Digital Forensics Analyst; CIT - IT Security

Digital Forensic Analyst

Corporate Information Technology (CIT) is the central part of the company's strategy, developing and implementing innovative security solutions to enhance efficiency and competitiveness in the Carl Zeiss Group. By working closely with various business units, CIT ensures that technological advancements and digital transformations are seamlessly integrated into business processes.

As a Digital Forensic Analyst, you will investigate and reconstruct information security incidents using advanced forensic tools and methodologies, ensuring compliance with legal and industry standards. You will proactively hunt for threats, support the Cybersecurity Incident Response Team (CSIRT) with expert analysis, and collaborate with internal stakeholders to improve the organization's security posture. In addition, you will develop forensic reports, provide training, and continuously optimize forensic processes and technologies.

• Conduct digital forensic investigations in the context of information security incidents, ensuring thorough and accurate analysis.
• Collect, preserve, and document forensic evidence in accordance with industry standards and legal requirements.
• Reconstruct and analyze security incidents using advanced forensic tools and techniques.
• Support the CSIRT with expert insights during incident detection, analysis, and remediation.
• Perform proactive threat hunting by analyzing network traffic, log data, and endpoint activities to detect indicators of compromise (IoCs) and hidden threats.
• Create detailed forensic reports and present technical findings clearly to internal stakeholders, including risk and legal teams.
• Work closely with internal IT and security teams to drive improvements in post‑incident security measures and architecture.
• Deliver training and awareness sessions on digital forensics best practices, including for SOC Level 2 Analysts and other security stakeholders.
• Continuously assess and enhance forensic methodologies, tools, and workflows to improve investigation quality and efficiency.

• Degree in Computer Science, IT Security, or a related field.
• At least 5 years of experience in digital forensics, information security incident response, or cybersecurity.
• Strong knowledge of relevant best practices, laws, and regulations related to digital forensics and cybersecurity in the EU, such as the NIS2 Directive.
• Hands‑on experience in analyzing digital evidence, including Windows and iOS mobile forensics.
• Proficiency in forensic tools such as Exterro FTK Imager, Nextron THOR, Velociraptor by Rapid7, or Magnet Axiom.
• Strong understanding of network protocols, malware analysis, data recovery, and analytical skills, with a structured work approach and problem‑solving competence.
• High level of self‑motivation and results‑oriented mindset.
• Fluent in English;
  German is a plus.

• Technology stack:
  Modern, cutting‑edge technology stack with opportunities to experiment and innovate within a high‑tech group.
• Flexible work options: 40-60% hybrid work option to provide flexibility and work‑life balance.
• Additional benefits:
  Annual flexible benefits that include cafeteria options, private health plans, and annual rewards.
• Extra option:
  Company parking space in the underground garage of the office building can be reserved.
• Opportunity to directly contribute to the development of innovative products through software delivery.
• Supportive work environment: collaboration with excellent teammates and a supportive lead who guide and support professional development from day one.

At ZEISS we encourage creative thinking and innovation, working in dynamic and interdisciplinary teams and offering individual development perspectives and flexibility in organizing work. We care about our employees and take responsibility for improving society and preserving our environment. These core values have shaped our corporate culture for over 175 years. We are an equal opportunity employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or any other protected characteristic.