A selection of the latest DFIR job vacancies (got a job you want to feature in the next round-up? Submit the details here):
United States
Digital Forensics Examiner
SecureStrux®
Maryland
Perform full-scope digital forensics on diverse media supporting major criminal investigations, including evidence preservation, analysis, data recovery and reporting. Use leading forensic tools, maintain evidentiary standards, and potentially testify as an expert in federal or military court.
View JobCyber Host Forensic Analyst II
Nightwing
Virginia
Conduct host-based digital forensic investigations for federal clients, acquiring and analyzing evidence, supporting on-site incident response, documenting findings, and using industry-standard tools to reconstruct intrusions, preserve chain of custody, and support cyber defense operations in a high-clearance environment.
View JobDigital Forensics Examiner
Peraton
Linthicum, MD
Lead complex digital examinations of computers, mobiles and storage media supporting sensitive major-crime investigations. Perform evidence preservation, analysis, data recovery and reporting, using leading forensic tools, and provide expert-witness testimony within a high-security federal environment in the Baltimore area.
View JobCyber Analyst, Digital Forensics Incident Response
At-Bay
Remote
Provide remote digital forensics and incident response services to insured clients, handling evidence collection, ransomware and BEC investigations, threat actor negotiations, recovery support, reporting, and training, leveraging prior DFIR and security operations experience across diverse environments.
View JobDigital Forensics Analyst
City of Spokane
Spokane, WA
Law-enforcement digital forensics specialist acquires, preserves and analyzes data from computers, mobiles and IoT devices, produces reports, advises investigators and testifies in court. Requires degree, forensic certifications and experience with forensic tools, evidence handling and courtroom standards.
View JobDigital Forensic Examiner
DigiForce Security
Windsor Mill, MD
Conducts artifact-level digital investigations for a federal agency, collecting and preserving evidence, analyzing security and privacy incidents, validating findings, and producing defensible reports while collaborating with audit, privacy and investigative teams. Requires 3–5 years’ DFIR experience.
View JobPrincipal Cloud Security, Digital Forensics, and Incident Response Analyst
Mission Support and Test Services, LLC
North Las Vegas, NV
Lead cloud-focused cybersecurity operations, performing advanced digital forensics, incident response, malware analysis and large-scale investigations across diverse platforms. Develop standards, coordinate complex projects, support legal and HR inquiries, and provide expert reporting within a high-security federal environment.
View JobDigital Forensics Engineer TS/SCI with Poly REQUIRED
CGI Group, Inc.
Bethesda, MD 20811
Perform hardware exploitation and forensic examination of digital storage and mobile devices in a microelectronics lab. Reverse engineer and modify hardware, conduct imaging and chip-level analysis, develop exploitation methods and tools, and deliver clear technical reporting for government customers.
View JobDigital Forensics Engineer III TS/SCI with Poly REQUIRED
CGI Group, Inc.
Linthicum Heights, MD 21090
Conduct major-crimes digital forensic examinations of computers, mobile devices, and other media; preserve and analyze evidence; perform recovery, password cracking, and steganography detection; produce court-ready reports and documentation; and potentially provide expert testimony. Requires TS/SCI with poly and forensic certifications.
View JobUnited Kingdom
Incident Response Specialist
BAE Systems Digital Intelligence
Frimley, England
Lead global investigations into complex cyber intrusions, performing digital forensics across Windows, Linux, macOS and mobile, analysing network logs, developing tradecraft, mentoring colleagues, and producing clear IR reports within a hybrid, travel-enabled consulting environment.
View JobDigital Forensic Analyst
Alexander Associates Technical Recruitment
Warwickshire, England
Permanent digital forensic analyst role conducting computer and mobile device examinations, evidence acquisition and reporting within an accredited lab. Client-facing consultancy position requiring DF lab experience, forensic tool proficiency, and adherence to ISO, ACPO and FSR standards.
View JobDigital Forensics Manager
QCC Global Ltd
Greater London, England
Lead an on-site digital forensics team delivering ISO 17025 and FSR Code-compliant analysis for criminal, civil and internal investigations. Manage accreditation, casework, resources and quality, while providing expert technical oversight and hands-on examination of digital evidence.
View JobData Forensic Investigator
Devon and Cornwall Police
Exeter, England
Conduct digital evidence acquisition and analysis on computers and mobile devices for regional police investigations, produce technical reports, advise officers, and present findings in court within a hybrid-working, well-supported law enforcement forensics environment.
View JobDigital Forensics Lab – Senior Digital Forensic Analyst
CACI Digital Experience
Northallerton, England
Lead an accredited digital forensics laboratory team, managing investigations, proficiency testing and complex casework. Oversee ISO-compliant quality systems, tool validation, reporting and staff development while supporting management, audits and occasional on-site evidence acquisition in a high-pressure environment.
View JobDigital Forensics Specialist
CyberMoves
Leicester, England
Experienced digital forensics specialist works in accredited lab performing mobile and computer examinations, managing multiple live cases, preserving evidence, and producing court-ready reports for prosecution and government clients. On-site Leicester, security clearance eligibility required.
