Digital Forensics Jobs: United States
248 current openings, updated daily. Links to original listings.
Associate Principal/Digital Forensics (Forensic Services practice)
Charles River Associates
Chicago, IL
Leads digital forensic investigations for corporate clients, specializing in trade secret theft cases. Oversees data collection, mobile and MacOS forensic analysis, expert testimony, team supervision, and client relationship management within a forensic consulting practice.
View JobImaging & Extraction Specialist (Various Levels)
Parsons Corporation
Baltimore, MD
Seeking a forensic imaging and data extraction specialist to handle digital evidence, repair and extract data from devices, and support investigations requiring security clearance and forensic tool expertise.
View JobForensics and Integrity Services – Digital Forensics – Managed Services – Senior
EY
Chicago, IL
Senior consultant role investigating insider threats and data misuse, performing digital forensics on Windows, Mac, mobile and network systems while advising clients and mentoring junior team members.
View JobLead Security Analyst (Digital Forensics and Incident Response))
Gartner
Stamford, CT
Lead complex forensic investigations and incident response across enterprise systems, handling evidence acquisition, analysis, and reporting while mentoring junior staff and collaborating with legal, HR and security teams.
View JobDigital Forensics Analyst
Dynamo Technologies, LLC
Aberdeen Proving Ground, MD
Supports a federal cybersecurity program conducting network and media digital forensics, threat hunting, and malware analysis across enterprise infrastructure, producing incident response reports and maintaining forensic SOPs.
View JobCyber Consultant, DFIR
LevelBlue
Washington, DC
Client-facing consultant leads digital forensics and incident response investigations, collecting and analysing evidence across endpoints, servers and cloud platforms, and authoring clear incident reports for technical and non-technical stakeholders.
View JobIntrusion Analyst – (Several Levels)
Parsons Corporation
Baltimore, MD
Conduct forensic examinations of network intrusions, malware, and compromised systems, identifying adversary behaviors and preparing detailed forensic reports to support cybersecurity investigations and legal proceedings across multiple experience levels.
View JobCyber Host Forensic Analyst III
Nightwing
Sterling, VA
Senior forensic analyst needed to lead onsite incident response engagements, overseeing evidence collection, conducting host forensic analysis, mentoring junior staff, and producing detailed technical and executive reports for government clients.
View JobSupervisory Criminal Investigator (Chief, Digital Forensics Branch)
ATF
Sterling, VA
Lead a federal digital forensics branch, overseeing computer imaging, mobile device extractions and media examinations, while managing examiner training and equipment accountability within a law enforcement agency.
View JobSenior Forensic Examiner
Garrett Discovery Inc
Orlando, FL
Conduct advanced forensic examinations of mobile devices, computers, cloud accounts and multimedia to extract and preserve evidence, supporting civil and criminal legal cases including expert courtroom testimony.
View JobPrincipal DFIR & Threat Intelligence Analyst
ModMed
Boca Raton, FL
Lead weekend incident response and digital forensics, performing memory and cloud forensic analysis, malware reverse engineering, and detection engineering across a unified cyber defense pipeline for a healthcare technology company.
View JobSenior Incident Response Consultant, Mandiant, Google Cloud
Reston, VA
Lead client-facing incident response investigations spanning cloud, endpoint and network environments, performing forensic analysis, malware triage and threat hunting, and presenting findings to technical and executive stakeholders.
View JobHost Based Cyber Systems Analyst III
ARGO Cyber Systems
Arlington, VA
Senior forensics specialist supports federal onsite incident response engagements, leading collection, preservation, and analysis of digital evidence, mentoring junior analysts, and producing detailed technical and executive reports.
View JobAssociate Director, Digital Forensics
HKA
Chicago
Client-facing digital forensics consultant needed to lead defensible evidence collection and analysis across computers, mobile devices and cloud platforms, supporting litigation, regulatory and investigative matters with attorneys and stakeholders.
View JobSenior Digital Forensics & Incident Response Analyst
TikTok USDS Joint Venture
Washington, DC
Lead complex forensic investigations across endpoints, servers, mobile devices, and cloud infrastructure, handling evidence acquisition, malware and artifact analysis, and detailed reporting to support insider threat and incident response efforts.
View JobSenior Digital Forensics Examiner
Black Dog Forensics
Spring, TX
An experienced forensic examiner is sought to handle civil litigation cases involving trade secret theft, departing employees and business disputes, managing examinations from intake through reporting and expert testimony.
View JobDigital Forensics and Incident Response Analyst
Quantum Sky
Washington, DC
A federal client's security team seeks an analyst to examine digital evidence, investigate cyber incidents, perform malware and file system forensics, and maintain chain of custody within an established SOC environment.
View JobSenior Engineer Network Forensics & Incident Response
Verizon
Southlake, TX
Lead network and digital forensics investigations across core, edge and cloud infrastructure, driving incident response, evidence analysis, YARA rule development, and automation of forensic workflows for major security events.
