(Senior) Cyber Security Expert (m/w/d) DFIR, Adversary Operations & Assessments

The Role

This position sits within a cyber security and incident response team, supporting national and international clients through complex security incidents. Day-to-day work spans digital forensic investigations, attack reconstruction along the kill chain, penetration testing, adversary operations including red and purple teaming, and conducting security and compromise readiness assessments.

Skills & Experience

Candidates are expected to bring hands-on expertise in DFIR, threat emulation aligned with MITRE ATT&CK, and detection and response technologies such as SIEM, EDR/XDR, and SOAR platforms. Experience designing and evaluating detection and response concepts is essential, alongside the ability to identify and close gaps in both processes and technical controls.

Who It Suits

This role suits an experienced cyber security professional who is equally comfortable leading forensic investigations and conducting offensive security engagements. Someone who works methodically under pressure, communicates findings clearly to clients, and is motivated by protecting organisations across both technical and compliance dimensions would thrive here.