Cybersecurity Incident Response & Digital Forensics Manager

MAM Gruppe; Hamburg; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

MAM Gruppe in Hamburg is seeking a Cybersecurity Incident Response & Digital Forensics Manager to lead investigations from triage to root cause and closure. You will develop timelines, correlate indicators, and drive analysis beyond standard tooling, including global incidents when needed.

You will provide technical direction to an external MSP during live incidents, write reports for engineers and executives, and help shape IR playbooks, processes, and detection capabilities as the team grows.

Qualifikationen

• IR or DFIR background, not a SOC analyst profile.
• Experience investigating BEC, network intrusion, and ransomware incidents.
• Proficiency with Microsoft Defender EDR.
• Ability to work independently and make sound calls under pressure.
• Strong communication skills for briefing engineers and senior stakeholders.

Aufgaben

• Lead full investigations from triage to root cause and closure.
• Build timelines, connect indicators, and drive analysis beyond tooling surfaces.
• Cover global incidents independently when regional colleagues are offline.
• Provide technical direction to the external MSP during live incidents.
• Write incident reports that land with engineers and senior stakeholders.
• Help shape IR playbooks, process, and detection capability as the team grows.

Kenntnisse

Incident response

DFIR

Communication

Tools

Microsoft Defender EDR

Jobbeschreibung

Cybersecurity Incident Response & Digital Forensics Manager | Hamburg

The role

• Lead full investigations from initial triage handoff through to root cause and closure.
• Build timelines, connect indicators, and drive analysis beyond what the tooling surfaces.
• Cover global incidents independently when regional colleagues are offline.
• Provide technical direction to the external MSP during live incidents.
• Write incident reports that land equally well with engineers and senior stakeholders.
• Help shape IR playbooks, process, and detection capability as the team grows.

What you'll need

• A genuine IR or DFIR background, not a SOC analyst profile.
• Hands-on experience investigating BEC, network intrusion, and ransomware incidents.
• Proficiency with Microsoft Defender EDR.
• Confidence working independently and making sound calls under pressure.
• Strong communication skills, able to brief both engineers and senior stakeholders.