(Senior) Consultant – Digital Forensics & Incident Response
ResponseOne
Berlin
The Role
This position involves supporting organisations affected by cyberattacks, both remotely and on-site, as part of an incident response team. Daily work includes forensic acquisition of disks, images, logs and cloud data, manual forensic analysis to determine attack vectors and scope, and producing clear timelines and reports.
Skills & Experience
Candidates need a technical degree and one to three years of genuine digital forensics experience in Microsoft environments, familiarity with XWays, Eric Zimmerman tools, Eventlog Explorer, basic Linux knowledge, and fluent German. SANS certifications and tools like KAPE, Velociraptor or Volatility are advantageous.
Who It Suits
Ideal for early-career forensic practitioners with analytical mindsets, strong curiosity and documentation discipline, seeking mentorship and growth within a close-knit, specialist forensic and incident response consultancy team.
Typical advertised salary for Digital Forensics roles in Germany: €51,000–€75,000 (median €51,000 — from 20 recent listings analysed by Forensic Focus).
Compare Digital Forensics salaries in Germany →
Certifications mentioned: SANS — find training for these on the DFIR Training Finder.