A selection of the latest DFIR job vacancies (got a job you want to feature in the next round-up? Submit the details here):
No jobs match the selected filters.
United States
Digital Forensics Examiner
The Amatriot Group
Linthicum Heights, MD
Examines digital media including computers, mobile devices and storage for a federal government agency supporting criminal investigations. Performs forensic analysis, evidence handling, data recovery and prepares reports suitable for federal/military court testimony.
View JobComputer Specialist – Network and Digital Forensics Examiner (San Diego)
Longeviti, LLC
San Diego, CA
Support NCIS as a Digital Forensic Examiner conducting complex forensic examinations of computers and digital media, analysing network logs, preserving evidence, and serving as an expert witness in court proceedings. TS/SCI clearance required.
View JobMSP Digital Forensic Examiner
State of Maryland
Maryland
Conduct forensic examinations of computers, mobile devices and storage media in support of criminal investigations. Recover digital evidence, prepare detailed reports, and provide expert witness testimony in court proceedings.
View JobSr. Technical Investigator, Digital Forensics
Tesla
Austin, TX
Lead end-to-end digital forensic investigations into insider threats and data loss across endpoints, cloud, and networks. Analyse system artifacts, conduct compliant interviews, and translate findings into executive-ready reports for legal and compliance stakeholders.
View JobDigital Forensic Examiner II
City of New York
Bronx, NY
Conduct forensic analysis of mobile devices, computers, and storage media for a county DA’s office. Responsibilities include data extraction, evidence recovery, report writing, court testimony, search warrant execution, and mentoring junior staff.
View JobMid-Level Digital Forensic Analyst
Peraton
Arlington, VA
Conduct forensic examinations of digital devices, cloud sources, and media to support criminal, cyber, and administrative investigations. Produce court-defensible reports, provide expert witness testimony, and support search warrant execution with strict chain of custody.
View JobDigital Forensics Examiner
Peraton
Linthicum, MD
Senior digital forensics examiner supporting federal criminal investigations, analysing computers, mobile devices and storage media using tools such as EnCase, FTK and Cellebrite. Prepares court-ready reports and may testify as an expert witness. Requires active Secret clearance.
View JobSenior Investigations Analyst – Digital Forensics
Corebridge Financial
Houston, TX
Lead digital forensics investigations for a financial services firm, conducting forensically sound evidence acquisition, artifact analysis, email/cloud forensics, and expert reporting for legal, HR, and executive stakeholders using tools like Nuix and Axiom.
View JobDigital Forensics Senior Consultant
Crowe
Chicago, IL
Lead complex digital forensic investigations across computers, mobile devices, and cloud platforms. Manage client engagements, prepare detailed forensic reports, mentor junior staff, and ensure compliance with forensic standards and chain of custody procedures.
View JobUK & Ireland
Digital Forensics Practitioner
HM Revenue and Customs
Nottingham and Stratford, England
Deliver digital forensic services to HMRC investigation teams, examining computers, mobile devices and other digital evidence, supporting search warrant operations, managing exhibits, preparing evidential reports, advising senior investigators, and mentoring junior colleagues.
View JobSenior Incident Response Analyst
Coalition, Inc.
London, England
Lead end-to-end DFIR investigations for cyber insurance policyholders, analysing cloud, endpoint, email and network artefacts to respond to ransomware, BEC and web compromise incidents, producing defensible forensic reports for technical and legal stakeholders.
View JobDigital Forensic Specialist
The Insolvency Service
Greater London, England
Government agency forensic computing unit seeks a specialist to conduct digital forensic examinations under ISO 17025/FSR standards, advise stakeholders, manage forensic technicians, and support criminal, civil and regulatory investigations.
View JobSenior Digital Forensics Consultant
S-RM
London, England
Lead complex forensic investigations across Windows, macOS, iOS, Android and cloud platforms for corporate and private clients. Act as expert witness, produce court-compliant reports, manage client relationships, and mentor junior team members.
View JobSenior Security Consultant – Digital Forensics & Incident Response
UBDS Digital
Manchester, England
Senior DFIR consultant delivering forensic investigations and incident response to external clients. Responsibilities include evidence acquisition, endpoint/cloud/network forensics, threat detection, SOC collaboration, client advisory, and producing executive-level forensic reports.
