Digital Forensics Jobs Round-Up, May 18 2026

A selection of the latest DFIR job vacancies (got a job you want to feature in the next round-up? Submit the details here):

United States

Digital Forensics SME

ActioNet, Inc.

Rockville, MD

Full-time

Senior DFIR SME role in Rockville, MD requiring 8+ years’ experience. Responsibilities include advanced endpoint/network forensics, malware analysis, incident response, chain-of-custody documentation, IOC production, and federal law enforcement collaboration. Salary $140K–$184K.

View Job

Junior Digital Forensic Analyst

Peraton

Arlington, VA

Full-time

Support a federal Computer Investigations and Forensics Division conducting forensic examinations of digital devices, mobile phones, cloud sources and removable media. Produce court-admissible reports, provide expert testimony, and assist search warrant executions using tools including Cellebrite, Axiom and X-Ways.

View Job

Digital Forensics Examiner

The Amatriot Group

Linthicum Heights, MD

Full-time

Examines digital media including computers, mobile devices and storage for a federal DoD customer supporting criminal investigations. Performs forensic analysis, evidence preservation, data recovery and court-ready reporting. Requires active Secret clearance and forensic certifications.

View Job

Digital Forensics Examiner

Peraton

Lackland Heights, TX

Full-time

Support AFOSI criminal investigations conducting digital forensic examination of computers, mobile devices and storage media. Duties include evidence acquisition, data recovery, analysis, report writing and potential expert witness testimony in federal/military court. On-site, San Antonio.

View Job

Digital Forensics Engineer

cFocus Software Incorporated

Washington, DC

Full-time

Support a federal cybersecurity programme by conducting advanced digital forensic investigations across endpoints, cloud, mobile, and network environments. Responsibilities include malware analysis, e-discovery, incident response, evidence preservation, and legal investigation support within a 24×7 SOC.

View Job

Digital Forensics Analyst, Digital Forensics Unit

The Legal Aid Society

Bronx, NY

Full-time

In-house digital forensics analyst role supporting legal defence work. Responsibilities include evidence acquisition and analysis, mobile and computer forensics, cell site mapping, court testimony, and delivering forensics training to legal staff and external practitioners.

View Job

Digital Forensics Analyst

Gunnison

Alexandria, VA

Full-time

Hybrid role in Alexandria, VA conducting network and media forensic investigations, malware analysis, and advanced threat hunting. Supports incident response, insider threat investigations, and develops forensic SOPs and detection capabilities across enterprise environments.

View Job

Digital Forensic Analyst I

CGS Federal (Contact Government Services)

Massachusetts

Full-time

Mid-level forensic analyst role focused on mobile device and cloud data preservation, collection and analysis. Involves on-site travel, use of industry-standard forensic tools, chain of custody management and collaboration with legal teams.

View Job

Digital Forensics Specialist – Cloud Platforms

Truist

Atlanta, GA

Full-time

Supports corporate digital forensics investigations including forensic acquisition and analysis of ESI and devices, chain of custody management, stakeholder collaboration, and producing forensic reports for civil or criminal proceedings. Relevant certifications preferred.

View Job

Back to country list ↑

UK & Ireland

Lead Investigator – Digital Forensics and Incident Response

CyberCX

Oxfordshire, England

Full-time

Lead complex DFIR investigations end-to-end, deploying toolsets, collecting evidence, and analysing artefacts. Manage client engagements, produce high-quality reports, mentor team members, and drive best-practice analysis across a growing DFIR practice.

View Job

Digital Forensics Senior Associate

JPMorganChase

Greater London, England

Full-time

Senior digital forensics role within a global financial institution’s cybersecurity team. Responsibilities include conducting investigations, analysing digital evidence, root cause analysis, incident response, malware analysis, and developing forensic techniques using industry-standard tools.

View Job

Digital Forensics Technical Officer

NHS Counter Fraud Authority

Newcastle Upon Tyne, England

Full-time

Support a dedicated Digital Forensics Unit investigating NHS fraud, bribery and corruption. Responsibilities include evidence handling, tool testing and validation, procedural consistency, and onsite investigative support. SC security clearance required. Hybrid role based in Newcastle.

