Digital Forensics Jobs: Germany
68 current openings, updated daily. Links to original listings.
Wissenschaftliche/-r Fachexpertin/Fachexperte mit Forschungskompetenz IT-Forensik (IoT)
Land Niedersachsen
Hannover, Lower Saxony
A state criminal police unit seeks a research-oriented IT forensics specialist to analyse IoT and smart home devices, develop forensic methods, and support investigations and court reporting.
View JobSenior Consultant Forensic eDiscovery – Digital Forensics & Analytics
Deloitte
Hamburg
Senior consultant role combining digital forensics and eDiscovery, covering forensic data collection, processing, analytics and GenAI-enabled review for investigations, litigation and cyber incident response.
View JobExperte für Digitale Forensik und Incident Response
Deutsche Telekom
Munich, Bavaria
Supports clients with digital forensics and incident response engagements, conducting forensic analysis, securing digital evidence, advising on containment measures, and participating in workshops and on-call duties.
View JobComputerforensiker
DigForIT GmbH
Munich, Bavaria
Join a specialist forensics firm examining computers, phones and cloud data for criminal investigations, decrypting protected devices, and training to become a court-appointed expert witness in Munich.
View JobLeitung des Fachbereichs „Mobilfunkforensik“ im Kommissariat 33 – IT-Forensik – (herausgehobene Sachbearbeitung)
Hochschule der Polizei
Ludwigshafen, Baden-Württemberg
Lead a mobile phone forensics unit within a police IT forensics department, overseeing evidence acquisition, technical analysis of digital traces, court-ready documentation, and quality assurance for investigations.
View Job(Senior) Consultant – Digital Forensics & Incident Response
ResponseOne
Berlin
Join a specialist cyber incident response team conducting hands-on forensic investigations for compromised organisations, covering evidence acquisition, manual analysis, timeline reconstruction and client reporting, with hybrid working in Berlin.
View JobExperte für Digitale Forensik und Incident Response
Deutsche Telekom
Darmstadt, Hesse
Support clients with IT forensic investigations and security incident handling, conducting forensic analysis remotely and onsite, securing digital evidence, advising on containment measures, and joining on-call rotations.
View JobSachbearbeitung IT-Forensik
Hochschule der Polizei
Ludwigshafen, Rhineland-Palatinate
Join a specialist police IT forensics unit, acquiring and analysing digital evidence from computers, smartphones and servers, supporting investigators and prosecutors, and presenting findings in court.
View JobSachbearbeitung im Bereich Digitale Forensik des Dezernates 621 der Abteilung 6
Hochschule der Polizei
Mainz, Rhineland-Palatinate
Join the digital forensics unit of the Rhineland-Palatinate State Criminal Investigation Office, conducting forensic mass data analysis, multimedia forensics development, and coordinating national working groups to support complex criminal investigations.
View JobSenior Cyber Security Specialist
Haystack
Germany
Lead DFIR engagements for national and international clients, managing security incidents from kill-chain analysis to containment. Also conduct penetration tests, red/purple team exercises, and develop detection and response concepts using SIEM, EDR/XDR and SOAR.
View JobCyber Security Analyst – Level 3
Finanz Informatik Technologie Service
Frankfurt am Main, Hesse
Senior SOC analyst role leading complex incident response and digital forensic investigations, conducting memory forensics and timeline analysis, performing malware analysis, driving threat hunting, and mentoring Level-1 and Level-2 analysts.
View JobSenior Digital Forensics and Incident Response Consultant
NTT DATA Europe & Latam
Wolfsburg, Lower Saxony
Join a specialist DFIR team responding to security incidents for enterprise clients. Conduct host and network forensics, malware reverse engineering, root cause analysis, and deliver technical and management-level incident response reports.
View JobManager Digital Forensics & Incident Response (DFIR) – Cyber Security
EY
Eschborn, Hesse
Lead digital forensic investigations and incident response engagements across endpoint, network, and cloud environments. Analyse cyberattacks, reconstruct attack chains, and drive DFIR methodology development within a global professional services firm.
View JobSenior Consultant Digital Forensics & Incident Response – Forensics
EY
Düsseldorf, North Rhine-Westphalia
Join a forensic and integrity services team to investigate cyber incidents, analyse system artefacts, conduct digital forensic examinations, support live-response operations, and contribute to incident response and cyber resilience assessments for national and international clients.
