Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

Digital Forensics Jobs

Current DFIR openings worldwide, updated daily. Links to original listings.

North America

United States

Consulting Associate/Cybersecurity & Incident Response (Forensic Services practice)

Charles River Associates

Boston, MA

Onsite · Mid · Internship

Consulting associate role supporting forensic investigations into data breaches and fraud, performing digital forensics, malware analysis, and incident response, with report drafting and potential expert testimony for legal counsel and clients.

View Job

Senior Associate/Digital Forensics (Forensic Services practice)

Charles River Associates

Washington, DC

Onsite · Senior · Full-time

Lead forensic investigations across MacOS, iOS, Android, Windows and Linux devices, handling data collection, artifact analysis, trade secret investigations, and client-facing project management within a forensic services consulting practice.

View Job

Engineering and Forensics Engineer

Deloitte

Los Angeles, CA

Onsite · Senior · Full-time

Forensic analyst role investigating Windows and Linux endpoints, servers, disk and memory evidence to identify malicious activity, map findings to the Cyber Kill Chain, and produce detailed incident reports.

View Job

Cyber Threat (Forensics) Analyst, Senior Associate

Peraton

Chantilly, VA

Onsite · Senior · Full-time

Conduct host-based, network-based and memory forensic examinations supporting criminal and national security investigations, using industry tools, producing technical reports, and briefing findings to varied audiences; active TS/SCI clearance required.

View Job

Digital Forensic Examiner

Booz Allen Hamilton

Washington, DC

Onsite · Mid · Full-time

An intermediate-to-advanced DFIR examiner role collecting and analysing forensic evidence, malware, and logs to support cyber incident investigations, producing detailed technical reports and client-facing analysis.

View Job

Cyber Threat Analyst

The Amatriot Group

Chantilly, VA

Onsite · Mid · Full-time

Supports DoJ cyber investigations by analyzing intrusion activity, host and network forensic artifacts, and digital communications using Splunk, EnCase, AXIOM and X-Ways in a cleared operational environment.

View Job

View all 238 United States jobs →

Canada

Video Analyst

Halton Regional Police Service

Oakville, Ontario

Onsite · Mid · Temporary

Temporary full-time role analysing and processing video and multimedia evidence for criminal investigations, using forensic software to enhance footage, maintain evidence continuity, and provide expert court testimony.

View Job

Enquêteur principal, informatique judiciaire; enquêteuse principale, informatique judiciaire

Ontario Finance | Ontario Finances

Oshawa, Ontario

Onsite · Lead/Principal · Full-time

Lead a team of digital forensic investigators handling complex fraud and tax-related investigations, executing search warrants, mentoring staff, and supporting prosecutions across the province.

View Job

Senior Computer Forensic Investigator

Ontario Finance | Ontario Finances

Oshawa, Ontario

Onsite · Senior · Full-time

Lead a team of computer forensic investigators conducting complex digital forensic examinations supporting tax compliance and fraud investigations, mentoring staff, executing search warrants, and ensuring defensible evidence handling across provincial cases.

View Job

DFIR Manager

Connect-AI

Canada

Remote · Manager · Full-time

Lead high-severity cyber incidents end-to-end while staying hands-on technically, overseeing endpoint, network and cloud forensic investigations, mentoring analysts, and advising clients through ransomware, BEC and breach engagements.

View Job

Senior Cyber Incident Response Consultant (DFIR)

The Tech Recruiter

Ontario

Remote · Senior · Full-time · CA$180,000.00/yr - CA$207,000.00/yr

Lead complex cyber incident investigations, performing advanced forensics across Windows, Linux, macOS and cloud environments, while advising clients, mentoring junior analysts, and strengthening organisational incident response readiness.

View Job

Conseiller en DFIR – Intermédiaire

OKIOK Data ltd

Laval, Quebec

Onsite · Mid · Full-time

Mid-level DFIR consultant needed to respond to cyber incidents, conduct forensic investigations across endpoints and networks, and deliver technical reports, working closely with SOC and IT teams.

