Manager Digital Forensics & Incident Response (DFIR) – Cyber Security

The Role

This senior position sits within a Forensic & Integrity Services team, leading digital forensic investigations across endpoint, network and cloud platforms. Day-to-day responsibilities include conducting live-response measures, reconstructing attack chains, managing the full incident response lifecycle from initial triage through to executive reporting, and advancing internal DFIR methodologies and automation capabilities.

Skills & Experience

Candidates should bring four to seven years of hands-on experience in incident response and digital forensics, with strong proficiency in DFIR tooling, threat analysis, and cloud forensics covering M365, Azure and AWS. Fluency in both German and English at C1 level or above is required, reflecting the international client base served.

Who It Suits

This role suits an experienced DFIR practitioner ready to step into a managerial position, comfortable owning complex investigations independently while also leading teams and communicating findings to senior stakeholders. Those with a consultancy mindset and appetite for varied, high-stakes engagements across diverse industries will thrive here.