View JobSachbearbeiterin/Sachbearbeiter IT-Forensik
Land Niedersachsen
Wolfsburg, Lower Saxony
A law enforcement IT forensics specialist role based in Wolfsburg, Germany, conducting digital evidence seizure, forensic imaging, artifact analysis, expert court testimony, and advising investigators on technical procedures.
View JobSenior Consultant IT Forensik Incident Response
HiSolutions AG
Germany
Senior consulting role combining digital forensics and incident response, investigating cyberattacks, securing court-admissible digital evidence, analysing attack vectors, and supporting affected organisations through crisis containment and recovery — both remotely and on-site.
View Job(Senior) Manager – Digital Forensics / Cyber Forensics in Köln
Deloitte
Cologne, North Rhine-Westphalia
Lead digital and cyber forensics investigations into cybercrime and economic crime, managing incident response projects, developing forensic service offerings, and supporting business development across Germany.
View JobIT-Experte / Informatiker / IT-Forensiker beim Landesamt zur Bekämpfung der Finanzkriminalität Nordrhein-Westfalen (LBF NRW)
Ministerium der Finanzen des Landes Nordrhein-Westfalen
Düsseldorf
Join a state financial crime agency as a digital forensics specialist, securing and examining digital evidence from devices and cloud systems during search operations, supporting investigators across ten regional offices in North Rhine-Westphalia.
View JobWissenschaftliche Mitarbeiterin / wissenschaftlicher Mitarbeiter der forensischen Informations- und Kommunikationstechnik
Bundeskriminalamt
Wiesbaden, Hesse
Research scientist role at Germany's federal criminal police office, developing and validating new forensic methods for vehicle infotainment systems, including security feature bypass, reverse engineering, and publication of findings.
View JobCyber Security Analyst – Level 3
Finanz Informatik Technologie Service
Stuttgart, Baden-Württemberg
Senior SOC analyst role leading complex incident response and digital forensics investigations, conducting memory forensics and timeline analysis, performing malware analysis, driving detection engineering, and mentoring junior analysts within a financial-sector security operations centre.
View JobManaging Consultant Incident Management / DFIR
HiSolutions AG
Bonn
Lead incident response and DFIR engagements for clients, managing containment and forensic analysis both remotely and on-site. Mentor consultants, deliver resilience workshops, and help organisations recover from cyber incidents.
View JobSenior Consultant IT Forensik Incident Response
HiSolutions AG
Frankfurt am Main, Hesse
Join a cybersecurity consultancy to investigate IT security incidents, conduct digital forensic examinations, preserve court-admissible evidence, and support clients through crisis response, containment and recovery — both remotely and on-site.
View JobManaging Consultant Incident Management / DFIR
HiSolutions AG
Berlin
Lead incident response and DFIR engagements for clients across Germany, managing containment, forensic analysis and recovery. Guide senior consultants, deliver resilience workshops, and help shape the firm's IR service offering.
View JobIT-Spezialist/in für Mobilfunkforensik
Land Niedersachsen
Lunenburg, Lower Saxony
A permanent, full-time mobile forensics specialist role within a regional police criminal investigation unit, responsible for forensic acquisition and analysis of mobile devices, court-ready reporting, malware detection, and delivering training to law enforcement staff.
View JobIncident Response Expert
Michael Page
Düsseldorf, North Rhine-Westphalia
A senior contract role developing and implementing incident response frameworks, playbooks and SOPs covering ransomware, identity compromise, cloud abuse and lateral movement, with advisory responsibilities across SOC and security teams.
View Job(Senior) Incident Responder
CANCOM
Hamburg
Join a security operations team handling incident response, threat hunting, and forensic investigations across Windows, Linux, and cloud environments. Advise clients on remediation, conduct workshops, and participate in 24/7 on-call support for critical security events.
View Job(Senior) Incident Responder
CANCOM
Aachen, North Rhine-Westphalia
Join a managed security team handling complex security incidents, performing forensic investigations across Windows, Linux and cloud environments, conducting threat hunting, and advising clients on remediation and cyber resilience strategies.
View JobSenior Consultant IT Forensik Incident Response
HiSolutions AG
Berlin
Senior consultant role combining digital forensics and incident response, supporting organisations through cyber crises — from forensic investigation and evidence acquisition to attack containment, emergency operations and full service restoration.