View JobSenior Director | Digital Forensics & Investigations
FTI Consulting
London, England
Lead complex digital forensic investigations across devices, cloud and mobile environments for corporations, law firms and regulators. Act as expert witness, mentor junior staff, and drive methodology development across EMEA and globally.
View JobDigital Forensic Specialist
Insolvency Service
Stratford, England
A government Forensic Computing Unit seeks a Digital Forensic Specialist to acquire, process and analyse digital evidence for criminal, civil and regulatory investigations, ensuring ISO 17025 compliance and mentoring junior technicians.
View JobDirector, Digital Forensics
Coimisiún na Meán
Dublin, County Dublin, Ireland
Lead a multidisciplinary digital forensics function within a media regulator, overseeing evidence lifecycle management, chain-of-custody, OSINT integration, ML-driven content analysis, and eDiscovery to support regulatory investigations and legal proceedings.
View JobSenior Cyber Incident Response Analyst
Integrity360
Dublin, County Dublin, Ireland
Senior analyst role delivering incident response, digital forensics, malware reverse engineering, host/network intrusion analysis and cyber threat intelligence services to mid-market and enterprise clients across multiple sectors from a Dublin-based SOC.
View JobForensic Technology Senior Consultant (eDiscovery)
Deloitte
Dublin, County Dublin, Ireland
Senior consultant role leading eDiscovery workflows across the full EDRM lifecycle, conducting forensic collections from endpoints and cloud platforms, administering RelativityOne, and advising legal and regulatory clients on defensible evidence handling.
View JobForensic Technology Senior Manager, Hybrid
Deloitte
Dublin, County Dublin, Ireland
Lead delivery of forensic analytics and AI solutions for clients across multiple sectors, applying expertise in digital forensics, eDiscovery, machine learning, NLP, and cloud platforms while mentoring a high-performing team.
View JobDirector, Digital Forensics – Principal Officer
Coimisiún na Meán
Dublin, County Dublin, Ireland
Lead a multidisciplinary digital forensics team within a media regulatory body, overseeing evidence collection, preservation and eDiscovery, while directing OSINT integration, ML-driven content analysis and legally defensible chain-of-custody processes for platform investigations.
View JobCyber Incident Response & Digital Forensics (DFIR), Vice President
The Bank of New York Mellon Corporation
Dublin, County Dublin, Ireland
Senior DFIR professional needed to conduct memory, disk and image forensics, lead cyber incident investigations, and support a 24×7 operations centre using tools including Splunk, CrowdStrike, Microsoft Defender and Axiom Forensics.
View JobAssociate, eDiscovery / Digital Forensics
Interpath Advisory
Dublin, County Dublin, Ireland
Join a global Data & Technology practice delivering litigation support, digital forensic collections, and eDiscovery services. Manage RelativityOne/Nuix platforms, conduct forensic data collections, support regulatory investigations, and advise legal teams across complex cross-border matters.
View JobAustralia & New Zealand
Senior Digital Forensics and eDiscovery Analyst
NSW Department of Customer Service
Sydney, New South Wales, Australia
Senior analyst role conducting digital forensic examinations across endpoints, cloud, and enterprise systems, supporting insider risk investigations, eDiscovery, evidence preservation, and reporting within a government cyber security function in Sydney CBD.
View JobSenior DFIR Analyst
Gridware
Sydney, New South Wales, Australia
Lead and support digital forensic investigations and incident response across ransomware, BEC, insider threat and cloud compromise. Conduct host/network forensics, malware analysis, evidence preservation and reporting using industry-standard tools.
View JobSenior Analyst / Assistant Manager
McGrathNicol
Sydney, New South Wales, Australia
Join a professional services firm’s Technology & Cyber team delivering digital forensics investigations, eDiscovery processing, data collection, and technology consulting engagements across private, public and not-for-profit sector clients in Sydney.
View JobAdvanced Cyber Intelligence and Response Team Consultant
Fujitsu
Canberra, Australian Capital Territory
Senior consultant role within an advanced cyber team blending threat intelligence, detection engineering, threat hunting, and complex incident response and digital forensics across endpoint, network, cloud, and identity environments for enterprise customers.
