A selection of the latest DFIR job vacancies (got a job you want to feature in the next round-up? Submit the details here):
United States
Digital Forensics Lead
Executive Integrity | B Corp™
United States
Take the lead on complex digital forensic investigations across enterprise and government environments, overseeing evidence handling, CMMC/NIST-aligned procedures, incident response playbooks, and audit-ready reporting, while mentoring analysts and shaping strategy for CUI protection and compliance-driven cybersecurity operations.
View JobForensic Security Engineer II, ITI Forensics
Amazon.com Services LLC
Arlington, VA
Conduct complex digital forensic and insider-threat investigations, perform forensically sound acquisitions from endpoints, mobile and cloud sources, and analyze large datasets. Build scalable Python/AWS tools to automate collection, processing, reporting, and quality assurance, with shared on-call support.
View JobCyber Triage and Forensics – Junior Analyst
EY
Rochester, NY
Entry-level analyst role in a global cyber defense center, monitoring security alerts, triaging incidents, correlating logs, and supporting network, cloud and endpoint investigations, with training and growth opportunities in incident response and cyber forensics.
View JobDigital Forensic Supervisor
City of Bloomington, MN
Bloomington, MN 55431
Guide and supervise a law-enforcement digital forensics unit, overseeing computer, mobile, and cloud examinations, evidence collection and preservation, QA and case management, lab infrastructure, policies and training, report writing, and expert court testimony supporting criminal investigations.
View JobPrincipal Forensic & Incident Response Architect
Henry Ford Health
Detroit, MI
Lead enterprise incident response and computer forensic investigations, including live response, triage, containment, and electronic discovery. Provide escalation support and oversight of investigations, conduct threat hunting and detection engineering, and run tabletop exercises across on-prem and cloud environments.
View JobDigital Forensics and Incident Response (DFIR) Analyst
Mission Support and Test Services, LLC
North Las Vegas, NV
Conduct complex digital forensics and incident response for critical national security systems, performing host and network investigations, malware analysis, evidence handling, and reporting, while guiding projects, developing procedures, and collaborating with legal, HR, and cybersecurity stakeholders.
View JobDigital Forensics and Incident Response (DFIR) Analyst
Mission Support and Test Services
North Las Vegas, NV
Head digital forensics and incident response efforts for a national security environment, supporting investigations and containment of cyber incidents, coordinating response activities, and strengthening detection and response capabilities while operating within strict compliance and mission-critical constraints.
View JobAssociate or Full Professor, Digital Forensics
Arizona State University
West Valley City, UT
Tenured faculty role leading digital forensics programme, establishing funded research, and teaching undergraduate and graduate courses in digital forensics, cybersecurity and computer science. Provides interdisciplinary collaboration, program development, mentoring, and service within a research-intensive university setting.
View JobMultimedia Forensic Analyst 2
State of New York – State Police, Division of
Albany, NY 12226
Conduct complex forensic analysis and extraction of analog/digital video, audio, and images; perform photogrammetry/reverse projection, produce court exhibits, provide expert testimony, support field acquisitions, review peers’ work, and manage QA, SOPs, discovery, and LIMS processes.
View JobUnited Kingdom
Cyber Threat Investigator
UK Ministry of Defence
England
Regular military cyber role hunting advanced threats across Defence networks. Conduct proactive threat hunting, incident investigation, malware and log analysis, detection engineering and reporting, following specialist cyber training, with DV clearance and UK-only nationality requirements.
View JobCyber Digital Forensics Analyst
UK Ministry of Defence
England
Join a military cyber unit conducting digital investigations, malware analysis and incident response. Analyse compromised systems, support vulnerability mitigation, maintain secure infrastructure, and receive structured cyber training, mentoring and strong benefits as part of national defence capabilities.
View JobDigital Forensic Specialist
Alexander Associates Technical Recruitment
Warwickshire, England
Digital forensic specialist conducts end-to-end examinations of computers and mobiles, preserving evidence, producing reports, maintaining ISO-accredited lab standards, and staying current with tools such as AXIOM, EnCase, Griffeye and X-Ways for client-facing casework.
View JobData Forensic Investigator
Devon and Cornwall Police
Exeter, England
Conduct digital examinations of seized computers and mobile devices, recover and document evidential data, support regional investigations, advise officers, and present technical findings in court within a police digital forensics unit offering structured training and flexible working.
View JobSenior Incident Responder (DFIR)
Tesco
Welwyn Garden City, England
Drive complex digital forensics and incident response investigations across host, network and cloud environments, perform root cause analysis, drive threat hunting and detection engineering, and enhance DFIR workflows while mentoring security operations analysts in a hybrid working environment.
View JobIncident Response Specialist
BAE Systems
Frimley, England
Lead complex cyber incident investigations, perform digital forensics on Windows, Linux and macOS, analyse network and security logs, assess threat actor techniques, mentor colleagues, and produce clear technical reports within a global response team with international travel.
