A selection of the latest DFIR job vacancies (got a job you want to feature in the next round-up? Submit the details here):
United States
Digital Forensics SME
ActioNet, Inc.
Rockville, MD
Senior DFIR SME role in Rockville, MD requiring 8+ years’ experience. Responsibilities include advanced endpoint/network forensics, malware analysis, incident response, chain-of-custody documentation, IOC production, and federal law enforcement collaboration. Salary $140K–$184K.
View JobJunior Digital Forensic Analyst
Peraton
Arlington, VA
Support a federal Computer Investigations and Forensics Division conducting forensic examinations of digital devices, mobile phones, cloud sources and removable media. Produce court-admissible reports, provide expert testimony, and assist search warrant executions using tools including Cellebrite, Axiom and X-Ways.
View JobDigital Forensics Examiner
The Amatriot Group
Linthicum Heights, MD
Examines digital media including computers, mobile devices and storage for a federal DoD customer supporting criminal investigations. Performs forensic analysis, evidence preservation, data recovery and court-ready reporting. Requires active Secret clearance and forensic certifications.
View JobDigital Forensics Examiner
Peraton
Lackland Heights, TX
Support AFOSI criminal investigations conducting digital forensic examination of computers, mobile devices and storage media. Duties include evidence acquisition, data recovery, analysis, report writing and potential expert witness testimony in federal/military court. On-site, San Antonio.
View JobDigital Forensics Engineer
cFocus Software Incorporated
Washington, DC
Support a federal cybersecurity programme by conducting advanced digital forensic investigations across endpoints, cloud, mobile, and network environments. Responsibilities include malware analysis, e-discovery, incident response, evidence preservation, and legal investigation support within a 24×7 SOC.
View JobDigital Forensics Analyst, Digital Forensics Unit
The Legal Aid Society
Bronx, NY
In-house digital forensics analyst role supporting legal defence work. Responsibilities include evidence acquisition and analysis, mobile and computer forensics, cell site mapping, court testimony, and delivering forensics training to legal staff and external practitioners.
View JobDigital Forensics Analyst
Gunnison
Alexandria, VA
Hybrid role in Alexandria, VA conducting network and media forensic investigations, malware analysis, and advanced threat hunting. Supports incident response, insider threat investigations, and develops forensic SOPs and detection capabilities across enterprise environments.
View JobDigital Forensic Analyst I
CGS Federal (Contact Government Services)
Massachusetts
Mid-level forensic analyst role focused on mobile device and cloud data preservation, collection and analysis. Involves on-site travel, use of industry-standard forensic tools, chain of custody management and collaboration with legal teams.
View JobDigital Forensics Specialist – Cloud Platforms
Truist
Atlanta, GA
Supports corporate digital forensics investigations including forensic acquisition and analysis of ESI and devices, chain of custody management, stakeholder collaboration, and producing forensic reports for civil or criminal proceedings. Relevant certifications preferred.
View JobUK & Ireland
Digital Forensics Technical Manager
HM Revenue and Customs
Nottingham, Stratford, England
As a Digital Forensics Technical Manager, you will support forensic practitioners by developing technical procedures, maintaining quality checks, competency frameworks, tool validation, and UKAS accreditation standards. The role involves handling, processing, analysing, and presenting digital evidence in a forensically sound manner, supporting operational casework, and leading research and development to address emerging evidential challenges.
View JobSenior Digital Forensics Technical Manager
HM Revenue and Customs
Nottingham, Stratford, England
As a Senior Technical Manager, you will lead the development of forensic procedures, quality checks, competency frameworks, method validation, and UKAS accreditation activity for HMRC’s digital forensics capability. You will support the handling and presentation of digital evidence for investigations and court, brief senior leaders on accreditation progress and technical risks, and may manage a small team as the Technical Management function evolves.
View JobLead Investigator – Digital Forensics and Incident Response
CyberCX
Oxfordshire, England
Lead complex DFIR investigations end-to-end, deploying toolsets, collecting evidence, and analysing artefacts. Manage client engagements, produce high-quality reports, mentor team members, and drive best-practice analysis across a growing DFIR practice.