View JobSecurity Operations Incident Response – Associate / Senior Associate
Scyne Advisory
Canberra, Australian Capital Territory
Join a public sector cyber team delivering incident response, digital forensics, threat intelligence, and security monitoring services. Work hands-on with clients across government and not-for-profit organisations, coaching junior staff and developing new capabilities.
View JobCyber Incident Response Analyst
Data#3
Sydney, New South Wales, Australia
Senior IR Analyst sought for a 6-month contract within an established SOC in central Sydney. Lead complex incident investigations, conduct digital forensics across Windows and Linux, perform threat hunting, and drive containment and remediation.
View JobPrincipal Electronic Discovery and Digital Forensics
Corruption and Crime Commission
Northbridge WA, Australia
Lead and manage digital forensics and eDiscovery capabilities for a government anti-corruption agency. Hands-on role covering lab and field environments, strategic planning, capability development, and engagement with law enforcement and intelligence counterparts.
View JobSenior Digital Forensics and eDiscovery Analyst
Department of Customer Service
Sydney NSW, Australia
Senior analyst role conducting digital forensic examinations and eDiscovery across endpoints, enterprise systems, and cloud platforms, supporting insider risk investigations, evidence preservation, and reporting in a government cyber security function.
View JobDigital Forensic Investigator (DFIR Specialist)
Cybernetic Global Intelligence
Brisbane QLD, Australia
Lead end-to-end digital forensic investigations across endpoints, cloud, and networks for enterprise and government clients. Produce court-admissible reports, reconstruct attack timelines, and support incident containment across ransomware, breaches, and insider threat cases.
View JobLead Incident Responder – DFIR Specialist
CyberCX
Auckland, New Zealand
Lead enterprise-level cyber breach investigations, deploying DFIR toolsets, analysing artefacts, managing engagement delivery, and providing on-site customer support across Australia, New Zealand and internationally. Requires proven lead experience on major incidents.
View JobCanada
Senior Investigator – Digital Forensics & Incident Response
Accenture
Toronto, Ontario
Senior DFIR investigator role leading complex forensic investigations including memory forensics, malware triage, cloud and host analysis. Mentors junior staff, authors client reports, and supports incident response across enterprise, cloud, and OT environments globally.
View JobConsulting Associate / Cybersecurity & Incident Response
Charles River Associates
Toronto, Ontario
Join a forensic services consulting practice supporting fraud, data breach and cybercrime investigations. Responsibilities span digital forensic analysis, incident response, malware triage, threat intelligence, expert reporting and client advisory work.
View JobPrincipal Incident Response Engineer 1
Sophos
Canada
Lead proactive and emergency incident response engagements for enterprise clients, conducting complex DFIR investigations, developing IR playbooks, facilitating tabletop exercises, and guiding containment and remediation efforts across hybrid environments.
View JobSenior Forward Deployed Incident Response Consultant
Ottawa, ON
Embed with Canada’s national security and defence sector clients to lead complex incident response investigations, perform forensic analysis, threat hunting, and malware triage, while developing AI-driven detection and remediation solutions.
View JobForensic Analyst
Fortinet
Vancouver, BC
Join a forensics team conducting in-depth digital forensics investigations on Windows, Linux, and macOS systems, performing malware analysis, reverse engineering, threat intelligence research, and communicating findings to internal and external stakeholders.
View JobConsulting Director, DFIR, Reactive Services (Unit 42)
Palo Alto Networks
Toronto, ON
Senior DFIR consulting director leading breach response engagements, providing expert guidance on digital forensics and incident response, managing technical teams, and advising diverse clients across industries on complex cybersecurity incidents.
View JobC.15 Computer Forensics Specialist
WNCS Inc
Ottawa, ON
Specialist role covering computer and network forensics, secure lab operations, chain of custody, investigative planning and reporting, courtroom presentations, and developing training materials in support of an IT security programme.
View JobIncident Response Principal Consultant (Remote CAN)
CrowdStrike
Alberta
Lead incident response engagements for Fortune 100 clients, conducting host and network forensics, malware analysis, and intrusion investigations across Windows, Mac, and Linux platforms, while mentoring teams and delivering executive-level findings.
View JobManager, Cyber Defence
KPMG
Toronto, ON
Manager-level DFIR consultant role performing incident response investigations and digital forensic evidence analysis, advising clients on threat mitigation, producing technical reports, and contributing to a growing cyber defence practice.
