Manager Digital Forensics & Incident Response (DFIR) – Cyber Security

Manager Digital Forensics & Incident Response (DFIR) – Cyber Security*EY

• Eschborn, Hesse Hybrid · Manager · Full-time

The RoleThe successful candidate leads digital forensic investigations across endpoint, network, and cloud platforms, including M365, Azure, and AWS. Day-to-day responsibilities include conducting live-response measures, reconstructing attack chains, managing technical and client-facing incident response from initial triage through to management reporting, and advancing DFIR methods and threat-hunting capabilities.
Skills & ExperienceApplicants should bring four to seven years of hands-on experience in incident response and digital forensics, with strong knowledge of DFIR tooling, threat analysis, and cloud forensics. Familiarity with modern attack vectors is essential. Business-level proficiency in both German and English (minimum C1) is required for client-facing work.

Who It SuitsThis role suits an experienced DFIR practitioner ready to step into a managerial position within a consulting environment. Those who thrive in fast-paced, interdisciplinary teams, enjoy client communication alongside technical investigation, and are keen to shape methodology and mentor others will find it particularly rewarding. Typical advertised salary forDigital Forensics roles in Germany:€51,000–€75,000(median €51,000 — from18 recent listings analysed by Forensic Focus). Compare Digital Forensics salaries in Germany →Learn More/Apply