View JobSenior Digital Forensics and Incident Response Consultant
NTT DATA Europe & Latam
Ettlingen, Baden-Württemberg
A senior DFIR consultant role delivering forensic analysis at host and network level, conducting malware reverse engineering, managing incident response for enterprise clients, and producing technical and management-level reports.
View JobÜbergeordnete Technische Leitung für den Bereich Vorfall- und Malwareanalyse
Bundeskriminalamt
Wiesbaden, Hesse
Senior technical leadership position within a national criminal investigation authority, overseeing IT forensics, incident response, and malware analysis operations, including complex case leadership, evidence preservation, expert reporting, and R&D project coordination.
View JobSenior Consultant Cyber – Digital Forensic Incident Response in München
Deloitte
Munich, Bavaria
Join a global cyber consulting team to support clients in investigating and responding to cybercrime incidents. Conduct digital forensic analysis, secure court-admissible evidence, and advise on cyber prevention and regulatory compliance.
View JobSenior Consultant Forensic eDiscovery – Digital Forensics & Analytics
Deloitte
Stuttgart
Senior consulting role combining digital forensics and eDiscovery across litigation, investigations and cyber incident response. Responsibilities include forensic data collection, mass data processing, analytics enablement and GenAI integration, with some team leadership.
View JobSenior Digital Forensics and Incident Response Consultant
NTT DATA Europe & Latam
Rosenheim, Bavaria
Join a specialist DFIR team supporting clients across security incident preparation and response, conducting host and network forensic analysis, malware reverse engineering, root cause analysis, and producing technical and management-level incident reports.
View JobIT-Forensiker*in
Bafin
Bonn, North Rhine-Westphalia
Join a government financial regulator's forensics competency team to conduct IT forensic investigations at supervised financial institutions, analyse digital artefacts, recover data, and produce court-admissible reports in an interdisciplinary environment.
View JobSenior Consultant Digital Forensics & Incident Response – Forensics
EY
Hamburg
Join a forensic consulting team combating financial crime and cyber threats. Conduct digital forensic investigations, analyse system artefacts, support live-response engagements, examine malicious files, and deliver IR workshops and assessments for national and international clients.
View JobManager Digital Forensics & Incident Response (DFIR) – Cyber Security
EY
Düsseldorf, North Rhine-Westphalia
Lead digital forensic investigations and incident response engagements across endpoint, network, and cloud environments. Analyse cyberattacks, reconstruct attack chains, conduct live-response measures, and develop DFIR methodologies and threat-hunting approaches for national and international clients.
View JobSenior Consultant Cyber – Digital Forensic Incident Response in Frankfurt (Main)
Deloitte
Frankfurt, Hesse
Join a global consulting team delivering digital forensic and incident response services. Conduct forensic analysis, evidence preservation, cybercrime investigation, and cyber-prevention advisory for clients across diverse sectors in Germany.
View JobIT-Forensik Analyst – Datensicherung
Hassmann IT-Forensik GmbH
Teltow, Brandenburg
Join a growing IT forensics team handling evidence seizure and preservation of devices including PCs, smartphones and consoles, plus data analysis, documentation and assistance in preparing court-admissible expert reports.
View JobSenior Security Analyst Digitale Forensik im Security Operations Center (SOC)
BWI GmbH
Cologne, North Rhine-Westphalia
Senior digital forensics analyst role within a military SOC, conducting forensic investigations, evidence preservation for disciplinary and criminal proceedings, coordinating with law enforcement, and supporting IT security operations for the German armed forces.
View JobSenior Security Incident Responder
techculture GmbH
Berlin
Lead incident response engagements for SMEs impacted by ransomware and BEC attacks, conducting forensic analysis, log review, containment, and producing detailed forensic reports for cyber insurers. Fully remote within Germany.
View JobConsultant IT-Forensik und Incident Response
intersoft consulting services AG
Hamburg
Join a specialist DFIR consultancy team in Hamburg, handling IT security incidents, forensic analysis and reconstruction of attacks, vulnerability assessments, and producing forensic documentation for clients across various sectors.
