Manager Digital Forensics & Incident Response (DFIR) – Cyber Security
EY
Munich, Bavaria
The Role
This position leads digital forensic investigations across endpoint, network, and cloud environments, analysing cyberattacks and reconstructing attack chains. The role manages the full incident response lifecycle, from initial triage through to executive-level reporting, while also advancing DFIR methodologies, threat-hunting approaches, and automation capabilities.
Skills & Experience
Candidates require four to seven years of hands-on incident response and digital forensics experience, with strong expertise in threat analysis, DFIR tooling, and cloud forensics covering platforms such as M365, Azure, and AWS. Proficiency in both German and English at C1 level or above is essential.
Who It Suits
This role suits an experienced forensic professional who is comfortable operating at a senior technical level while communicating clearly with management stakeholders. Those who approach complex cyber incidents with agility, intellectual curiosity, and a solutions-focused mindset will thrive in this consultancy-facing environment.
Typical advertised salary for Digital Forensics roles in Germany: €51,000–€74,000 (median €51,000 — from 13 recent listings analysed by Forensic Focus).
Learn More/Apply
