Cyber Security Specialist
Haystack
Germany
The Role
This position involves managing IT security and compliance incidents for clients across national and international boundaries, handling the full lifecycle of DFIR cases from complex attack analysis through to containment. Day-to-day responsibilities include developing detection and response concepts, conducting assessments, performing penetration tests, red and purple team operations, and producing court-admissible technical reports.
Skills & Experience
Candidates require several years of hands-on DFIR experience alongside strong knowledge of network technologies and operating systems. Familiarity with SIEM, EDR/XDR, SOAR, and frameworks such as MITRE ATT&CK is essential. Relevant certifications including BSI-certified incident expert, GCFE, GNFA, or GCIH are expected, along with fluent English and willingness to travel.
Who It Suits
This role suits an experienced security professional who is equally comfortable operating as a technical specialist and a client-facing consultant. Those with a background spanning both offensive and defensive disciplines, who enjoy working across SOC, IT, and management stakeholders on high-stakes incidents, will find this position particularly well matched to their skill set.
Typical advertised salary for Incident Response roles in Germany: €81,000–€115,000 (median €86,000 — from 10 recent listings analysed by Forensic Focus).
Learn More/Apply