View Job

View all 38 Canada jobs →

UK & Europe

United Kingdom

Incident Response Sr. Consultant (Remote)

CrowdStrike

United Kingdom

Remote · Senior · Full-time

Senior consultant role conducting incident response investigations for major global organisations, performing host, network and cloud forensics, hunting threat actors, and delivering findings to stakeholders and legal counsel.

View Job

Digital Forensics – Team Leader

Resillion

Birmingham, England

Onsite · Lead/Principal · Full-time

Lead a team of digital forensic investigators, conducting computer and mobile device examinations, producing court-ready reports, mentoring junior staff, and ensuring quality and compliance with forensic accreditation standards.

View Job

UK Cyber Manager – DFIR

LevelBlue

United Kingdom

Remote · Manager · Full-time

Lead hands-on digital forensics and incident response engagements, investigating breaches across endpoints, servers and cloud platforms, producing defensible reports and presenting findings to clients and senior stakeholders.

View Job

Digital Forensics and Incident Response Consultant

Outbreach

United Kingdom

Remote · Senior · Contract

Join a bench of DFIR practitioners handling live incidents, from evidence acquisition through host, cloud and identity forensics to writing evidential reports for clients, insurers, lawyers and regulators on a flexible, hourly-rate basis.

View Job

Digital Forensics Investigator

City of London Police

City Of London, England

Onsite · Junior · Full-time

A police digital forensics unit seeks an investigator to image, extract and examine digital evidence, maintain evidential integrity, and provide statements and court testimony supporting criminal investigations across all crime types.

View Job

Digital Forensics & Incident Response

Candour

Manchester, England

Onsite · Senior · Full-time · £80,000.00/yr - £90,000.00/yr

Join a growing cyber security software company investigating security incidents, validating forensic evidence, and advising customers, while shaping product development alongside the founding team.

View Job

View all 70 United Kingdom jobs →

Ireland

Digital Forensics & Incident Response (DFIR)

Tech Skills Resources (part of the CPL Group)

Cork, County Cork

Hybrid · Senior · Full-time

Experienced cyber security professionals needed to lead digital forensics and incident response engagements across EMEA, covering ransomware investigations, endpoint and cloud forensics, and client-facing consulting at various seniority levels.

View Job

Advisory – Forensic Technology Manager / Assistant Manager / Senior Consultant – Dublin/Belfast

Grant Thornton Ireland

Dublin, County Dublin

Hybrid · Senior · Full-time

Deliver digital investigations, eDiscovery and data analysis across computers, mobile devices and cloud platforms, supporting disputes, misconduct and regulatory matters, with scope to lead engagements at varying seniority levels.

View Job

Digital Forensics and Incident Response (DFIR) analyst

Reinsurance Group of America, Incorporated

Ireland

Hybrid · Senior · Full-time

Senior DFIR professional needed to lead complex cyber investigations across global enterprise environments, combining hands-on digital forensics, threat hunting, cloud and host investigations, and executive stakeholder engagement within a reinsurance organisation.

View Job

Manager, Incident Response

Arctic Wolf

Ireland

Remote · Manager · Full-time

Lead and develop a team of incident response professionals, overseeing complex DFIR investigations including ransomware, BEC and large-scale recovery efforts, while driving operational excellence, quality standards and team capability growth.

View Job

Professional Services Principal Consultant – Incident Response, French-Speaking (Remote)

CrowdStrike

Dublin

Remote · Lead/Principal · Full-time

French-speaking principal consultant leading incident response investigations and host/network forensic analysis across Windows, Mac and Linux. Engages Fortune 100 clients, produces reports for legal counsel, and contributes to cloud IR and threat hunting activities.

View Job

Forensic Technology Senior Consultant (eDiscovery)

Deloitte

Dublin, County Dublin

Hybrid · Senior · Full-time · €55,000 a year

Lead complex eDiscovery and forensic technology engagements across litigation, regulatory, and investigation matters. Manage EDRM workflows, conduct forensic collections, administer RelativityOne, and coach junior staff within a professional services environment.

