Cyber Response & Recovery Manager; Reactive DFIR German Speaking

The Role

This hands-on position sits within a cyber advisory practice, focusing on reactive digital forensics and incident response. Day to day, the role involves managing medium to large incident response cases, supporting clients in building internal IR capabilities, contributing to runbooks and playbooks, and developing internal tooling, processes, and team training when not engaged on active cases.

Candidates require a strong technical background in digital forensics and incident response, with proven incident management experience. The role demands eligibility for SC or DV security clearance. Opportunities exist to obtain recognised security certifications, and experience contributing to playbooks, maturity assessments, or tabletop exercises is advantageous. German language proficiency is required.

This role suits an experienced DFIR practitioner ready to step into a leadership and case management capacity. It is well matched to someone who thrives in a fast-paced, client-facing environment, is eager for continuous professional development, and wants broad exposure across a high volume and variety of incident response engagements.