German Digital Forensics and Incident Response (DFIR) Consultant

The Role

This position involves responding to cyber incidents on behalf of clients, conducting Windows and Unix/Linux forensic investigations, collecting disk and memory images from physical and virtual systems, analysing artefacts for indicators of compromise, reviewing host and appliance logs, and building event timelines to support post-breach remediation efforts.

Skills & Experience

Candidates require at least two years in digital forensics or incident response, fluency in both English and German, and working knowledge of Windows and Unix/Linux environments. Familiarity with EDR and EPP technologies, forensic acquisition tools, malware analysis methodologies, and storage technologies such as RAID, NAS, SAN, iSCSI, and Fibre Channel is essential.

Who It Suits

This role suits a bilingual forensics professional who thrives in fast-paced, high-pressure incident response environments and is comfortable engaging with legal counsel, insurers, and executive stakeholders. Someone with a strong analytical mindset, a solid grasp of the cyber kill chain, and a commitment to staying current with emerging threats will excel here.