View Job

Germany

Wissenschaftliche/-r Fachexpertin/Fachexperte mit Forschungskompetenz IT-Forensik (IoT)

Land Niedersachsen

Hannover, Lower Saxony

Onsite · Senior · Full-time

A state criminal police unit seeks a research-oriented IT forensics specialist to analyse IoT and smart home devices, develop forensic methods, and support investigations and court reporting.

View Job

Senior Consultant Forensic eDiscovery – Digital Forensics & Analytics

Deloitte

Hamburg

Hybrid · Senior · Full-time

Senior consultant role combining digital forensics and eDiscovery, covering forensic data collection, processing, analytics and GenAI-enabled review for investigations, litigation and cyber incident response.

View Job

Experte für Digitale Forensik und Incident Response

Deutsche Telekom

Munich, Bavaria

Hybrid · Mid · Full-time

Supports clients with digital forensics and incident response engagements, conducting forensic analysis, securing digital evidence, advising on containment measures, and participating in workshops and on-call duties.

View Job

Computerforensiker

DigForIT GmbH

Munich, Bavaria

Onsite · Junior · Full-time

Join a specialist forensics firm examining computers, phones and cloud data for criminal investigations, decrypting protected devices, and training to become a court-appointed expert witness in Munich.

View Job

Leitung des Fachbereichs „Mobilfunkforensik“ im Kommissariat 33 – IT-Forensik – (herausgehobene Sachbearbeitung)

Hochschule der Polizei

Ludwigshafen, Baden-Württemberg

Onsite · Lead/Principal · Full-time

Lead a mobile phone forensics unit within a police IT forensics department, overseeing evidence acquisition, technical analysis of digital traces, court-ready documentation, and quality assurance for investigations.

View Job

(Senior) Consultant – Digital Forensics & Incident Response

ResponseOne

Berlin

Hybrid · Mid · Full-time

Join a specialist cyber incident response team conducting hands-on forensic investigations for compromised organisations, covering evidence acquisition, manual analysis, timeline reconstruction and client reporting, with hybrid working in Berlin.

View Job

View all 68 Germany jobs →

Netherlands

senior tactische opsporing Uitleesservice

Politie Nederland

’s-Hertogenbosch, North Brabant

Onsite · Senior · Full-time

Experienced police investigator sought to extract, process and analyse digital evidence from phones, laptops and navigation systems, coordinating forensic read-out requests and supporting colleagues within a specialist digital investigation team.

View Job

digitaal professional Uitleesservice

Politie Nederland

’s-Hertogenbosch, North Brabant

Onsite · Senior · Full-time

Senior digital forensics specialist needed to extract, analyse and report on digital evidence from phones, laptops and navigation systems, coordinate forensic requests, and support colleagues with complex police investigations.

View Job

digitaal professional Uitleesservice – Sr. TO

Politie Nederland

’s-Hertogenbosch, North Brabant

Onsite · Senior · Full-time

A senior forensic examiner is sought to perform and coordinate forensic extraction and analysis of digital devices such as phones, laptops and navigation systems, supporting police investigations with technical reporting and quality oversight.

View Job

Digitaal Onderzoekspecialist

Nederlandse Zorgautoriteit

Utrecht

Hybrid · Mid · Full-time

Join a regulatory investigations team to secure and process digital evidence using eDiscovery, forensics and OSINT, supporting healthcare fraud investigations and shaping forensic methodology and tooling.

View Job

stage forensisch digitaal onderzoek – Politieacademie

Politie Opleiding Centrum Zuid Nederland

Apeldoorn, Gelderland

Onsite · Junior · Full-time

Internship for students investigating digital evidence from mobile devices, IoT and embedded systems, building forensic tooling and supporting police training materials on cybercrime investigation.

View Job

Specialist – Forensic Examiner (Decryption)

Europol

The Hague, South Holland

Hybrid · Mid · Full-time

Join a European law enforcement body to deliver expert decryption and digital forensic services, operate a large-scale GPU decryption platform, develop tools and methods, and liaise with EU member states and international partners.

