Digital Forensics Jobs
Current DFIR openings worldwide, updated daily. Links to original listings.
Get new DFIR jobs in your inbox
A weekly round-up of every new listing on the board — no noise, unsubscribe anytime.
North America
United States
Incident Response Senior Analyst (Tier 3)
Resource Management Concepts, Inc.
Quantico, VA
Senior analyst role supporting defensive cyberspace operations for a DoD contract at Quantico, VA. Responsibilities span DFIR investigations, forensic analysis, incident management, detection tuning, and mentoring junior analysts. TS/SCI clearance required.
View JobDigital Forensics and Evidence Handling SME
accel bi corporation
Florida
Subject matter expert role supporting cybersecurity capability-building through digital evidence handling, chain-of-custody guidance, forensic-readiness materials, and training covering logs, artifacts, cloud, mobile, and communication data.
View JobCybersecurity Operations Specialist 720
Freedom Technology Solutions Group, LLC
St Louis, MO
A CSOC Tier 2/3 role supporting 24x7 cyber incident response, including containment, eradication, forensic artifact analysis, malware analysis, and digital media examination within a government defence environment requiring active TS/SCI clearance.
View JobIncident Response (IR) Tech Lead
Edgewater Federal Solutions, Inc.
Bethesda, MD
Lead a federal incident response team providing Tier-2/3 support across a 24x7 environment. Responsibilities span threat hunting, digital forensics, malware analysis, SIEM content development, and mentoring junior analysts on a national-level government contract.
View JobDigital Forensic Specialist
Washington State Office of the Attorney General
Olympia, WA
Expert-level digital forensics roles within a state Medicaid Fraud division, involving forensic acquisition and analysis of digital evidence, lab operations, court testimony, and technical training across computers, mobile devices, cloud services, and IoT.
View JobDigital Forensics & eDiscovery
MUFG
Tempe, AZ
An AVP-level role conducting digital forensic collections, artifact analysis and eDiscovery in support of security incidents, internal investigations and legal/compliance matters within a major financial institution. Requires 3+ years of forensics experience.
View JobView all 255 United States jobs →
Canada
Forensisch IT Rechercheur
Nederlandse Voedsel en Warenautoriteit - NVWA
Newfoundland and Labrador
Digital forensics investigator role within a criminal investigation team, responsible for securing digital evidence from diverse devices and networks, advising investigators, coordinating digital operations during searches, and producing court-admissible forensic reports.
View JobConsultant en sécurité en matière de réponse aux incidents, Mandiant (anglais)
Québec, Quebec
Mandiant IR consultant role requiring end-to-end incident investigation, containment and remediation. Responsibilities include forensic analysis (disk, memory, network, cloud), malware triage, threat hunting and crisis management for complex, high-profile client engagements.
View JobEnquêteur
Autorité des marchés financiers (Québec)
Montreal, Quebec
Digital forensics investigator role within a financial regulatory authority, responsible for collecting, preserving and analysing digital evidence, conducting computer searches, supporting OSINT and eDiscovery activities, and testifying in legal proceedings.
View JobIncident Response Senior Consultant
Jobgether
Canada
Senior IR consultant role leading complex cybersecurity investigations across host, network, and cloud environments. Responsibilities include forensic analysis, threat hunting, malware investigation, remediation planning, and communicating findings to executive and legal stakeholders.
View JobIncident Response Senior Consultant (Remote, CAN)
CrowdStrike
Toronto
Lead incident response engagements and intrusion investigations for global organisations, conducting host and network forensics across Windows, Mac and Linux, performing malware analysis, and delivering findings to senior stakeholders.
View JobConsulting Associate/Recovery Services (Forensic Services practice)
Charles River Associates
Toronto, Ontario
Hands-on forensic analyst and incident responder executing digital forensic collections, ransomware recovery, BEC investigations, and identity remediation across Windows, Linux, cloud, and virtualised enterprise environments for a global consulting firm.
View JobUK & Europe
United Kingdom
Digital Forensic Investigator
Cleveland Police
Teesside, England
As a Digital Forensic Investigator, you will examine and analyse digital devices and data to support police investigations. The role involves recovering and interpreting digital evidence, producing clear reports, maintaining accurate records, and working with investigators to ensure evidence is handled securely and in line with legal and forensic standards.
View JobDigital Forensics and Incident Response, Senior Consultant DFIR
Control Risks
London, England
A senior DFIR consultant role embedded in a London-based team, leading forensic investigations and cyber incident response engagements for law firms, multinationals and government clients, with up to 25% international travel.