View JobCyber Security Specialist
Hyra
North Rhine-Westphalia
Senior DFIR specialist managing full-cycle incident response, compromise assessments, and detection strategy development. Conducts penetration tests, red/purple teaming, and delivers forensic reports for national and international clients across complex security incidents.
View JobCyber Security Analyst – Level 3
Finanz Informatik Technologie Service
Munich, Bavaria
Senior SOC analyst role leading complex incident response and digital forensics investigations, including memory forensics, timeline analysis, malware analysis, threat hunting, and detection engineering using MITRE ATT&CK, SIEM, EDR and XDR platforms.
View JobCyber Security Analyst – Level 3
Finanz Informatik Technologie Service GmbH & Co. KG
Deutschland
Senior SOC analyst role leading complex incident response, conducting deep digital forensics (memory, timeline, artifact analysis), performing malware analysis and threat hunting, developing SIEM/EDR detection rules, and mentoring junior analysts.
View JobSenior Cyber Response Analyst / Active TS/SCI
Peraton
Wiesbaden
Senior analyst leading cyber incident response operations for DoDIN-Europe, conducting malware analysis and digital forensic investigations, managing SIEM workflows, producing threat intelligence reports, and mentoring junior analysts. Requires active TS/SCI clearance.
View JobSenior Digital Forensics and Incident Response Consultant
NTT DATA Europe & Latam
Hamburg
Experienced DFIR consultant needed to support clients during security incidents, performing host and network forensic analysis, malware reverse engineering, root cause analysis, and proactive IR planning using frameworks such as MITRE ATT&CK.
View JobSenior Consultant Cyber – Digital Forensic Incident Response
Deloitte
Düsseldorf, North Rhine-Westphalia
Join a global consulting team delivering digital forensic and incident response services, including cyberforensic analysis, court-admissible evidence handling, cybercrime investigation, and regulatory compliance advisory for clients across multiple sectors.
View JobCyber Security Specialist
Haystack
Germany
Advise national and international clients on IT security incidents, handling DFIR cases including attack reconstruction and containment. Develop detection and response concepts, conduct security assessments, and perform penetration tests and red/purple team operations.
View JobDigital Forensic Analyst
ZEISS Group
Oberkochen, Baden-Württemberg
Conduct digital forensic investigations into security incidents, collect and preserve evidence, support the CSIRT with expert analysis, perform threat hunting, produce forensic reports, and deliver training on forensic best practices.
View JobCyber Security Analyst – Level 3
Finanz Informatik Technologie Service
Nuremberg, Bavaria
Senior SOC analyst role leading Level 3 incident response, conducting deep digital forensics (memory, timeline, artefact analysis), proactive threat hunting, malware analysis, detection engineering, and mentoring junior analysts in a financial sector SOC.
View JobSenior Security Incident Responder
Allianz
München
Senior incident responder leading complex cybersecurity investigations across a global enterprise environment, coordinating stakeholders, developing internal tooling, analysing attack patterns, and contributing to 24/7 on-call response and security posture improvements.
View JobManager Digital Forensics & Incident Response (DFIR) – Cyber Security
EY
Stuttgart
Manages a Digital Forensics and Incident Response team within a cyber security function, based in Stuttgart with nationwide scope. Competitive salary offered for this senior leadership role.
View JobManager Digital Forensics & Incident Response (DFIR) – Cyber Security
EY
Munich, Bavaria
Lead digital forensic investigations and incident response engagements covering endpoint, network and cloud environments. Analyse cyberattacks, reconstruct attack chains, drive containment, and develop DFIR methodologies and threat-hunting approaches for national and international clients.
View JobExperte Computer Incident Response Team (CSIRT)
BLG LOGISTICS GROUP AG & Co. KG
Bremen
Join a logistics group's CSIRT team to build and operate incident response capabilities, develop playbooks and runbooks, conduct forensic analysis, manage the full IR lifecycle, and drive continuous security improvement.
View JobIncident Response Lead – Germany *
Coalition - Germany
Berlin
Lead cyber incident response engagements in Germany, conducting forensic investigations, analysing Windows/Linux/macOS systems, examining logs, identifying IOCs, and advising customers on remediation and long-term security improvements. Bilingual German/English required.
View JobCyber Defense Expert – Threat Detection & Response Delos Cloud
Delos Cloud GmbH
Eschborn
Join a sovereign cloud SOC protecting Germany's public sector Azure infrastructure. Monitor threats, triage alerts, coordinate incident response, and support forensic investigations, malware analysis, and threat hunting against advanced persistent threats.