View Job

View all 29 Netherlands jobs →

Middle East

United Arab Emirates

Digital Forensics and Incident Response Consultant (UAE)

Outbreach

United Arab Emirates

Remote · Senior · Contract

Join a bench of DFIR practitioners handling ransomware, BEC and insider incidents, from evidence acquisition and timeline reconstruction through to writing reports relied on by clients, insurers and lawyers.

View Job

International Contract Bench, Incident Response (DFIR)

Jobgether

United Arab Emirates

Remote · Senior · Contract

A flexible contract role supporting live digital investigations across endpoint, network, cloud and SaaS environments. Investigators handle ransomware, BEC, nation-state threats and account compromise, contributing forensic expertise on a part-time basis.

View Job

Expert Engineer/Security Operation Centre

e& UAE

Abu Dhabi, Abu Dhabi Emirate

Onsite · Senior · Full-time

A senior DFIR role within a security operations centre, responsible for forensic investigations, threat hunting, incident response across Windows, Linux, macOS, mobile and cloud platforms, and developing detection playbooks and remediation strategies.

View Job

Senior Consultant – Incident Response

CPX

Abu Dhabi, Abu Dhabi Emirate

Onsite · Senior · Full-time

Senior DFIR consultant role leading incident response engagements and digital forensic investigations across Windows, Mac, Linux and mobile platforms, supporting SOC activities, threat hunting, and producing detailed technical reports for clients.

View Job

Senior Manager – Incident Response

CPX

Abu Dhabi, Abu Dhabi Emirate

Onsite · Manager · Full-time

Lead a dedicated DFIR team embedded with a single VIP client, overseeing incident response engagements, forensic investigations across host, network and mobile platforms, threat hunting, and team development in a high-stakes cyber defence environment.

View Job

Incident Response Security Consultant, Mandiant

Google

Dubai

Hybrid · Mid · Full-time

Lead complex, client-facing incident response engagements involving host, network, and cloud forensics, malware triage, and threat hunting. Communicate findings to technical and executive audiences, mentor junior staff, and enhance investigation processes.

View Job

View all 10 United Arab Emirates jobs →

Israel

DFIR Expert

Nebius

Israel

Onsite · Senior · Full-time

A senior hands-on responder investigates major security incidents across cloud, platform and endpoint environments, leading forensic analysis, evidence handling, and post-incident reporting alongside the SOC and DFIR Lead.

View Job

Head of IR & DFIR | Founding Leadership Role

Up Security (Formerly Wake-up Cyber)

Israel

Onsite · Lead/Principal · Full-time

Build and lead a new incident response and digital forensics practice, staying hands-on with investigations while defining methodology, tooling and recruiting a growing team.

View Job

DFIR Analyst

SentinelOne

Israel

Mid · Full-time

Join a global 24x7 DFIR team delivering expert breach response for enterprises facing active cyber threats. Conduct forensic analysis, threat hunting, and evidence acquisition across endpoint, network, cloud, and SaaS environments spanning ransomware, BEC, APT, and identity compromise incidents.

View Job

DFIR Specialist

OP Innovate Ltd

ראשון לציון, מחוז המרכז

Senior

Lead high-severity digital forensics and incident response investigations, conducting deep-dive disk, memory and network forensics, managing end-to-end IR engagements, and producing detailed technical reports for clients across multiple sectors.

View Job

Head of Incident Response & DFIR | Founding Leadership Role

Up Security (Formerly Wake-up Cyber)

Israel

Lead/Principal · Full-time

A founding leadership opportunity to build and lead a new incident response and digital forensics practice, managing complex cyber incidents end-to-end, defining methodology and tooling, and growing a team from scratch.

View Job

Researcher

Cellebrite

Petah Tikva, Center District

Onsite · Mid · Full-time

Join Cellebrite's Forensic Research Group to reverse-engineer mobile applications, decode proprietary binary formats and encryption protocols, and translate findings into production-quality C# code deployed globally in digital investigations.

