Senior Digital Forensics and Incident Response Consultant

About NTT DATA Europe & Latam

NTT DATA is a global leader in business and IT solutions, driving innovation towards a sustainable and connected future. Combining global presence with local market knowledge, we support our clients' success in the digital world with an extensive portfolio, from Connect to Create. We are a Global Top Employer, part of the NTT DATA Group with over $30 billion annual revenue and experts in more than 70 countries, offering strong competencies in AI, Cloud, Security, Connectivity, Data Centers, and Application Services. In the DACH region, we are represented at 15 locations in Germany, Austria, and Switzerland.

We believe technology is only as good as the people behind it. Diversity is an indispensable part of our success and corporate culture. We welcome applicants free from prejudice regarding gender, sexual orientation, age, ethnic and social origin, religion, or disability. People with severe disabilities are preferred if equally qualified.

Your Role as Senior Digital Forensics and Incident Response Consultant

We are seeking experienced professionals to strengthen our Digital Forensics Incident Response (DFIR) team. In this role, you will support clients in preparing for and managing security incidents, from initial response to root cause analysis. You will apply best practices and recognized standards in incident handling.

Your Mission

• Analyze attacks on corporate networks, servers, and hosts, assessing impacts on data protection, lateral movement, and persistence threats, and executing appropriate Incident Response measures.
• Perform forensic analyses at the host level (Live-Box Analysis, Dead-Box Analysis, Malware Analysis, etc.) and network level.
• Identify malware functionality through Malware Reverse Engineering.
• Generate Incident Response Reports for both technical and management audiences.
• Conduct proactive Incident Response activities, including Incident Response Plan and IR Playbook development, Tabletop Exercises (TTX), and training.
• Collaborate closely with other teams and coordinate efforts.

Your Benefits at NTT DATA Europe & Latam

• Flexible working hours with flextime and travel time counting as work time.
• 30 days of annual leave, plus December 24th and 31st as additional non-working days.
• Sabbatical opportunities for up to one year.
• Remote work and mobile work possible within EU countries.
• Attractive benefit and compensation optimization programs: company pension scheme, JobRad, Jobticket, exclusive discounts via Corporate Benefits, and more.
• Comprehensive health and preventive care offers: extended sick pay, occupational medical care, worldwide accident insurance for leisure activities, family service.
• Internal and external training opportunities through the NTT DATA Academy, including technical training, certification programs, soft-skill courses, and Udemy access.
• Diverse corporate volunteering opportunities, various communities, and initiatives (e.g., Diversity, Equity & Inclusion, Sustainability) with peer-to-peer knowledge exchange.
• Team-oriented corporate culture with significant scope for initiative.

Your Skillset

• Completed degree in Computer Science or comparable IT-related education.
• Excellent expertise in Forensics, Network, Windows, Mac, and Unix/Linux systems, as well as Mobile Forensics.
• SANS certifications such as GEIR, GCFE, GCFA, GNFA, GCFR, GREM or comparable are a significant advantage.
• Experience in Malware Reverse Engineering, including static and dynamic analysis.
• Familiarity with Security Frameworks like MITRE ATT&CK and NIST.
• Strong communication skills and business-fluent German and English, both written and spoken.
• Willingness to travel and flexibility for on-call duty.

Key skills/competency

• Digital Forensics
• Incident Response
• Malware Analysis
• Network Security
• Host Forensics
• Reverse Engineering
• Cybersecurity
• Threat Intelligence
• Security Frameworks (MITRE ATT&CK, NIST)
• Root Cause Analysis