View JobIncident Responder (DFIR)
Tesco
Welwyn Garden City, England
Join a DFIR team investigating host, network and cloud incidents, performing forensic analysis, supporting incident managers, contributing to threat hunting and detection engineering, and enhancing response capabilities across a large enterprise environment in a blended office/remote role.
View JobDigital Media Investigative Trainer
West Midlands Police
Birmingham, England
Designs, delivers and assesses accredited training on digital media handling, legal frameworks, evidence recovery, review and disclosure, and use of extraction tools. Maintains training records, quality-assures learning products, advises operational teams, and sustains professional accreditation.
View JobDFIR Lead
CyberClan
Telecommuting
Take the lead on global digital forensics and incident response operations, managing end-to-end cyber incident handling, investigations and remediation, developing IR plans, tooling and KPIs, mentoring CERT staff, supporting 24/7 response, and engaging clients on DFIR best practices and recovery.
View JobAustralia
Senior Analyst – Cyber Incident Response
Australian Energy Market Operator (AEMO)
Brisbane, Queensland
Lead cyber incident detection, investigation and response for critical energy infrastructure, conducting digital forensics, threat hunting and containment. Mentor team members, refine playbooks and controls, and collaborate across technology teams while participating in an on-call rotation.
View JobPrinciple Incident Response Manager
Woolworths Group
Sydney, New South Wales
Lead critical cyber incident response and digital forensic investigations within a major CSOC, overseeing high-severity breaches, mentoring analysts, shaping IR playbooks, and collaborating with security teams to enhance detection, automation, and organisational resilience across complex environments.
View JobSenior Digital Forensics & Incident Response (DFIR) Analyst
Interactive
Melbourne, Victoria
Conduct advanced digital forensics and incident response across systems, networks and cloud, performing triage, evidence collection, malware analysis and reporting. Requires 3+ years DFIR, tool expertise and NV1-eligible Australian citizenship. Port Melbourne-based with hybrid work and on-call flexibility.
View JobDigital Forensic Investigator
CyberCX
Sydney, New South Wales
Perform end-to-end digital forensic investigations across computers, mobile and cloud, managing evidence lifecycle, reporting defensible findings, supporting DFIR operations and on-site engagements, while developing expertise with leading forensic tools and certifications in a security-cleared environment.
View JobSenior Incident Response and Digital Forensics Lead
Decipher Bureau
Melbourne, Victoria
Deliver high-severity cyber incident response and in-depth digital forensic investigations across endpoints, networks and cloud. Direct SOC improvements, own root-cause analysis and evidence integrity, and mentor responders while communicating clear guidance to senior stakeholders.
View JobSenior Digital Forensics & Incident Response (DFIR) Analyst
Interactive
Melbourne VIC 3207
Lead complex incident response and digital forensic investigations across endpoints, networks and cloud. Conduct triage, recommend containment, collect and preserve evidence, analyse malware and IOCs/TTPs, collaborate with threat intel, and produce detailed investigation reports.
View JobCanada
Manager, Digital Forensics Incident Response
SITA
Montreal, Quebec
Supervise high-severity cyber incident investigations, perform digital forensics across endpoints, cloud and networks, coordinate SOC and IT teams, drive threat hunting and detection engineering, and enhance tools, playbooks and reporting to strengthen security for global air-transport clients.
View JobProject-Based Role – Digital Forensic Data Collection Specialist
Deloitte
Toronto, Ontario
Independent contractor role conducting digital evidence collection and preservation for investigations and litigation. Acquire data from varied sources, support fraud and cybercrime cases, use leading forensic tools, and travel regionally within Canada for project-based engagements.
View JobIncident Response Lead (Cyber)
CyberClan
Telecommuting
Lead global CERT/DFIR operations, overseeing end-to-end incident detection, analysis, forensics, containment and remediation, managing tooling, processes and KPIs, mentoring responders, conducting live endpoint and cloud investigations, and supporting 24/7 cyber breach response for Canadian clients.
View JobSenior Consultant / Manager, Digital Forensics
Deloitte
Toronto, Ontario
Lead and deliver end-to-end digital forensic investigations for fraud, cyber incidents and workplace matters, managing collections, preservation, analysis and reporting, while overseeing teams, client relationships, practice development and business growth in a hybrid consulting environment.
View JobX-Force Incident Response Intern
IBM
Toronto, Ontario
Join an elite incident response team as a 4‑month intern supporting global cyber investigations, threat hunting, and crisis management. Assist with IR planning and digital, memory, and malware forensics while developing consulting and technical skills.
View JobSenior Associate / Cybersecurity & Incident Response
Charles River Associates
Toronto, Ontario
Leads cybersecurity incident response and digital forensic investigations into breaches, fraud, and cybercrime, conducting malware and network analysis, advising on security controls and frameworks, preparing client communications, supporting law enforcement matters, and mentoring junior consultants.
View Job