View Job

View all 11 Israel jobs →

Asia-Pacific

India

Associate Director

Trilegal

New Delhi, Delhi

Onsite · Lead/Principal · Full-time

Senior digital forensics specialist needed to lead forensic imaging, acquisition and analysis of computers and mobiles, manage eDiscovery processing, and oversee investigations within a white-collar crime team.

View Job

AD-DFIR

Mitigata™ - Full-Stack Cyber Resilience

Bengaluru, Karnataka

Onsite · Lead/Principal · Full-time

Lead high-stakes breach investigations, directing forensic analysis across endpoints and cloud, mentoring a DFIR team, and liaising with legal, insurance and regulatory stakeholders during cyber incidents.

View Job

Senior Forensic Analyst

Jobgether

India

Remote · Senior · Full-time

Experienced forensic analyst needed to conduct complex digital investigations across Windows, Linux, macOS, and AWS cloud environments, supporting incident response engagements in a remote contract role based in India.

View Job

Incident Analyst

Sky Systems, Inc. (SkySys)

India

Remote · Senior · Full-time

Experienced forensic analyst needed to conduct enterprise digital forensic investigations and incident response across Windows, Linux, macOS and AWS cloud environments, working independently on complex cases.

View Job

Cyber Forensic Analyst

C3iHub, IIT Kanpur

Kanpur, Uttar Pradesh

Onsite · Mid · Full-time

Conduct digital and cyber forensic examinations across computers, storage media and mobile devices, performing evidence acquisition, artefact analysis, chain-of-custody maintenance and forensic reporting, with potential court testimony support.

View Job

Senior Manager – Digital Forensics

Ujjivan Small Finance Bank

Bengaluru, Karnataka

Manager · Full-time

Lead cyber incident investigations and forensic analysis across endpoints, servers, cloud and email within a regulated banking environment, ensuring evidence preservation, root cause analysis and regulatory compliance.

View Job

View all 44 India jobs →

Singapore

Digital Forensics & Incident Response, Vice President -Cybersecurity Operations

JPMorganChase

Singapore

Onsite · Lead/Principal · Full-time

Lead complex digital forensic investigations and incident response efforts, examining digital evidence, host and network artifacts, and malware to support internal investigations and enhance enterprise cybersecurity resilience.

View Job

Technology, Data & Innovation – Cyber forensics investigation specialist– Assistant Vice President

Deutsche Bank

Singapore

Hybrid · Senior · Full-time

Investigate cyber-attacks, malware infections and insider threats, performing forensically sound collection and analysis of digital evidence across endpoints, networks and systems to support security and compliance functions.

View Job

(Law Enforcement Only) Digital Forensics Examiner

ISRM

Singapore

Senior · Part-time

Part-time, assignment-based digital forensics examiner role open exclusively to active off-duty or former law enforcement professionals. Work spans cyber investigations, digital evidence handling, and serious crime matters, including pro-bono anti-trafficking and child exploitation cases.

View Job

Senior/Manager/Assistant Manager, Digital Forensics Branch

HSA Health Sciences Authority

Buona Vista

Onsite · Senior · Full-time

Join a government digital forensics team conducting evidence acquisition, examination and analysis across computers, mobile devices and networks, supporting criminal investigations and prosecutions. Produce court-ready reports, provide expert testimony and help develop forensic capabilities and SOPs.

View Job

DFIR Analyst

SentinelOne

Singapore

Mid · Full-time

Conduct EDR-driven incident response and forensic analysis across endpoint, network, cloud and SaaS environments. Acquire and preserve evidence, support malware analysis, prepare investigative reports, and contribute to a rotating on-call schedule for large-scale incidents.

View Job

Forensic Specialist

Sensity AI

Singapore

Hybrid · Mid · Full-time

A multimedia forensic specialist is sought to drive forensic rigour across a deepfake detection platform, translating investigative workflows into product requirements, validating detectors, supporting law enforcement customers, and contributing to court-ready evidence standards.