View JobDigital Forensics Senior Associate
JPMorganChase
Greater London, England
Senior digital forensics role within a global financial institution’s cybersecurity team. Responsibilities include conducting investigations, analysing digital evidence, root cause analysis, incident response, malware analysis, and developing forensic techniques using industry-standard tools.
View JobDigital Forensics Technical Officer
NHS Counter Fraud Authority
Newcastle Upon Tyne, England
Support a dedicated Digital Forensics Unit investigating NHS fraud, bribery and corruption. Responsibilities include evidence handling, tool testing and validation, procedural consistency, and onsite investigative support. SC security clearance required. Hybrid role based in Newcastle.
View JobDigital Forensics Unit Technician
Nottinghamshire Police
Nottingham, England
Join Nottinghamshire Police’s Digital Forensic Unit to examine digital devices, acquire and analyse evidence, maintain forensic documentation, and provide technical guidance to investigators supporting criminal cases. Part-time, permanent role.
View JobSr. Manager/ Manager, Digital Forensics & Expert Services
Consilio LLC
London, England
Lead complex forensic investigations, data collections, and preservation strategies across litigation, regulatory, and corporate matters. Combines hands-on technical expertise in cloud, mobile, and computer forensics with client-facing leadership and expert witness services across EMEAA.
View JobDigital Forensics Technical Manager
HM Revenue & Customs
Nottingham, England
Lead digital forensics technical management within a national government compliance and cybercrime unit, overseeing SOPs, UKAS accreditation, ISO17025 compliance, tool validation, evidence analysis, and court presentation as a professional witness.
View JobSenior Director | Digital Forensics & Investigations | Technology
FTI Consulting
London, England
Senior Director role leading complex digital forensic investigations across devices, cloud environments and mobile platforms. Involves expert witness work, regulatory investigations, client advisory, mentoring junior staff, and developing forensic methodologies for legal and compliance matters.
View JobCyber Incident Response & Digital Forensics (DFIR), Vice President
BNY
Dublin, County Dublin, Ireland
Senior DFIR role within a global financial institution’s 24×7 cyber operations centre in Dublin. Responsibilities include digital forensic investigations, incident triage and response, memory and disk forensics, and security tooling optimisation using Splunk, CrowdStrike and Axiom Forensics.
View JobForensic Technology Senior Consultant (eDiscovery)
Deloitte
Dublin, County Dublin, Ireland
Senior consultant role leading eDiscovery workflows and forensic collections across litigation, regulatory, and investigation matters. Requires hands-on experience with RelativityOne, EnCase, FTK or Nuix, EDRM lifecycle management, and data privacy compliance. Based in Ireland, hybrid.
View JobForensic Technology eDiscovery – Senior Manager – Dublin
EY
Dublin 2, County Dublin, Ireland
Senior Manager role leading forensic technology engagements including eDiscovery, digital forensics, structured data analytics, and incident response support across investigations, litigation, regulatory matters, and multi-jurisdictional disputes for public and private sector clients.
View JobAustralia & New Zealand
Senior Cybersecurity Incident Responder
Datacom
Auckland, New Zealand
As a Senior Cybersecurity Incident Responder, you will investigate and respond to major security incidents, using forensic techniques and security tools to identify root causes, assess impact, and guide containment, recovery, and prevention. You will produce DFIR reports, support post-incident reviews, deliver proactive incident response services, work closely with customers and CSIRT colleagues, and participate in on-call and occasional travel requirements.
View JobSenior Incident Response Analyst
Coalition, Inc.
Australia
Leads end-to-end incident response engagements for cyber insurance clients, conducting digital forensics across endpoints, email, cloud, and networks. Investigates BEC, ransomware, and data theft cases, producing defensible forensic reports and executive briefings.