View JobDigital Forensic Professionals
Oscar
England
A specialist digital forensics organisation in Stratford-upon-Avon is seeking professionals at all levels — from junior analysts to senior specialists — with hands-on experience in computer, mobile and evidence analysis using industry-standard tools.
View JobLead Cyber Incident Response Consultant
The Tech Recruiter
United Kingdom
Lead complex cyber incident investigations across Windows, Linux, macOS and multi-cloud environments. Perform advanced digital forensics, threat analysis, and evidence handling while advising clients and mentoring junior team members on IR readiness.
View JobCyber Response & Recovery Manager (Reactive DFIR) – German Speaking
KPMG UK
London, England
Lead reactive DFIR engagements as case manager on medium to large incidents, conducting digital forensics and incident response, developing client IR capabilities, and managing cyber response tooling and playbooks for a Tier 1 UK provider.
View JobIncident Responder
Rooted
London, England
Scope and contain live security incidents, reconstruct intrusions using host and network forensics, preserve evidence, and produce clear written timelines for clients and regulators in a fast-paced IR consultancy environment.
View JobView all 79 United Kingdom jobs →
Ireland
Professional Services Principal Consultant – Incident Response, French-Speaking (Remote)
CrowdStrike
Dublin
French-speaking principal consultant leading incident response investigations and host/network forensic analysis across Windows, Mac and Linux. Engages Fortune 100 clients, produces reports for legal counsel, and contributes to cloud IR and threat hunting activities.
View JobPrincipal Cyber Security Specialist (Operations)
publicjobs
County Dublin
Senior leadership role at Ireland's National Cyber Security Centre, overseeing national incident response, digital forensics and malware analysis capabilities, managing multidisciplinary teams and advising on matters of national cyber security importance.
View JobSenior Cyber Incident Response Analyst
Integrity360
Dublin, County Dublin
Senior analyst role delivering incident response, digital forensics, malware reverse engineering, host/network intrusion analysis and cyber threat intelligence services to mid-market and enterprise clients across multiple sectors from a Dublin-based SOC.
View JobCyber Incident Response & Digital Forensics (DFIR), Vice President
BNY
Dublin, County Dublin
Senior DFIR role supporting a 24x7 cyber operations centre, conducting memory, disk and image forensic investigations, using tools including Splunk, CrowdStrike, Microsoft Defender and Axiom Forensics within a global financial services environment.
View JobForensic Technology Senior Consultant (eDiscovery)
Deloitte
Dublin, County Dublin
Lead complex eDiscovery and forensic technology engagements across litigation, regulatory, and investigation matters. Manage EDRM workflows, conduct forensic collections, administer RelativityOne, and coach junior staff within a professional services environment.
View JobCyber Incident Response & Digital Forensics (DFIR), Vice President
The Bank of New York Mellon Corporation
Dublin, County Dublin
Senior DFIR role within a global financial institution's 24x7 cyber operations centre. Responsibilities include digital forensic analysis, incident triage and response, and senior consultation using tools such as CrowdStrike, Splunk, and Axiom Forensics.
View JobGermany
(Senior) Manager – Digital Forensics / Cyber Forensics
Deloitte
Düsseldorf, North Rhine-Westphalia
Lead forensic investigations into cybercrime and economic crime, managing digital and cyber forensic projects, developing service offerings, and supporting business development across Germany at a senior consulting level.
View JobIT-Forensiker*in
Bafin
Bonn, North Rhine-Westphalia
Join a government financial regulator's forensics competency team to conduct IT forensic investigations at supervised financial institutions, analyse digital artefacts, recover data, and produce court-admissible reports in an interdisciplinary environment.
View JobSenior Consultant Digital Forensics & Incident Response – Forensics
EY
Hamburg
Join a forensic consulting team combating financial crime and cyber threats. Conduct digital forensic investigations, analyse system artefacts, support live-response engagements, examine malicious files, and deliver IR workshops and assessments for national and international clients.
View JobSenior Consultant Cyber – Digital Forensic Incident Response
Deloitte
Leipzig, Saxony
Join a global cyber consulting team conducting digital forensic and incident response investigations, including evidence preservation, cybercrime analysis, regulatory compliance, and advising clients on cyber prevention and security standards.
View JobManager Digital Forensics & Incident Response (DFIR) – Cyber Security
EY
Düsseldorf, North Rhine-Westphalia
Lead digital forensic investigations and incident response engagements across endpoint, network, and cloud environments. Analyse cyberattacks, reconstruct attack chains, conduct live-response measures, and develop DFIR methodologies and threat-hunting approaches for national and international clients.