View Job

Digital Forensics Unit Technician

Nottinghamshire Police

Nottingham, England

Part-time · Associate

Join Nottinghamshire Police’s Digital Forensic Unit to examine digital devices, acquire and analyse evidence, maintain forensic documentation, and provide technical guidance to investigators supporting criminal cases. Part-time, permanent role.

View Job

Sr. Manager/ Manager, Digital Forensics & Expert Services

Consilio LLC

London, England

Full-time

Lead complex forensic investigations, data collections, and preservation strategies across litigation, regulatory, and corporate matters. Combines hands-on technical expertise in cloud, mobile, and computer forensics with client-facing leadership and expert witness services across EMEAA.

View Job

Digital Forensics Technical Manager

HM Revenue & Customs

Nottingham, England

Contract

Lead digital forensics technical management within a national government compliance and cybercrime unit, overseeing SOPs, UKAS accreditation, ISO17025 compliance, tool validation, evidence analysis, and court presentation as a professional witness.

View Job

Senior Director | Digital Forensics & Investigations | Technology

FTI Consulting

London, England

Full-time

Senior Director role leading complex digital forensic investigations across devices, cloud environments and mobile platforms. Involves expert witness work, regulatory investigations, client advisory, mentoring junior staff, and developing forensic methodologies for legal and compliance matters.

View Job

Cyber Incident Response & Digital Forensics (DFIR), Vice President

BNY

Dublin, County Dublin, Ireland

Full-time

Senior DFIR role within a global financial institution’s 24×7 cyber operations centre in Dublin. Responsibilities include digital forensic investigations, incident triage and response, memory and disk forensics, and security tooling optimisation using Splunk, CrowdStrike and Axiom Forensics.

View Job

Forensic Technology Senior Consultant (eDiscovery)

Deloitte

Dublin, County Dublin, Ireland

Full-time

Senior consultant role leading eDiscovery workflows and forensic collections across litigation, regulatory, and investigation matters. Requires hands-on experience with RelativityOne, EnCase, FTK or Nuix, EDRM lifecycle management, and data privacy compliance. Based in Ireland, hybrid.

View Job

Forensic Technology eDiscovery – Senior Manager – Dublin

EY

Dublin 2, County Dublin, Ireland

Full-time · Mid-Senior level

Senior Manager role leading forensic technology engagements including eDiscovery, digital forensics, structured data analytics, and incident response support across investigations, litigation, regulatory matters, and multi-jurisdictional disputes for public and private sector clients.

View Job

Back to country list ↑

Australia & New Zealand

Senior Incident Response Analyst

Coalition, Inc.

Australia

Leads end-to-end incident response engagements for cyber insurance clients, conducting digital forensics across endpoints, email, cloud, and networks. Investigates BEC, ransomware, and data theft cases, producing defensible forensic reports and executive briefings.

View Job

Forensic Analyst Technical Leader

Cisco

Melbourne, Victoria, Australia

Full-time

Experienced forensic analyst sought to collect and analyse logs, packet captures, memory and disk evidence from network infrastructure, investigate adversary TTPs, produce threat intelligence reports, and collaborate with product and incident response teams. Australian citizenship required.

View Job

Forensic Technology Manager / Senior Manager

Core Talent

Sydney, New South Wales, Australia

Full-time · Mid-Senior level

Lead eDiscovery and digital forensic engagements across the full EDRM lifecycle, managing collections, analytics, and investigations. Oversee document review platforms, mentor staff, and advise clients on data preservation and regulatory response strategies.

View Job

Consultant – Cybersecurity, Sydney

FTI Consulting, Inc.

Sydney NSW, Australia

Full-time · From $85,000 a year

Join an award-winning cybersecurity practice in Sydney delivering incident response investigations, digital forensics, and offensive security engagements. Work across ransomware, data breaches, penetration testing, and adversary simulation for high-profile clients.