View JobForensic Analyst Technical Leader
Cisco
Melbourne, Victoria, Australia
Experienced forensic analyst sought to collect and analyse logs, packet captures, memory and disk evidence from network infrastructure, investigate adversary TTPs, produce threat intelligence reports, and collaborate with product and incident response teams. Australian citizenship required.
View JobForensic Technology Manager / Senior Manager
Core Talent
Sydney, New South Wales, Australia
Lead eDiscovery and digital forensic engagements across the full EDRM lifecycle, managing collections, analytics, and investigations. Oversee document review platforms, mentor staff, and advise clients on data preservation and regulatory response strategies.
View JobConsultant – Cybersecurity, Sydney
FTI Consulting, Inc.
Sydney NSW, Australia
Join an award-winning cybersecurity practice in Sydney delivering incident response investigations, digital forensics, and offensive security engagements. Work across ransomware, data breaches, penetration testing, and adversary simulation for high-profile clients.
View JobForensic Analyst Technical Leader
Cisco Systems
Canberra ACT, Australia
Experienced forensic analyst sought to investigate threat actor activity on network infrastructure platforms. Responsibilities include forensic evidence analysis, adversary TTP research, vulnerability investigation, and producing threat intelligence reports for internal and external stakeholders. Australian citizenship required.
View JobDigital Forensic Support Officer
Victoria Police
Melbourne VIC, Australia
Support a police Digital Forensic Unit through exhibit and property management, chain of custody compliance, examination request triage, stakeholder liaison, lab audits, and administrative duties. Court attendance and crime scene visits may be required.
View JobCanada
Senior Associate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Toronto, Ontario
Senior consulting role within a Forensic Services practice, conducting cyber intrusion investigations, digital forensic analysis, incident response, malware analysis, and providing cybersecurity framework assessments while mentoring junior staff and supporting business development.
View JobAssociate Principal/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Toronto, Ontario
Senior-level role leading cyber intrusion investigations, digital forensics, and incident response engagements. Responsibilities include malware analysis, network forensics, expert testimony, team leadership, and client-facing business development within a forensic consulting practice.
View JobConsulting Associate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Toronto, Ontario
Join a forensic services consulting team conducting digital forensic investigations, incident response, malware analysis, and threat intelligence. Support counsel with forensic reports and expert testimony. Requires 3–5 years’ experience in digital forensics or cybersecurity.
View JobSingapore
Digital Forensics & Incident Response (DFIR) Analyst (Manager/AVP)
OCBC
Singapore
Seeking an experienced DFIR analyst to conduct digital forensic investigations, manage security incident response, develop playbooks, perform threat hunting, and produce forensic reports within a financial services cybersecurity team.
View JobLead Engineer – Digital Forensics & Incident Response (Cyber Security Office)
Synapxe
Singapore
Lead DFIR engineer role investigating cyber incidents across cloud, on-premise, and hybrid environments. Responsibilities include forensic analysis, log correlation, IR planning, playbook development, and stakeholder coordination within Singapore’s public health technology sector.
View JobDigital Forensic Incident Responder
IMDA
Singapore
Investigate cybersecurity incidents using digital forensics and malware analysis, determine root causes, recommend mitigations, develop detection rules, and prepare stakeholder briefings. Requires 5+ years’ experience and certifications such as GCFA or GREM.
View JobDigital Forensics Examiner, Integrated Forensic Service
HTX (Home Team Science & Technology Agency)
Singapore
Support criminal investigations by conducting forensic examinations on digital devices, extracting electronic evidence, analysing diverse operating systems and platforms, and working with large datasets across multiple sources and networks.
View JobDigital Forensics Incident Responder
IMDA
Singapore
Seeking an experienced DFIR professional to investigate cybersecurity incidents using digital forensics, malware and log analysis. Requires 5+ years’ experience, proficiency in forensic toolkits such as AXIOM and EnCase, and relevant GIAC certifications.