View JobIncident Response Specialist
BAE Systems Digital Intelligence
Frimley, England
Lead complex cyber incident investigations, performing Windows, Linux, macOS and mobile forensics, log analysis and malware-based inquiries. Use advanced forensic tools, mentor colleagues, contribute to threat research, and support international client engagements in a hybrid working model.
View JobTechnical Trainer
Guardian Jobs
Dunstable, England
Office-based trainer designs, delivers and maintains advanced digital forensics training for law enforcement clients. Manages course development projects, authors materials, and teaches use of leading forensic tools, combining technical expertise with strong communication and classroom skills.
View JobERSOU – ROCU- PC/DC – Digital Forensic Examiner
Bedfordshire Police
Stevenage
Support serious cyber-crime investigations by forensically securing, acquiring and analysing data from multiple digital sources, attending scenes and warrants, and producing ISO17025-aligned evidence and insights. Work autonomously and with investigators to meet operational deadlines.
View JobAustralia
Principle Incident Response Manager
Woolworths Group
Sydney, New South Wales
Lead technical authority for major cyber incidents, directing deep-dive forensic investigations, high-severity response, and CSOC maturity. Mentor analysts, refine IR playbooks, advise executives, and drive tooling, automation, and intelligence integration across complex enterprise environments.
View JobSenior Cyber Incident Responder
Bupa
Melbourne VIC 3000
Lead escalated cyber incident response across APAC, triage severity, coordinate stakeholders, and execute CSIRP. Conduct digital forensic collection and analysis, DLP investigations, and threat hunting on Windows/Unix. Produce reports, maintain chain of custody, and brief executives during crises.
View JobManager – Forensic Technology
KPMG
Sydney NSW
Lead DFIR engagements investigating breaches, ransomware and insider threats. Conduct device, network and memory forensics, preserve evidence for legal use, deliver client-ready reports, improve incident response plans, and advise on threat intelligence, detection tooling and security resilience.
View JobManager, DFES
Consilio LLC
Sydney NSW 2000
Lead digital investigations and ESI preservation for complex litigation, scoping matters, coordinating resources, and performing remote/onsite forensic collections and examinations across endpoints, mobile, servers, cloud and social media, ensuring chain of custody, documentation, QC and client deliverables.
View JobDigital Forensics and eDiscovery Specialist
PWC Australia
Sydney NSW 2000
Lead complex eDiscovery and digital forensic investigations, overseeing acquisition and analysis of electronic evidence across computers, servers, cloud and mobile. Manage and mentor teams, advise clients on discovery strategy and compliance, and drive service quality and practice growth.
View JobSenior Digital Forensics & Incident Response (DFIR) Analyst
Interactive
Melbourne VIC 3207
Lead complex digital forensic investigations and incident response across endpoint, network, and cloud environments. Conduct triage and evidence collection, analyse malware and IOCs, collaborate with threat intelligence, and produce detailed reports with findings and recommendations. Hybrid work available.
View JobCanada
Information Security Manager
Insight Global
North York, Ontario
Leads incident response, threat hunting and digital forensics within a hybrid enterprise environment, combining hands-on technical investigations with security operations leadership, strategy and documentation to detect, analyze and mitigate advanced cyber threats.
View JobSenior Consultant, Digital Forensic
KPMG Canada
Toronto, Ontario
Lead end-to-end digital investigations across devices and cloud systems, performing acquisition, analysis and reporting, ensuring evidence integrity, supporting cyber, eDiscovery and legal matters, and contributing to forensic lab operations and process improvement within a multidisciplinary advisory team.
View JobCyber Forensic Investigations Senior Associate
PwC Canada
Ottawa, Ontario
Join a cyber forensic investigations team delivering incident response, crisis management and technical investigations. Perform digital evidence collection and analysis, log review, and client advisory while developing tools expertise and supporting business development in a hybrid environment.
View JobApplication & Infrastructure Analyst I – Forensic Video Analyst
City of Edmonton
Edmonton, Alberta
Provide forensic video analysis, digital evidence handling, and technical reporting for police investigations. Maintain lab systems and standards, mentor field technicians, support facial recognition workflows, and assist with court-ready exhibits across diverse digital video and audio formats.
View JobCyber Forensic Investigations Manager
PwC Canada
Windsor, Ontario
Lead cyber crisis and digital investigation engagements, managing incident response, forensic collections and analysis across diverse client environments. Mentor junior consultants, build client relationships, and contribute to business development within a forensic services practice using leading DFIR tools.
View JobSenior Digital Forensic Investigator
eSentire
Hybrid / Remote
Lead complex DFIR engagements for enterprise clients, coordinating with SOC and customer teams to identify intrusions, contain threats, and quantify data loss. Perform endpoint, cloud, and web forensics, mentor investigators, improve tooling, and provide on-call incident response.
View Job