View Job

Forensic Analyst Technical Leader

Cisco Systems

Canberra ACT, Australia

Full-time

Experienced forensic analyst sought to investigate threat actor activity on network infrastructure platforms. Responsibilities include forensic evidence analysis, adversary TTP research, vulnerability investigation, and producing threat intelligence reports for internal and external stakeholders. Australian citizenship required.

View Job

Digital Forensic Support Officer

Victoria Police

Melbourne VIC, Australia

Full-time · $78,510 – $86,679 a year

Support a police Digital Forensic Unit through exhibit and property management, chain of custody compliance, examination request triage, stakeholder liaison, lab audits, and administrative duties. Court attendance and crime scene visits may be required.

View Job

Back to country list ↑

Canada

Senior Associate/Cybersecurity & Incident Response (Forensic Services practice)

Charles River Associates

Toronto, Ontario

Internship

Senior consulting role within a Forensic Services practice, conducting cyber intrusion investigations, digital forensic analysis, incident response, malware analysis, and providing cybersecurity framework assessments while mentoring junior staff and supporting business development.

View Job

Associate Principal/Cybersecurity & Incident Response (Forensic Services practice)

Charles River Associates

Toronto, Ontario

Internship

Senior-level role leading cyber intrusion investigations, digital forensics, and incident response engagements. Responsibilities include malware analysis, network forensics, expert testimony, team leadership, and client-facing business development within a forensic consulting practice.

View Job

Consulting Associate/Cybersecurity & Incident Response (Forensic Services practice)

Charles River Associates

Toronto, Ontario

Internship

Join a forensic services consulting team conducting digital forensic investigations, incident response, malware analysis, and threat intelligence. Support counsel with forensic reports and expert testimony. Requires 3–5 years’ experience in digital forensics or cybersecurity.

View Job

Back to country list ↑

Singapore

Digital Forensics & Incident Response (DFIR) Analyst (Manager/AVP)

OCBC

Singapore

Full-time

Seeking an experienced DFIR analyst to conduct digital forensic investigations, manage security incident response, develop playbooks, perform threat hunting, and produce forensic reports within a financial services cybersecurity team.

View Job

Lead Engineer – Digital Forensics & Incident Response (Cyber Security Office)

Synapxe

Singapore

Full-time

Lead DFIR engineer role investigating cyber incidents across cloud, on-premise, and hybrid environments. Responsibilities include forensic analysis, log correlation, IR planning, playbook development, and stakeholder coordination within Singapore’s public health technology sector.

View Job

Digital Forensic Incident Responder

IMDA

Singapore

Full-time

Investigate cybersecurity incidents using digital forensics and malware analysis, determine root causes, recommend mitigations, develop detection rules, and prepare stakeholder briefings. Requires 5+ years’ experience and certifications such as GCFA or GREM.

View Job

Digital Forensics Examiner, Integrated Forensic Service

HTX (Home Team Science & Technology Agency)

Singapore

Full-time · Mid-Senior level

Support criminal investigations by conducting forensic examinations on digital devices, extracting electronic evidence, analysing diverse operating systems and platforms, and working with large datasets across multiple sources and networks.

View Job

Digital Forensics Incident Responder

IMDA

Singapore

Full-time

Seeking an experienced DFIR professional to investigate cybersecurity incidents using digital forensics, malware and log analysis. Requires 5+ years’ experience, proficiency in forensic toolkits such as AXIOM and EnCase, and relevant GIAC certifications.

View Job

Digital Forensic Incident Responder (DFIR)

RMA Consultants

Singapore

Full-time · Mid-Senior level

Permanent Singapore-based DFIR role requiring 5+ years’ experience in digital forensics, malware analysis, and cyber-attack investigation. Responsibilities include root cause analysis, detection engineering, incident response playbooks, and SOC collaboration.