View JobSingapore
Senior Forensics Investigator – Global Security Organization
TikTok
Singapore
Lead end-to-end digital forensic investigations covering insider and external threats, evidence acquisition and analysis across Windows, macOS, Linux, iOS, Android, and cloud platforms, producing defensible findings for legal, compliance, and senior stakeholders.
View JobDigital Forensic Specialist
TD
Singapore
Conduct complex digital forensic investigations supporting insider threat, eDiscovery and incident response. Collect, preserve and analyse evidence from computers, mobiles and servers using EnCase, Magnet Axiom and Cellebrite. Minimum five years’ experience required.
View JobDigital Forensics Incident Responder
IMDA
Singapore
Seeking an experienced DFIR professional to investigate cybersecurity incidents using digital forensic analysis, malware analysis and log review, provide technical guidance, manage incident response playbooks, and support a SOC team in Singapore.
View JobIncident Response Consultant, Cyber Security
Singapore
Join Mandiant (Google Cloud) as an IR consultant, investigating and containing complex security incidents. Responsibilities include host/network forensics, malware triage, threat hunting, log analysis, and delivering client-facing reports for high-profile engagements.
View JobSenior Incident Responder, Singapore
Blackpanda
Singapore
Lead end-to-end incident response engagements across BEC, ransomware, data breach, and digital forensics cases. Conduct forensic analysis across Windows, Linux, macOS, and cloud environments while mentoring junior responders and advising clients on remediation.
View JobSnr Cybersecurity Consultant / Cybersecurity Consultant (DFIR) – NCIRC
Cyber Security Agency of Singapore (CSA)
Singapore
Conduct forensic analysis on endpoints and network logs to support cyber incident investigations. Manage forensics lab infrastructure, identify new analysis technologies, and support incident response within a national cybersecurity team in Singapore.
View JobRisk Consulting, Forensic Technology, Manager/Associate Director
KPMG
Singapore
Lead digital forensics and eDiscovery engagements for a major professional services firm, conducting forensic imaging, host analysis, cryptocurrency investigations, and managing junior team members across complex client investigations in Singapore.
View JobDigital Forensic Specialist – Forensics & eDiscovery Services, Insider Threat Management
TD Bank
Singapore
Conducts complex digital forensic investigations supporting insider threat, eDiscovery, and incident response. Collects and analyses evidence from computers, mobile devices, and cloud platforms using tools including EnCase, Magnet Axiom, and Microsoft Purview. Prepares professional reports and expert testimony.
View JobDigital Forensic Incident Responder
IMD Info-communications Media Development Authority
Pasir Panjang
Investigate cybersecurity incidents end-to-end, conducting digital forensics, log and malware analysis, threat assessments and detection rule development. Prepare incident reports and briefings, update playbooks, and maintain situational awareness of emerging TTPs.
View JobNetherlands
Staff Cybersecurity Specialist – Incident Response
Eye Security
Amsterdam Area
Senior incident responder leading end-to-end cyber incident investigations, forensic analysis, and recovery for 1,000+ European clients within an MDR organisation. Mentors junior staff, contributes to playbooks, and supports security operations when not on active cases.
View JobTalent Pool Starters Academy 2027
FORCYD
Amsterdam, North Holland
Entry-level consultancy academy programme covering cyber incident response and digital forensics investigations. Involves forensic data acquisition, evidence analysis, and cyberattack scoping across fraud, corruption and major breach cases. Two-year structured development programme included.
View JobForensic Team Lead
Super
Amsterdam Area
Lead and build a digital forensics function within a cloud-native environment, conducting threat hunting, retrospective analysis, and incident response investigations. Mentor a team of investigators and develop automation to enhance forensic workflows.
View JobDigital Forensics & Incident Response Specialist
Bureau Veritas Cybersecurity
Amsterdam, North Holland
Join a DFIR team responding to cyber incidents across IT and OT environments. Conduct forensic analyses, investigate breaches, advise clients on cyber resilience, and collaborate with experienced incident responders and crisis management specialists.
View JobCyber Incident Response Analist
typ
The Hague, South Holland
Join a specialist cybersecurity firm responding to APT-level incidents across Europe. Responsibilities include forensic artifact analysis, threat detection, containment, and supporting organisations under active attack, with scope to grow into a specialist IR professional.