View JobSenior Consultant Cyber – Digital Forensic Incident Response in Frankfurt (Main)
Deloitte
Frankfurt, Hesse
Join a global consulting team delivering digital forensic and incident response services. Conduct forensic analysis, evidence preservation, cybercrime investigation, and cyber-prevention advisory for clients across diverse sectors in Germany.
View JobNetherlands
Forensisch IT rechercheur FIOD
Belastingdienst
Amsterdam, North Holland
Forensic IT investigator role within the Dutch tax authority's financial crime unit, examining digital evidence across networks, cloud environments and financial systems to support criminal investigations into fraud, money laundering and fiscal offences.
View Jobdigitaal rechercheur serious organised crime
Politie Opleiding Centrum Zuid Nederland
Amsterdam, North Holland
Digital investigator role within a national serious organised crime unit, recovering and analysing digital evidence from devices and data streams to support complex criminal investigations and prosecutions, bridging technical forensics and tactical policing.
View Jobjunior digitaal rechercheur – Dienst Infrastructuur
Politie Opleiding Centrum Zuid Nederland
Driebergen, Utrecht
Junior digital detective role within a law enforcement infrastructure unit, conducting digital forensic investigations on phones, computers and vehicles, analysing digital evidence, supporting criminal enquiries targeting international transport-related organised crime.
View Jobjunior digitaal rechercheur – Dienst Infrastructuur
Politie Nederland
Driebergen, Utrecht
Junior digital investigator role within a law enforcement digital specialist team, conducting forensic examination of devices, data analysis, cryptocurrency investigations, and dark web research to combat organised and infrastructure-related crime.
View Jobdigitaal rechercheur serious organised crime
Politie Nederland
Amsterdam, North Holland
Digital investigator role within a national serious organised crime unit, recovering and analysing digital evidence from smartphones, computers and online sources to support complex criminal investigations and identify suspects.
View Jobdigitaal specialist – Districtsrecherche Flevoland
Politie Nederland
Lelystad, Flevoland
Digital specialist role within a Dutch police district criminal investigation unit, conducting forensic analysis of devices and digital data carriers, preserving evidence, advising on investigative methodologies, and supporting colleagues across digital crime investigations.
View JobView all 29 Netherlands jobs →
Middle East
United Arab Emirates
Incident Response Lead (DFIR), UAE
DeepSource Technologies
Dubai
Leads cybersecurity incident response and digital forensic investigations in enterprise environments, performing triage, containment, root cause analysis, and malware analysis while developing IR playbooks and coordinating cross-functional security teams.
View JobLead Consultant – Incident Response
CPX
Abu Dhabi, Abu Dhabi Emirate
Lead incident response engagements and threat hunting activities, performing host and network forensics across Windows, Mac, and Linux platforms. Produce technical reports, mentor teams, and support customers in improving defensive security posture.
View JobTechnical/Digital Forensics Investigations Manager
General Commercial Gaming Regulatory Authority - GCGRA
Abu Dhabi Emirate
Leads technical and forensic investigations into illegal online gaming in the UAE, analysing domains, infrastructure and payment channels, preserving digital evidence, and supporting regulatory enforcement and market integrity activities.
View JobSenior Digital Forensics Examiner
TransPerfect
Dubai
Senior examiner role performing forensic preservation, extraction and analysis of digital evidence from computers, mobile devices and cloud systems. Includes expert testimony, client reporting, project management and mentoring junior staff.
View JobSenior Consultant – eDiscovery – Forensic Technology
EY
Dubai
Join a forensic technology team delivering eDiscovery and digital forensics services across fraud investigations, disputes and regulatory matters. Responsibilities include data collection, host-based forensics, cloud investigations and large dataset analysis using tools such as Relativity, EnCase and Cellebrite.
View JobDigital Forensic Manager
TransPerfect
Dubai
Manages digital forensic casework involving preservation and analysis of computers, mobile devices and cloud systems. Responsibilities include evidence collection, forensic reporting, expert testimony, client project management and mentoring junior practitioners.
View JobView all 11 United Arab Emirates jobs →
Israel
Head of Incident Response & DFIR | Founding Leadership Role
Up Security (Formerly Wake-up Cyber)
Israel
A founding leadership opportunity to build and lead a new incident response and digital forensics practice, managing complex cyber incidents end-to-end, defining methodology and tooling, and growing a team from scratch.
View JobSenior Incident Response Security Consultant, Mandiant, Google Cloud (Hebrew)
Israel
Lead client-facing incident response engagements for Mandiant, conducting host and network forensics, malware triage, threat hunting, and log analysis. Communicate findings to technical and executive audiences; mentor junior consultants. Hebrew fluency required.
