Cybersecurity Incident Response & Digital Forensics Manager

Cybersecurity Incident Response & Digital Forensics Manager | Hamburg

The role

• Lead full investigations from initial triage handoff through to root cause and closure.
• Build timelines, connect indicators, and drive analysis beyond what the tooling surfaces.
• Cover global incidents independently when regional colleagues are offline.
• Provide technical direction to the external MSP during live incidents.
• Write incident reports that land equally well with engineers and senior stakeholders.
• Help shape IR playbooks, process, and detection capability as the team grows.

What you'll need

• A genuine IR or DFIR background, not a SOC analyst profile.
• Hands-on experience investigating BEC, network intrusion, and ransomware incidents.
• Proficiency with Microsoft Defender EDR.
• Confidence working independently and making sound calls under pressure.
• Strong communication skills, able to brief both engineers and senior stakeholders.