Cyber Response & Recovery Manager (Reactive DFIR) – German Speaking

Forensic Focus Limited; Greater London; On-site; GBP 65,000 - 100,000; Full time

Job summary

Forensic Focus Limited in London is seeking an experienced DFIR practitioner to lead incident response engagements, manage cases end-to-end, and mentor junior staff in a fast-paced client-facing environment.

The role requires a strong digital forensics and IR background, eligibility for SC or DV clearance, and German language proficiency. You will contribute to playbooks, maturity assessments, runbooks, and internal tooling while shaping the practice.

Qualifications

• Strong technical background in digital forensics and incident response.
• Eligibility for SC or DV security clearance.
• Experience contributing to playbooks, maturity assessments, or tabletop exercises is advantageous.
• German language proficiency required.

Responsibilities

• Manage medium to large incident response cases.
• Support clients in building internal IR capabilities.
• Develop internal tooling, processes, and team training when not engaged on active cases.

Skills

Digital forensics

Incident response

Leadership / case management

German language

Job description

The Role

This hands-on position sits within a cyber advisory practice, focusing on reactive digital forensics and incident response. Day to day, the role involves managing medium to large incident response cases, supporting clients in building internal IR capabilities, contributing to runbooks and playbooks, and developing internal tooling, processes, and team training when not engaged on active cases.

Skills & Experience

Candidates require a strong technical background in digital forensics and incident response, with proven incident management experience. The role demands eligibility for SC or DV security clearance. Opportunities exist to obtain recognised security certifications, and experience contributing to playbooks, maturity assessments, or tabletop exercises is advantageous. German language proficiency is required.

Who It Suits

This role suits an experienced DFIR practitioner ready to step into a leadership and case management capacity. It is well matched to someone who thrives in a fast-paced, client-facing environment, is eager for continuous professional development, and wants broad exposure across a high volume and variety of incident response engagements.