ZEISS
Digital Forensic Analyst (f/m/d)
Germany · Work style not stated · Full time
Apply on the employer’s site ↗See how well you match this job
You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.
About the role
Description from the employer’s posting. Check the employer’s page for the current version.
- EmployerZEISS
- LocationGermany
- Work styleWork style not stated
- Employment typeFull time
- Employer posted
Welcome to ZEISS – a company that combines innovation and responsibility! Our corporate functions are diverse and make a decisive contribution to the strategic orientation and sustainable success of ZEISS.
Corporate Information Technology (CIT) is the central part of the company’s strategy, developing and implementing innovative security solutions to enhance efficiency and competitiveness in the Carl Zeiss Group. By working closely with various business units, CIT ensures that technological advancements and digital transformations are seamlessly integrated into business processes.
Your Role:
As a Digital Forensic Analyst, you will be responsible for investigating and reconstructing information security incidents using advanced forensic tools and methodologies, ensuring compliance with legal and industry standards. You will proactively hunt for threats, support the Cybersecurity Incident Response Team with expert analysis, and collaborate with internal stakeholders to improve the organization’s security posture. In addition, you will develop forensic reports, provide training, and continuously optimize forensic processes and technologies.
Show full description
Conduct digital forensic investigations in the context of information security incidents, ensuring thorough and accurate analysis.
Collect, preserve, and document forensic evidence in accordance with industry standards and legal requirements.
Reconstruct and analyze security incidents using advanced forensic tools and techniques.
Support the Cybersecurity Incident Response Team (CSIRT) with expert insights during incident detection, analysis, and remediation.
Perform proactive threat hunting by analyzing network traffic, log data, and endpoint activities to detect indicators of compromise (IoCs) and hidden threats.
Create detailed forensic reports and present technical findings clearly to internal stakeholders, including risk and legal teams.
Work closely with internal IT and security teams to drive improvements in post-incident security measures and architecture.
Deliver training and awareness sessions on digital forensics best practices, including for SOC Level 2 Analysts and other security stakeholders.
Continuously assess and enhance forensic methodologies, tools, and workflows to improve investigation quality and efficiency.
Your Profile:
Degree in Computer Science, IT Security, or a related work experience.
Proven experience in digital forensics, information security incident response, or cybersecurity.
Strong knowledge of relevant best practices, laws, and regulations related to digital forensics and cybersecurity in the EU, such as NIS2 Directive.
Hands-on experience in analyzing digital evidence, including Windows and iOS mobile forensics.
Proficiency in forensic tools such as Exterro FTK Imager, Nextron THOR, Velociraptor by Rapid7, or Magnet Axiom.
Strong understanding of network protocols, malware analysis, data recovery, analytical skills, structured work approach and problem-solving competence.
High level of self-motivation, results-oriented mindset.
As part of the recruitment process, security-relevant background checks may be conducted. In the advanced application process, a police clearance certificate must be provided.
Your ZEISS Recruiting Team:
Lisa Briesner
Check your resume against this job Free, no sign-up. Nothing you paste is stored.
Staying safe while you apply
- Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
- Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
- Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.
Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.
Preparing for this role with ROLIVA
- Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
- Prepare honestly.
Build interview stories and application drafts from your own evidence.
- Keep track.
Save the role and record your own application status and follow-ups.
At a glance
- Employment typeFull time
- Employer posted
- Added to ROLIVA
- Last checked