Incident Response & Digital Forensics Analyst (f/m/d)

Concepture GmbH; United States; Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Ownership & autonomy

Flexible hours

International team

Training & certs

Meaningful projects

Strong values

Job summary

CC Intelligence, the US arm of Concepture Group, delivers incident response and digital forensics for enterprise clients. You will lead and support engagements across the full lifecycle.

The role requires hands-on expertise across endpoints, servers and cloud, and the ability to communicate clearly with both technical and executive audiences. We offer flexible hours with hybrid or remote work depending on the role, plus training and interdisciplinary teamwork.

Qualifications

• Several years of hands-on experience in incident response and/or digital forensics.
• Strong knowledge of endpoint, network and cloud forensics.
• Ability to communicate clearly with both technical and executive audiences.
• Authorization to work in the United States.

Responsibilities

• Leading and supporting incident response engagements across the full lifecycle
• Performing forensic analysis of endpoints, servers and cloud environments
• Preserving and documenting evidence to a defensible standard
• Producing clear technical and executive reporting for clients
• Contributing to detection improvements and lessons learned

Skills

Incident response

Digital forensics

Communication

Job description

When an incident hits, you keep a clear head – containing the threat, preserving the evidence and getting clients back on their feet. That's the work we do every day.

CC Intelligence is the US arm of the Concepture Group, focused on incident response and digital forensics for enterprise clients. We act as trusted advisors: vendor-neutral, evidence-driven and calm under pressure.

What you'll do

• Leading and supporting incident response engagements across the full lifecycle
• Performing forensic analysis of endpoints, servers and cloud environments
• Preserving and documenting evidence to a defensible standard
• Producing clear technical and executive reporting for clients
• Contributing to detection improvements and lessons learned

Must-have

• Several years of hands‑on experience in incident response and/or digital forensics
• Strong knowledge of endpoint, network and cloud forensics
• Ability to communicate clearly with both technical and executive audiences
• Authorization to work in the United States

Nice-to-have

• Relevant certifications (e.g. GCFA, GCIH, GNFA)
• Experience with critical-infrastructure or regulated clients
• Scripting skills for forensic automation

Benefits

• Real ownership and room to act instead of micromanagement
• Flexible hours and hybrid or remote work depending on the role
• An interdisciplinary, internationally minded team
• Training and certifications that fit your path
• Meaningful projects around critical infrastructure
• No fruit baskets – but deeper values and a team you can rely on