Senior Digital Forensics and Incident Response Consultant

Forensic Focus Limited; Wolfsburg; Hybrid; EUR 81.000 - 115.000; Vollzeit

Zusammenfassung

NTT DATA Europe & Latam in Wolfsburg seeks a Senior Digital Forensics and Incident Response Consultant to lead investigations on corporate networks and hosts, performing live and dead-box forensics, plus network analysis and malware reverse engineering.

You will head incident response engagements, conduct root cause analysis, and create proactive IR artefacts such as playbooks, tabletop exercises, and client training.

Qualifikationen

• Requires a degree in computer science or equivalent.
• Strong expertise across Windows, macOS, Linux and mobile forensics.
• SANS certifications (GCFE, GCFA, GNFA or GREM) are advantageous; familiarity with MITRE ATT&CK and NIST is expected.

Aufgaben

• Investigate attacks on corporate networks, servers and hosts, performing live and dead-box host forensics and network-level analysis.
• Lead active incident response engagements, conduct root cause analysis, and develop proactive IR artefacts (playbooks, tabletop exercises, client training).

Kenntnisse

Windows forensics

macOS forensics

Linux forensics

Mobile forensics

Malware analysis

MITRE ATT&CK

NIST frameworks

Incident response

Ausbildung

Bachelor's degree in Computer Science

GCFE

GCFA

GNFA

GREM

Jobbeschreibung

# Senior Digital Forensics and Incident Response Consultant*NTT DATA Europe & Latam***Wolfsburg, Lower Saxony**Hybrid · Senior · Full-time### The RoleConsultants investigate attacks on corporate networks, servers and hosts, performing live and dead-box host forensics, network-level analysis and malware reverse engineering. They lead active incident response engagements, conduct root cause analysis, and develop proactive IR artefacts such as playbooks, tabletop exercises and client training.### Skills & ExperienceCandidates should hold a degree in computer science or equivalent and demonstrate strong expertise across Windows, macOS, Linux and mobile forensics. SANS certifications including GCFE, GCFA, GNFA or GREM are advantageous. Familiarity with MITRE ATT&CK and NIST frameworks is expected, alongside malware static and dynamic analysis experience.### Who It SuitsThis role suits an experienced DFIR professional comfortable working both on active incidents and on proactive security engagements. The position requires business-level German and English, a willingness to travel, and the flexibility to participate in on-call arrangements for urgent client incidents.Typical advertised salary forIncident Response roles in Germany:**€81,000–€115,000**(median €87,000 — from14 recent listings analysed by Forensic Focus).Compare Incident Response salaries in Germany →Certifications mentioned:GCFA · GCFE · GREM · GNFA · SANS — find training for these on theDFIR Training Finder.Learn More/Apply