View JobSenior Incident Response & DFIR Consultant
Matrix
Kfar Saba, Center District
Lead end-to-end incident response and digital forensics investigations across enterprise environments, analysing endpoints, cloud platforms and Active Directory, producing technical reports and delivering cybersecurity consulting and remediation guidance.
View JobResearcher
Cellebrite
Petah Tikva, Center District
Join Cellebrite's Forensic Research Group to reverse-engineer mobile applications, decode proprietary binary formats and encryption protocols, and translate findings into production-quality C# code deployed globally in digital investigations.
View JobDFIR Specialist
OP Innovate
Rishon LeZion, Center District
Lead end-to-end DFIR investigations including disk, memory and network forensics across Windows, Linux and macOS. Perform incident triage, containment, eradication, post-incident analysis, evidence handling and produce detailed technical reports for stakeholders.
View JobDFIR Expert (Lead)
UST
תל אביב -יפו, מחוז תל אביב
Lead high-impact forensic investigations and incident response efforts, serving as the top escalation point. Conduct deep-dive DFIR across endpoints, memory and networks, develop automation tools, and deliver root cause analysis reports to clients.
View JobAsia-Pacific
India
Forensic Investigation & Financial Crime — Multiple Positions
Recfront
Mumbai, Maharashtra
Multiple specialist forensic and financial crime roles at a Big 4 firm, spanning cyber forensics, mobile forensics, eDiscovery, OSINT, AI-driven analytics and fraud investigation. Positions range from Consultant (3–5 years) to Manager (7–10 years).
View JobIR & Forensics – Senior Consultant
Deloitte
Bengaluru, Karnataka
Senior consultant role leading cyber incident response and forensic investigations across enterprise, cloud, and hybrid environments. Responsibilities include triage, containment, threat hunting, malware analysis, and advising client stakeholders during active incidents.
View JobDigital Forensics and Incident Response (DFIR) Specialist
Fourth Command
Jaipur, Rajasthan
Senior DFIR Specialist role requiring 5–8 years' experience leading end-to-end forensic investigations and incident response across enterprise, cloud, and hybrid environments, including malware analysis, evidence handling, and stakeholder reporting.
View JobIntern
Netrika, Consulting and Investigations
Gurugram, Haryana
Entry-level DFIR intern supporting forensic investigations including digital evidence identification, collection, preservation and analysis using industry-standard tools such as FTK, EnCase, Autopsy and UFED across disk and mobile platforms.
View JobDigital Forensics Analyst
Agilent Technologies
Delhi
Performs forensic acquisition, preservation, and analysis of digital evidence across endpoints, cloud, and enterprise systems. Supports insider risk, misconduct, and cybersecurity investigations, maintains case documentation, and assists eDiscovery activities for a global technology company.
View JobDigital Forensics Analyst
Agilent Technologies (International)
Manesar, Gurugram, Haryana
Conduct forensic acquisition, preservation, and analysis of digital evidence across endpoints, cloud, and corporate systems. Support insider risk, misconduct, and cybersecurity investigations, maintain chain-of-custody records, and assist with eDiscovery activities.
View JobSingapore
Lead Cyber Security Specialist (Digital Forensics)
JJ CONSULTING SERVICES
Singapore
Lead incident response and digital forensics operations across endpoint, network, cloud and mobile environments. Conduct triage, forensic acquisition, log analysis and root cause analysis, while developing IR playbooks and guiding stakeholders through the full incident lifecycle.
View JobLead IT Specialist (Cybersecurity Incident Response)
JJ CONSULTING SERVICES
Singapore
Lead a Cyber Incident Response Team through all IR lifecycle phases, conducting triage, digital forensic acquisition and analysis, log correlation, malware analysis, and stakeholder reporting across endpoint, network, cloud, and mobile environments.
View JobCybersecurity Consultant / Senior Cybersecurity Consultant (DFIR)
Cyber Security Agency of Singapore (CSA)
Singapore
Join a government DFIR team conducting forensic analysis on endpoints and network logs to support cyber incident investigations. Manage the forensics lab and infrastructure, and identify technologies to enhance forensic capabilities.
View JobAdvisory – Consulting, Forensic Technology | Graduate Associate 2027
KPMG Singapore
Singapore
Graduate associate role within a forensic technology practice, performing digital forensic imaging, artifact analysis, eDiscovery, post-incident investigations, and log/malware analysis across fraud, misconduct, and compliance engagements.
