Work with the operators.
DataExpert is a small, senior team that runs serious investigations for serious clients. If you are a forensics analyst, an IR engineer, an OSINT specialist, a cryptocurrency investigator, or an instructor with field experience — and you would rather operate than consult — this is the kind of place where that preference is the entire job.
How we work.
We are deliberately a flat operator team, not a big-firm pyramid. There are no junior practitioners doing analysis for senior practitioners to review; the analyst who scopes the case is the analyst who delivers it. That has implications for who thrives here, and we try to be honest about them up front.
Our work is varied. In one quarter, the same practitioner might lead a mobile-forensics engagement for a national-police investigations team, run a tabletop exercise for a bank's risk committee, and contribute a module to an Academy course on cryptocurrency tracing. We hire people who like that variety and who are comfortable being the named expert on a piece of work rather than one anonymous contributor among many.
We are EU-headquartered, with offices in Veenendaal, Rijswijk, Linköping, Slangerup, and Copenhagen. We work in English across the team and in the local languages — Dutch, Swedish, Danish — with clients. Most engagements involve some travel; many do not. We prioritise hybrid working over either pure remote or pure in-office models, and we are honest with candidates about which engagements require on-site presence.
We invest seriously in tooling, training, and certifications. Our practitioners hold current vendor certifications across the platforms our clients rely on, and the firm pays for that. We are also one of the few investigations firms with a dedicated Academy — which means our practitioners are regularly teaching, not just delivering, and the structured reflection that teaching forces is part of how we stay sharp.
We are direct. Internally and with clients, we say what we think — including when we think a particular tool is wrong for a case, a client is asking for the wrong thing, or a piece of work is not going well. That directness is one of the reasons clients keep coming back. It is also one of the cultural traits we screen for in hiring.
Open roles.
We hire selectively and we keep our roles open until we find the right person. If you do not see an open role today that matches your background, we still want to hear from operators with the kind of experience described below — we will keep a track for you and reach out when something fits.
No openings at the moment.
We do not currently have a public listing open — but we keep an active candidate pool. The people we typically hire are senior forensics analysts (mobile, computer, cloud), incident-response engineers, OSINT specialists with real fieldwork behind them, cryptocurrency investigators (Chainalysis or TRM Labs certified), Academy instructors who can teach as well as practice, and security-cleared candidates for our public-sector engagements. If any of that describes you, get in touch.
Operator at heart? We want to talk.
Even if there is no role open right now, the right introduction is always worth our time.
or call +31 (0)318 543173