View Job

Back to country list ↑

Netherlands

Principal Consultant – DFIR

Fox-IT

Rijswijk, South Holland

Full-time · Mid-Senior level

Senior DFIR consultant role involving leading incident response engagements, conducting advanced host, network and cloud forensics, mentoring analysts, managing client relationships, and performing intelligence-driven investigations across complex security incidents.

View Job

Digital Forensics & Indicent Response Specialist

Bureau Veritas Cybersecurity

Amsterdam, North Holland

Full-time · Mid-Senior level

DFIR Specialist role responding to cybersecurity incidents across IT and OT environments. Responsibilities include forensic analysis, evidence preservation, threat investigation, malware neutralisation, and advising clients on cyber resilience and crisis preparedness in the Netherlands.

View Job

Cyber Forensics / CRRT

Ministerie van Defensie

Zeist, Utrecht

Full-time

Lead Digital Forensics and Incident Response specialist role within a defence cyber security centre, conducting forensic investigations across devices and networks, supporting incident response operations, and driving team innovation. Requires 5+ years DFIR experience and SANS/GIAC certifications.

View Job

Back to country list ↑

United Arab Emirates

Forensics Consultant

Lineal

Dubai

Full-time · Mid-Senior level

Lead end-to-end digital forensic investigations across PCs, mobile devices, servers and cloud systems. Conduct forensically sound data collections, advise clients on best practices, and utilise tools such as EnCase, FTK and Cellebrite. Requires 2+ years’ experience.

View Job

Incident Response and Forensic Investigation Specialist (DFIR) (U.A.E National)

Help AG

Dubai

Full-time

Senior DFIR specialist role leading incident response engagements and forensic investigations for enterprise clients. Responsibilities include malware analysis, reverse engineering, threat hunting, log analysis, and mentoring junior analysts within a managed security services team.

View Job

Digital Forensics and Incident Response Consultant

DTS Solution

Dubai

Full-time

Dubai-based DFIR consultant role involving cyber breach investigations, malware analysis, forensic evidence examination, threat hunting, and incident response. Requires 6+ years’ experience, expert knowledge of tools such as EnCase and FTK, and relevant GIAC certifications.

View Job

Back to country list ↑

India

Digital Forensic Expert

ECS Infotech Pvt Ltd

Ahmedabad, Gujarat

Full-time

Seeking an experienced digital forensics professional to conduct acquisition and analysis of digital evidence across disk, mobile, and memory platforms using tools such as EnCase, FTK, Cellebrite, and Autopsy, with strong report-writing skills.

View Job

Digital Forensic Analyst

Innefu Labs

Delhi

Full-time · Associate

SME role performing forensic acquisition and analysis of digital devices, memory, logs and artefacts. Provide technical leadership, define SOPs, mentor junior staff, and support complex investigations using tools including EnCase, FTK and Volatility.

View Job

Incident Response and Digital Forensics Expert

Sandoz India

Telangana

Full-time

Join a global pharmaceutical firm’s Security Operations Center handling cybersecurity incident response and digital forensics. Responsibilities include evidence acquisition, forensic analysis across endpoints and cloud, malware triage, playbook development, and C-level reporting.

View Job

Back to country list ↑

South Africa

Digital Forensic Consultant

SNG GrantThornton

Midrand, Gauteng

Permanent

Seeks an experienced Digital Forensic Consultant to acquire and preserve digital evidence, conduct forensic analysis of devices and data, support fraud and cyber investigations, and produce defensible reports for legal and regulatory proceedings.

View Job

Senior Cyber Incident Response Analyst (Cape Town or Johannesburg)

Integrity360

Cape Town, Western Cape

Full-time

Senior analyst role performing cyber incident response, host and network intrusion analysis, malware reverse engineering, digital forensics, and threat intelligence services for enterprise clients across South Africa.

View Job

Information Security Team Leader

Sourceworx

South Africa

Leads cybersecurity operations including security monitoring, penetration testing, vulnerability management, and digital forensic investigations. Manages SOC and forensics teams, oversees incident response, ensures evidence integrity, and delivers risk and compliance outcomes.

View Job

Back to country list ↑

Leave a Comment