View JobDigital Forensic Incident Responder (DFIR)
RMA Consultants
Singapore
Permanent Singapore-based DFIR role requiring 5+ years’ experience in digital forensics, malware analysis, and cyber-attack investigation. Responsibilities include root cause analysis, detection engineering, incident response playbooks, and SOC collaboration.
View JobNetherlands
Principal Consultant – DFIR
Fox-IT
Rijswijk, South Holland
Senior DFIR consultant role involving leading incident response engagements, conducting advanced host, network and cloud forensics, mentoring analysts, managing client relationships, and performing intelligence-driven investigations across complex security incidents.
View JobDigital Forensics & Indicent Response Specialist
Bureau Veritas Cybersecurity
Amsterdam, North Holland
DFIR Specialist role responding to cybersecurity incidents across IT and OT environments. Responsibilities include forensic analysis, evidence preservation, threat investigation, malware neutralisation, and advising clients on cyber resilience and crisis preparedness in the Netherlands.
View JobCyber Forensics / CRRT
Ministerie van Defensie
Zeist, Utrecht
Lead Digital Forensics and Incident Response specialist role within a defence cyber security centre, conducting forensic investigations across devices and networks, supporting incident response operations, and driving team innovation. Requires 5+ years DFIR experience and SANS/GIAC certifications.
View JobUnited Arab Emirates
Forensics Consultant
Lineal
Dubai
Lead end-to-end digital forensic investigations across PCs, mobile devices, servers and cloud systems. Conduct forensically sound data collections, advise clients on best practices, and utilise tools such as EnCase, FTK and Cellebrite. Requires 2+ years’ experience.
View JobIncident Response and Forensic Investigation Specialist (DFIR) (U.A.E National)
Help AG
Dubai
Senior DFIR specialist role leading incident response engagements and forensic investigations for enterprise clients. Responsibilities include malware analysis, reverse engineering, threat hunting, log analysis, and mentoring junior analysts within a managed security services team.
View JobDigital Forensics and Incident Response Consultant
DTS Solution
Dubai
Dubai-based DFIR consultant role involving cyber breach investigations, malware analysis, forensic evidence examination, threat hunting, and incident response. Requires 6+ years’ experience, expert knowledge of tools such as EnCase and FTK, and relevant GIAC certifications.
View JobIndia
Digital Forensic Expert
ECS Infotech Pvt Ltd
Ahmedabad, Gujarat
Seeking an experienced digital forensics professional to conduct acquisition and analysis of digital evidence across disk, mobile, and memory platforms using tools such as EnCase, FTK, Cellebrite, and Autopsy, with strong report-writing skills.
View JobDigital Forensic Analyst
Innefu Labs
Delhi
SME role performing forensic acquisition and analysis of digital devices, memory, logs and artefacts. Provide technical leadership, define SOPs, mentor junior staff, and support complex investigations using tools including EnCase, FTK and Volatility.
View JobIncident Response and Digital Forensics Expert
Sandoz India
Telangana
Join a global pharmaceutical firm’s Security Operations Center handling cybersecurity incident response and digital forensics. Responsibilities include evidence acquisition, forensic analysis across endpoints and cloud, malware triage, playbook development, and C-level reporting.
View JobSouth Africa
Digital Forensic Consultant
SNG GrantThornton
Midrand, Gauteng
Seeks an experienced Digital Forensic Consultant to acquire and preserve digital evidence, conduct forensic analysis of devices and data, support fraud and cyber investigations, and produce defensible reports for legal and regulatory proceedings.
View JobSenior Cyber Incident Response Analyst (Cape Town or Johannesburg)
Integrity360
Cape Town, Western Cape
Senior analyst role performing cyber incident response, host and network intrusion analysis, malware reverse engineering, digital forensics, and threat intelligence services for enterprise clients across South Africa.
View JobInformation Security Team Leader
Sourceworx
South Africa
Leads cybersecurity operations including security monitoring, penetration testing, vulnerability management, and digital forensic investigations. Manages SOC and forensics teams, oversees incident response, ensures evidence integrity, and delivers risk and compliance outcomes.
View Job