View JobRechercheur digitaal specialist Digitaal Expertisecentrum
Nederlandse Arbeidsinspectie
Amsterdam, North Holland
Digital forensics specialist supporting fraud investigations into labour exploitation, tax evasion and healthcare fraud. Responsible for forensic data preservation, device examination, advising investigators, and developing digital investigation capabilities within a law enforcement team.
View JobGermany
Digital Forensic & Incident Response Consultant
Zync.
Germany
Lead digital forensic investigations and incident response engagements for enterprise clients, including evidence collection, malware analysis, log forensics, IR playbook development, and post-incident reviews. German C1 required. Remote with occasional client travel.
View JobSenior Consultant Cyber – Digital Forensic Incident Response
Deloitte GmbH
Frankfurt am Main
Senior DFIR consultant role supporting clients with digital forensic analysis, evidence preservation, cybercrime investigation, and incident response. Requires hands-on forensic expertise, regulatory knowledge (ISO 27001, DORA, NIS2), and strong communication skills across technical and non-technical stakeholders.
View JobSenior Digital Forensics and Incident Response Consultant
NTT Ltd
Erfurt
Senior DFIR consultant role performing host and network forensic analysis, malware reverse engineering, incident response planning and reporting. Supports clients through active security incidents, root cause analysis, IR playbook development and proactive readiness activities.
View JobDigital Forensic Analyst
ZEISS Group
Oberkochen
Conduct digital forensic investigations into security incidents, preserve and analyse evidence, support the CSIRT, perform threat hunting, produce forensic reports, and deliver training on forensic best practices within a global technology group.
View JobDigital Forensic and Incident Response Specialist
Bureau Veritas
Nederland
Respond to and investigate cybersecurity incidents across IT and OT environments, perform forensic analysis on digital evidence, reconstruct attacks, advise clients on cyber resilience, and liaise with CERTs and national authorities in the Netherlands.
View JobDigital Forensic Examiner
Lethbridge Police Service
Lethbridge, AB
Law enforcement digital forensics role conducting advanced examinations of computers, mobiles, and storage media. Responsibilities include data recovery, evidence analysis using Cellebrite and Magnet AXIOM, and preparing court-ready forensic reports.
View JobUnited Arab Emirates
SOC Analyst – Multiple Specializations
D24 Fintech
Dubai
Seeking three SOC Analysts specialising in Crypto Incident Response, DFIR, or Endpoint & Network Security Operations. Roles involve forensic analysis, malware investigation, threat detection, and 24×7 monitoring within a fintech environment.
View JobFraud Investigations & Digital Forensics Manager
ADIB – Abu Dhabi Islamic Bank
Abu Dhabi, Abu Dhabi Emirate
Lead and participate in fraud investigations and digital forensics examinations within a banking environment, acting as the IT/digital forensics specialist, conducting data analytics, managing evidence integrity, and reporting to senior management.
View JobDFIR Analyst
CyberGate Defense
Abu Dhabi, Abu Dhabi Emirate
Seeking an experienced DFIR analyst to lead incident response investigations, conduct digital forensic examinations across endpoints, networks and cloud, analyse malware, and develop IR playbooks. Requires 3–5 years’ experience and recognised certifications.
View JobDigital Forensics Trainer Part-Time
SPOTON TRAINING INSTITUTE
Dubai
Part-time/freelance trainer delivering practical digital forensics, cybercrime investigation and incident response courses in Dubai. Responsibilities include hands-on workshops, curriculum development, lab exercises, and participant assessment across diverse learner backgrounds.
View JobIncident Response and Forensic Investigation Specialist (DFIR) (U.A.E National)
Help AG
Dubai
Senior DFIR specialist role leading on-site and remote incident response engagements and forensic investigations, performing artifact analysis, malware reverse engineering, threat hunting, and mentoring analysts within a managed security services team.
View JobDigital Forensics and Incident Response Consultant
DTS Solution
Dubai
Experienced DFIR consultant needed to conduct forensic investigations, malware analysis, threat hunting, and cyber breach response. Requires expert knowledge of tools like FTK, EnCase and IDA Pro, with 6+ years’ experience and relevant certifications.
View JobIsrael
DFIR Specialist
Elbit Systems Israel
Haifa District
Join a defence organisation’s cybersecurity team to investigate security incidents, conduct memory and host-based forensic analysis, perform threat hunting, and develop incident response playbooks and remediation strategies in complex enterprise environments.