View JobIT-Forensiker
LeySelect GmbH
Frankfurt Rhine-Main
Junior IT forensics role supporting post-cyberattack investigations, including digital evidence identification and preservation, deleted data recovery, malware analysis, attack reconstruction, and legally compliant reporting alongside experienced colleagues.
View JobIT-Forensik Analyst/Senior – Begutachtung
Hassmann IT-Forensik GmbH
Saarbrücken, Saarland
Join a specialist IT forensics team producing court-admissible expert reports. Responsibilities include evidence preservation, data processing and documentation. Suits qualified IT professionals at analyst or senior level, based onsite in Saarbrücken.
View JobGERMAN SPEAKING Senior Digital Forensics and Incident Response (DFIR) Consultant
Telescope Recruitment
Germany
Senior DFIR consultant role responding to ransomware and cyber-attacks for global clients. Responsibilities include forensic imaging, Windows forensics, IOC analysis, log review, timeline building, and delivering high-quality incident response reports. German fluency required.
View JobSenior Consultant Digital Forensics & Incident Response – Forensics (w/m/d)
EY
Eschborn, Hesse
Join a Big4 Forensic & Integrity Services team conducting digital forensic investigations and incident response engagements, analysing endpoints, networks and logs, examining artefacts, supporting live-response operations and producing technical documentation for national and international clients.
View JobManager Digital Forensics & Incident Response (DFIR) – Cyber Security (w/m/d)
EY
Berlin
Lead digital forensic investigations and incident response engagements covering endpoint, network, and cloud environments. Analyse cyberattacks, reconstruct attack chains, conduct live-response measures, and develop DFIR methodologies and threat-hunting approaches for national and international clients.
View JobIT-Forensik Analyst/Senior – Begutachtung
Hassmann IT-Forensik GmbH
Teltow, Brandenburg
Assist in producing court-admissible forensic reports, conduct evidence preservation, data processing and documentation. Suitable for qualified IT specialists or graduates; training provided based on existing knowledge level. Onsite only, no remote work.
View JobSenior Consultant Forensic eDiscovery – Digital Forensics & Analytics (m/w/d)
Deloitte GmbH
Berlin
Senior consultant role combining digital forensics, eDiscovery and analytics for investigations into financial crime, fraud and cybercrime. Responsibilities include forensic data collection, evidence analysis, eDiscovery processing, GenAI enablement and team leadership across litigation and regulatory matters.
View JobIT-Forensiker*in (gn*) Incident Response
Certified Security Operations Center GmbH
Bornheim, North Rhine-Westphalia
Join a SOC-as-a-Service provider handling end-to-end incident response and digital forensic investigations across client environments, including malware analysis, threat hunting, DFIR toolchain development, and customer-facing incident leadership.
View JobSenior Digital Forensics and Incident Response Consultant (w/m/x)
NTT Ltd
Erfurt
Senior DFIR consultant role performing host and network forensic analysis, malware reverse engineering, incident response planning and reporting. Supports clients through active security incidents, root cause analysis, IR playbook development and proactive readiness activities.
View Job(Senior) Cyber Security Expert (m/w/d) DFIR, Adversary Operations & Assessments
TÜV Informationstechnik GmbH
Essen
Handles DFIR cases for national and international clients, performing forensic analysis, attack reconstruction, compromise assessments, penetration testing, and adversary operations (red/purple teaming), while advising SOC and management teams and producing court-admissible reports.
View JobSenior Digital Forensics and Incident Response Consultant (w/m/x)
NTT DATA Europe & Latam
Berlin
Senior DFIR consultant role conducting host and network forensic analysis, malware reverse engineering, incident response, root cause analysis, and producing technical and management-level reports for enterprise clients.
View Job(Senior) Manager – Digital Forensics / Cyber Forensics (m/w/d) in Berlin
Deloitte
Berlin
Lead forensic investigations into cybercrime and economic crime, conducting digital and cyber forensic analyses using specialist tools. Drive cyber incident response projects, develop innovative forensic service offerings, and support business development across Germany.
View JobGet new DFIR jobs in your inbox
A weekly round-up of every new listing on the board — no noise, unsubscribe anytime.