptocurrency investigations, log analysis, and preparing expert reports and court testimony alongside police IT specialists.
View Job(Senior) Manager – Digital Forensics / Cyber Forensics
Deloitte GmbH
Berlin
Lead forensic investigations into cybercrime and economic crime, managing cyber incident response and digital forensic analysis projects. Develop innovative forensic service offerings using tools such as EnCase, Nuix and Wireshark, supporting business development across Germany.
View JobSachbearbeitung IT-Forensik
Land Niedersachsen
The Oldenburg Munsterland
IT forensics specialist role within a police mobile forensics lab, conducting digital evidence acquisition, analysis and documentation, supporting investigations, advising on IT systems, and developing forensic software tools. Court testimony required.
View Job(Senior) Manager – Digital Forensics / Cyber Forensics (m/w/d) in Stuttgart
Deloitte
Stuttgart, Baden-Württemberg
Lead digital and cyber forensic investigations into cybercrime and financial crime, manage IR projects, develop forensic service offerings, and support business development across Germany for a global consulting firm.
View JobSenior Consultant Digital Forensics & Incident Response – Forensics (w/m/d)
EY
Eschborn, Hesse
Join a Big4 Forensic & Integrity Services team conducting digital forensic investigations and incident response engagements, analysing endpoints, networks and logs, examining artefacts, supporting live-response operations and producing technical documentation for national and international clients.
View JobIT-Forensiker (m|w|d)
LeySelect GmbH
Frankfurt Rhine-Main
Supports IT forensic investigations following cyberattacks, including digital evidence preservation, deleted data recovery, malware identification, attack reconstruction, and compliant forensic reporting, working alongside experienced forensic specialists.
View JobIT-Forensik Analyst – Datensicherung
Hassmann IT-Forensik GmbH
Saarbrücken, Saarland
Join a growing IT forensics team conducting evidence preservation and analysis of devices including PCs, smartphones, and storage media, and assisting in the preparation of court-admissible forensic reports.
View JobIT-Spezialisten/-in (m/w/d)
Land Niedersachsen
Göttingen, Lower Saxony
IT specialist role at a German public prosecution unit focusing on digital forensics, data analysis, network forensics, OSINT, dark web investigations and expert court testimony in online hate crime cases.
View JobIT-Forensiker / Analysten (mIwId)
LeySelect GmbH
Frankfurt am Main
Join a specialist cybersecurity consultancy supporting IT forensic investigations following cyberattacks. Responsibilities include digital evidence identification, data recovery, malware analysis, attack reconstruction and production of legally compliant forensic reports.
View JobSenior Consultant Digital Forensics & Incident Response – Forensics (w/m/d)
EY
Berlin
Join a forensic consulting team combating white-collar crime, conducting digital forensic investigations, analysing endpoint and network artefacts, supporting live-response engagements, triaging suspicious files, and delivering IR assessments for national and international clients.
View JobManager Digital Forensics & Incident Response (DFIR) – Cyber Security (w/m/d)
EY
Berlin
Lead digital forensic investigations and incident response engagements covering endpoint, network, and cloud environments. Analyse cyberattacks, reconstruct attack chains, conduct live-response measures, and develop DFIR methodologies and threat-hunting approaches for national and international clients.
View JobIT-Forensik Analyst/Senior – Begutachtung
Hassmann IT-Forensik GmbH
Teltow, Brandenburg
Assist in producing court-admissible forensic reports, conduct evidence preservation, data processing and documentation. Suitable for qualified IT specialists or graduates; training provided based on existing knowledge level. Onsite only, no remote work.
View JobSecurity Incident Responder (m/w/d)
techculture GmbH
Berlin
Technically lead cyber incident response engagements for SMEs, analysing ransomware and BEC cases, conducting forensic analysis, containing threats, and advising clients to restore controlled operations swiftly.
View JobSenior Consultant Forensic eDiscovery – Digital Forensics & Analytics (m/w/d)
Deloitte GmbH
Berlin
Senior consultant role combining digital forensics, eDiscovery and analytics for investigations into financial crime, fraud and cybercrime. Responsibilities include forensic data collection, evidence analysis, eDiscovery processing, GenAI enablement and team leadership across litigation and regulatory matters.
View JobIT-Forensiker*in (gn*) Incident Response
Certified Security Operations Center GmbH
Bornheim, North Rhine-Westphalia
Join a SOC-as-a-Service provider handling end-to-end incident response and digital forensic investigations across client environments, including malware analysis, threat hunting, DFIR toolchain development, and customer-facing incident leadership.
View JobSenior Consultant Cyber – Digital Forensic Incident Response (m/w/d)
Deloitte GmbH
Frankfurt am Main
Senior DFIR consultant role supporting clients with digital forensic analysis, evidence preservation, cybercrime investigation, and incident response. Requires hands-on forensic expertise, regulatory knowledge (ISO 27001, DORA, NIS2), and strong communication skills across technical and non-technical stakeholders.
View JobSenior Digital Forensics and Incident Response Consultant (w/m/x)
NTT Ltd
Erfurt
Senior DFIR consultant role performing host and network forensic analysis, malware reverse engineering, incident response planning and reporting. Supports clients through active security incidents, root cause analysis, IR playbook development and proactive readiness activities.
View JobIT-Forensiker (m/w/d)
Response informations design
Ingolstadt
Full-time digital forensics role producing impartial expert reports for courts, prosecutors and private clients. Responsibilities include forensic examination of digital media, cryptography, and presenting complex technical findings in legally defensible form.
View Job(Senior) Cyber Security Expert (m/w/d) DFIR, Adversary Operations & Assessments
TÜV Informationstechnik GmbH
Essen
Handles DFIR cases for national and international clients, performing forensic analysis, attack reconstruction, compromise assessments, penetration testing, and adversary operations (red/purple teaming), while advising SOC and management teams and producing court-admissible reports.
View JobDIGITALER FORENSIKER & INCIDENT RESPONDER (M/W/D) IN VOLLZEIT
eyeDsec – Information Security GmbH
Bayreuth
Build and lead a DFIR team, conducting forensic analyses and incident response engagements. Advise clients on countermeasures, security consulting, risk analysis and audits. On-call availability and travel required.
View JobPrincipal Consultant, Incident Response
Palo Alto Networks
Munich, Bavaria
Lead client-facing incident response engagements end-to-end, performing host-based forensic analysis on Windows/Linux/macOS, investigating data breaches, examining logs, and delivering remediation guidance. Requires German and English fluency; up to 20% travel.
View JobSenior Digital Forensics and Incident Response Consultant (w/m/x)
NTT DATA Europe & Latam
Berlin
Senior DFIR consultant role conducting host and network forensic analysis, malware reverse engineering, incident response, root cause analysis, and producing technical and management-level reports for enterprise clients.
View Job(Senior) Manager – Digital Forensics / Cyber Forensics (m/w/d) in Berlin
Deloitte
Berlin
Lead forensic investigations into cybercrime and economic crime, conducting digital and cyber forensic analyses using specialist tools. Drive cyber incident response projects, develop innovative forensic service offerings, and support business development across Germany.
View JobGet new DFIR jobs in your inbox
A weekly round-up of every new listing on the board — no noise, unsubscribe anytime.