View JobDigital Forensics and Incident Response Analyst
Shabak – Israeli Security Agency – Career
Center District
Investigate security incidents and perform forensic analysis across endpoints, servers, networks and cloud environments (AWS, Azure, GCP). Determine compromise points, assess incident scope, and support containment and remediation using tools including Volatility, FTK and Autopsy.
View JobSenior Researcher
Cellebrite
Petah Tikva, Center District
Join Cellebrite’s Forensic Research Group to reverse-engineer third-party mobile applications, decode proprietary binary formats, analyse digital artefacts, and translate findings into production C# code deployed in global digital investigations.
View JobIndia
Threat Hunting Investigator
Cisco
Bengaluru, Karnataka
Join a global cyber investigations and forensics team conducting incident response, host and network forensics, log analysis, and threat hunting campaigns to protect enterprise systems and cloud environments from advanced threats.
View JobForensic Analyst
Tata Communications
Jaipur, Rajasthan
Seeking an experienced Forensic Analyst with CHFI certification to conduct complex digital forensic investigations, analyse evidence using tools like FTK and EnCase, produce detailed reports, and mentor junior analysts within a SOC environment.
View JobDigital Forensic Analyst
Quess IT Staffing
Mumbai, Maharashtra
Contract-to-hire DFIR analyst role in Mumbai requiring threat hunting on Azure Sentinel, SIEM tuning, incident investigation, forensic artifact collection, log analysis, and file system forensics across cloud and on-premise environments.
View JobOpening for Digital Forensic Analyst
Quess IT Staffing
Mumbai, Maharashtra
Seeking a DFIR analyst with 4+ years’ experience in file system forensics, artifact analysis, threat hunting, SIEM tuning, and cloud security across Windows and Linux environments. DFIR certifications such as GCED or GCIA preferred.
View JobForensic Analyst
Innefu Labs
Delhi
Perform forensic examination of digital devices, networks and media to uncover evidence of cybercrimes and security breaches. Analyse malware, prepare detailed reports, support legal proceedings and provide expert testimony. Extensive travel required.
View JobInformation Security Investigations Analyst
Take-Two Interactive
Bengaluru, Karnataka
Conduct complex investigations into insider threats, game cheating, and threat actor activity. Collect, preserve and analyse digital evidence, maintain threat profiles, build automated monitors, and support DFIR and legal teams using industry-standard forensic tools and intelligence platforms.
View JobConsultant – Forensics – National
EY
Gurugram, Haryana
DFIR Analyst role within a forensic investigations and compliance practice, conducting incident triage, digital evidence acquisition and analysis, malware triage, threat intelligence enrichment and detailed investigative reporting for corporate clients.
View JobSenior Forensic Analyst
C3iHub, IIT Kanpur
Kanpur, Uttar Pradesh
Conduct end-to-end digital, cloud, and memory forensic investigations for cybersecurity and national security projects. Responsibilities include evidence acquisition, malware analysis, IR support, forensic research, tool development, and reporting for IT, OT, and cloud environments.
View JobStaff Incident Response Analyst
AlphaSense
India
Senior escalation point for SOC analysts handling complex incidents. Conducts deep-dive host, memory and cloud forensics across AWS/GCP, reconstructs attacker timelines, leads containment decisions and drives incidents to documented closure.
View JobSouth Africa
Executive: Head Forensics Investigation
Absa Group
Johannesburg, Gauteng
Senior executive leading enterprise-wide forensic investigations strategy across fraud, cybercrime, and financial misconduct. Oversees digital forensics capability, AI-driven analytics, team development, law enforcement partnerships, and regulatory compliance for a major African banking group.
View JobSenior Cyber Incident Response Analyst
Integrity360
Cape Town, Western Cape
Senior analyst role within a global SOC environment, performing incident response, host and network intrusion analysis, malware reverse engineering, digital forensics, threat intelligence, and compromise assessments for mid-market and enterprise clients.
View JobForensic Investigator Pipeline
Capitec
Gauteng
Investigate complex fraud cases across banking and insurance environments, gathering and assessing evidence for disciplinary and criminal proceedings, identifying control gaps, and briefing stakeholders including legal and compliance teams.
View Job