View Job

View all 32 Singapore jobs →

Australia

Manager, Forensic Technology Services

Alvarez & Marsal

Sydney, New South Wales

Hybrid · Manager · Full-time

Lead forensic data handling and eDiscovery workstreams for disputes and investigations, managing digital evidence collection, analysis and reporting while supporting junior staff and client engagements.

View Job

Director, Forensic Technology Services

Alvarez & Marsal

Sydney, New South Wales

Lead/Principal · Full-time

Lead forensic technology and eDiscovery engagements, advising clients and legal counsel on digital forensics, evidence preservation, and investigations, while managing teams and supporting business development in a growing practice.

View Job

Manager – Digital Forensics and Incident Response

Scyne Advisory

Canberra, Australian Capital Territory

Hybrid · Manager · Full-time

Lead digital forensics and incident response engagements for government and public purpose clients, applying recognised frameworks, mentoring junior staff, and supporting development of new cyber capabilities.

View Job

Manager – Digital Forensics and Incident Response

Scyne Advisory

Perth, Western Australia

Hybrid · Manager · Full-time

Lead digital forensics and incident response engagements for government and public sector clients, applying recognised DFIR frameworks, mentoring junior analysts, and supporting development of new cyber capabilities and client offerings.

View Job

Digital Forensics Analyst

Hamilton Barnes 🌳

Australia

Remote · Junior · Full-time

Investigate business email compromise, ransomware and unauthorised access cases end-to-end, handling evidence collection, forensic analysis and reporting alongside senior incident response consultants in a remote, Australia-wide role.

View Job

Senior Adviser – Digital Forensics & Incident Response

Island Bell Advisers

Sydney, New South Wales

Onsite · Senior · Full-time

Lead complex cyber incident investigations end-to-end, from triage to recovery, delivering rigorous digital forensics, defensible reporting and executive advisory across ransomware, breach and compromise cases.

View Job

View all 39 Australia jobs →

New Zealand

DFIR Analyst

SentinelOne

Auckland

Mid · Full-time

Conduct EDR-driven incident response and forensic investigations across endpoint, network, cloud, and SaaS environments. Acquire and preserve evidence, support malware analysis, produce investigative reports, and contribute to a rotating on-call schedule for major incidents.

View Job

Africa

South Africa

Digital Forensic Investigator

Network Contracting Solutions -a division of ADvTECH Resourcing

Johannesburg

Onsite · Senior · Contract · ZAR 330.00/hr - ZAR 336.00/hr

A five-month contract role conducting complex digital forensic investigations across endpoints, mobile devices, cloud platforms and network infrastructure, producing evidential reports and presenting findings in disciplinary, civil and criminal proceedings.

View Job

Security Operations Centre Analyst

FNB South Africa

Randburg, Gauteng

Onsite · Senior · Full-time

Senior SOC analyst role combining end-to-end incident response and digital forensics with threat hunting, detection engineering, and mentoring. Requires deep expertise in log analysis, endpoint/network forensics, SIEM/EDR platforms, and malware triage.

View Job

Investigator, Digital Forensics

Gijima Staffing Solutions - HCM

Knysna, Western Cape

Onsite · Mid · Full-time

Conduct complex digital forensic investigations across endpoints, mobile devices, cloud platforms and network infrastructure. Analyse digital evidence, prepare forensic reports and provide expert testimony in disciplinary, regulatory and criminal proceedings.

View Job

Digital Forensic Specialist

Grant Thornton

Midrand, Gauteng

Senior · Permanent

Senior digital forensics specialist role conducting complex investigations into fraud, misconduct, and data breaches. Responsibilities include evidence acquisition, artifact analysis, forensic reporting, cyber investigation support, and mentoring junior practitioners.

View Job

Senior Cyber Incident Response Analyst (Cape Town or Johannesburg)

Integrity360

Cape Town, Western Cape

Senior · Full-time

Senior analyst role performing incident response, host and network intrusion analysis, digital forensics, malware reverse engineering, and threat intelligence services for mid-market and enterprise clients across multiple sectors.

View Job