IT Forensics Specialist

Quick Facts

Permanent position in full-time or part-time employment in the public service. The role focuses on IT-forensic investigations within regulatory examinations, including court-ready reporting and development of IT-forensics capabilities.

Description

You will support IT-forensic investigations conducted during supervisory examinations of regulated companies. The work includes preparing and running short-notice IT forensic analyses, examining digital traces and artifacts (including possible access to recovered and deleted data/systems), and drafting investigation reports suitable for court proceedings. You will also contribute to the strategic planning and further development of the IT-forensics infrastructure and collaborate in interdisciplinary teams.

Responsibilities

• Support the planning, organization, and execution of short-notice IT-forensic analyses during investigations of supervised companies
• Prepare analyses through research in publicly accessible sources
• Support clarification of regulatory violations and other misconduct in interdisciplinary examination teams
• Secure, investigate, restore, and prepare digital data, including access to backed-up and deleted data and systems
• Analyze IT systems for digital traces and artifacts to clarify the digital “scene of the incident”
• Assist in producing court-ready investigation reports based on IT-forensic findings
• Contribute to strategic planning and the further development of the IT-forensics infrastructure
• Work with and communicate to internal and external stakeholders (e.g., public prosecutors, audit firms)

Requirements

• Completed university degree (Bachelor/FH) with a relevant focus (economics, mathematics, (administrative) informatics, IT forensics, business informatics, physics with IT focus) with a final grade at least “satisfactory” — OR at least 3 years of relevant experience based on an IT-focused qualification after an IT vocational training (e.g., IT specialist)
• Mandatory: at least 2 years of professional experience in IT forensics, including explicit initial and/or continuing training in that area
• Strong knowledge of the architecture and functioning of common operating systems, file systems, networks, and databases
• Ideally experience with IT-forensics tools such as X-Ways, EnCase, and Nuix, as well as eDiscovery tools
• Respectful, fact-oriented working style; ability to collaborate with colleagues and external partners
• Ability to understand and classify new developments in a digitization-driven environment
• Openness to project-based work; ideally experience with agile working methods
• Good English skills
• German language skills: at least C1 (GER)
• Eligibility for public employment/civil service requirements, including EU/EEA/Swiss citizenship as required, and commitment to the free democratic constitutional order
• Mandatory consent to an enhanced security screening prior to employment
• Willingness to undertake official business trips (often planned; may last several days)

Benefits

• Specialist team with open information and knowledge exchange
• Comprehensive onboarding and individual qualification opportunities
• Opportunity to work independently with flexible working hours
• Mobile work with at least 40% presence in the office
• Extensive social benefits and benefits
• Public-service employment at pay grade 11 TVöD plus position allowance and Christmas bonus; possibility of civil-service appointment and temporary deployments at national or European level