View JobSenior Specialist, Incident Response
SITA
Singapore
Senior DFIR specialist role investigating cybersecurity incidents, conducting forensic acquisitions across endpoints, cloud and networks, supporting containment and remediation, and enhancing incident response capabilities within a global aviation technology environment.
View JobDigital Forensics and Incident Response Specialist
RED ALPHA CYBERSECURITY PTE. LTD.
River Valley
Leads security incident response and digital forensic investigations, collecting and analysing evidence from compromised systems, developing IR playbooks, maintaining case documentation, and supporting proactive threat hunting across Windows, Linux, and cloud environments.
View JobAustralia
Principal Analyst
Infotrust
Sydney, New South Wales
A senior DFIR role leading complex cyber investigations across Windows, macOS, Linux, cloud and mobile platforms. Responsibilities include forensic analysis, expert testimony, research, tool development, and mentoring team members in a hybrid environment.
View JobDigital Evidence Support Officer
South Australia Police
Adelaide, South Australia
Support the analysis and presentation of digital evidence for criminal and civil proceedings within a police financial and cybercrime branch, maintaining technically sound, legally acceptable processes for evidence identification, preservation and analysis.
View JobSenior Cybersecurity Incident Responder
Datacom
Sydney, New South Wales
Senior DFIR role within a managed SOC environment, leading major incident response engagements, conducting digital forensic investigations, delivering proactive advisory services including tabletop exercises, compromise assessments and threat hunting for commercial and government clients.
View JobSenior Cybersecurity Incident Responder
Datacom
Melbourne, Victoria
Join a CSIRT team delivering digital forensics and incident response engagements, including evidence collection, log analysis, threat hunting, compromise assessments, tabletop exercises, and stakeholder reporting across Australia and New Zealand.
View JobDigital Forensic and Incident Response Investigator
Cognizant
Melbourne, Victoria
Lead end-to-end cyber incident response and digital forensic investigations including triage, containment, evidence handling, log analysis, and reporting. Mentor junior analysts, develop IR playbooks, and collaborate with SOC, legal, and compliance teams.
View JobSenior Investigator – DFIR
CyberCX
Adelaide, South Australia
Senior DFIR Investigator role delivering incident response engagements, including evidence acquisition, processing and analysis, findings presentation, and contribution to business development within a leading cybersecurity consultancy. Security clearance eligibility required.
View JobNew Zealand
Principal DFIR Analyst
New Zealand - All Locations Work from where you are
New Zealand
Senior technical lead for national healthcare cyber security, conducting complex digital forensic investigations and incident response, shaping DFIR strategy, leading threat hunting, and mentoring analysts within a national SOC environment.
View JobPrimary or Senior Electronic Forensic Investigator-Club Funded Role
New Zealand Government
Auckland City, Auckland
Government forensics role supporting multiple agencies including the Serious Fraud Office. Responsibilities include digital evidence acquisition, analysis and reporting across mobile, desktop and cloud platforms, with expert witness testimony in District and High Court.
View JobAfrica
South Africa
Digital Forensic First Responder (Entry-Level)
SGS
Centurion, Gauteng
Entry-level digital forensics role supporting real-world cyber investigations, fraud cases, and digital crime scenes. Responsibilities include evidence collection, basic forensic analysis, IOC identification, and documentation, with full training on industry-standard tools provided.
View JobForensics Services Manager
PwC South Africa
Port Elizabeth, Eastern Cape
Manages and executes forensic investigations into fraud, corruption and economic crime. Oversees evidence analysis, forensic reporting, client engagement and junior staff development, requiring 5–8 years' forensic investigation experience and relevant accounting or legal qualifications.
View JobForensic Cyber Technologist at Financial Intelligence Centre
Financial Intelligence Centre
Pretoria, Gauteng
Gather, analyse and report on digital evidence supporting financial crime investigations and prosecutions. Responsibilities include blockchain tracing, eDiscovery, chain of custody management, forensic report writing, court testimony and stakeholder engagement.
View JobForensic Cyber Technologist
Financial Intelligence Centre (FIC)
Pretoria, Gauteng
Gather, analyse and report on digital evidence from devices, networks and blockchain sources to support financial crime investigations and legal proceedings, including court testimony and stakeholder engagement.
View JobSenior Cyber Incident Response Analyst (Cape Town or Johannesburg)
Integrity360
Cape Town, Western Cape
Senior analyst role performing incident response, host and network intrusion analysis, digital forensics, malware reverse engineering, and threat intelligence services for mid-market and enterprise clients across multiple sectors.
View Job