View JobAssociate Director, Digital Forensics
HKA
Washington, DC
Lead defensible forensic collections and analysis across computers, mobile devices, and cloud platforms for litigation and investigations, working closely with attorneys and clients while supporting eDiscovery workflows in Relativity.
View JobPrincipal Engineer Network Forensics & Incident Response
Verizon
Ashburn, VA
Lead network digital forensics and incident response for enterprise security defense, directing major incident command, forensic tooling automation, and threat hunting across core, edge, and access network infrastructure.
View JobSenior Associate, Complex Digital Events
Kroll
United States
Conduct deep technical analysis of digital evidence across diverse systems, support complex investigations and litigation, prepare client reports, and collaborate with senior DFIR specialists on global engagements.
View JobDigital Forensics – Analyst
Pyramid Consulting, Inc
United States
Contract role leading digital forensic investigations into insider threats, fraud and security incidents, using forensic imaging, artifact analysis, eDiscovery collections, and AI-assisted investigative workflows.
View JobCyber Forensics Analyst
Peraton
Fort Huachuca, AZ
Investigate cyber security incidents and malicious software through forensic examination of hosts, networks and digital media, reverse-engineer malware, document findings, and support threat intelligence and incident response efforts.
View JobAttack Sensing & Warning Analyst
Accenture Federal Services
Leesburg, VA
Entry-level forensics specialist supporting a federal SOC, performing endpoint and network digital forensic analysis across Windows, Linux, Mac and cloud environments under senior analyst guidance, with structured mentorship toward advanced tiers.
View JobForensics Analysis Lead
Parsons Corporation
Baltimore, MD
Lead a team of cyber forensics analysts conducting host-based forensic examinations across Windows, Linux and macOS, mentoring staff, ensuring quality reporting, and driving process improvement for mission-critical investigations.
View JobComputer Forensic Specialist – Department Promotional – Sheriff
Kern County
Bakersfield, CA
Promotional law enforcement opportunity for an experienced evidence technician to progress into a computer forensics role, examining digital evidence and supporting criminal investigations within a county sheriff's office.
View JobIncident Response and Forensic Analyst
The Best Job Board
Colorado Springs, CO
Experienced cybersecurity professional sought to lead incident response and digital forensic investigations, analyzing compromised systems, preserving evidence, and producing detailed technical reports for a classified and unclassified enterprise environment.
View JobMobile Forensics Software Engineer
MANTECH
Herndon, VA
Supports mobile device and application forensic analysis, reverse engineering, and software tool development for cyber mission needs, producing technical reports and collaborating with analysts and engineers on investigative objectives.
View JobDigital Forensics Analyst- HYBRID
Crest Security Assurance
Alexandria, VA
Investigate compromised systems across networks, endpoints and cloud, acquiring and analyzing digital evidence, performing malware analysis, and producing forensic reports to support federal incident response and insider threat investigations.
View JobInfo Security Forensic Examiner II
U.S. Bank
Minneapolis, MN
Join an e-discovery and forensic investigations team collecting, preserving, and analysing digital evidence from laptops, mobile devices, email and messaging platforms, supporting legal, HR, fraud, and security investigations.
View JobAssociate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Houston, TX
Join a forensic services team conducting cybersecurity investigations, digital forensic analysis, and incident response for corporate clients, including breach detection, malware analysis, and expert reporting support for legal matters.
View JobDigital Forensic Examiner
Viperion Tech, LLC
Springfield, VA
Experienced forensic examiner needed to acquire and analyze digital media across Windows, Linux, and Mac systems, investigate intrusions and malicious code, and produce detailed forensic reports for counterintelligence cyber investigations requiring TS/SCI clearance.
View JobForensics Specialist Senior
Accenture Federal Services
Leesburg, VA
Lead complex digital forensic investigations for a federal security operations center, mentoring analysts, performing malware analysis, and ensuring evidence integrity across high-priority cyber cases.
View JobDigital Forensic Intrusions Lead
Spry Methods, Inc.
Linthicum, MD
Leads forensic imaging and data extraction operations at a government digital forensics lab, overseeing evidence acquisition, malware analysis, network forensics, and team supervision with TS/SCI clearance eligibility required.
View JobCyber Defense Forensics (CDF) Lead
Accenture Federal Services
Arlington, VA
Lead digital forensics and insider threat operations for a federal client, managing investigations, DLP monitoring, evidence handling, and a SOC forensics lab while mentoring an analyst team.
View JobDigital Forensic Extraction Lead
Spry Methods, Inc.
Linthicum, MD
Lead forensic imaging and data extraction operations in a government cyber forensics lab, overseeing evidence acquisition from hard drives, mobile devices and IoT, plus staff and chain-of-custody management.
View JobSr. Cyber Consultant, DFIR – SpiderLabs
LevelBlue
United States
Experienced DFIR specialist needed to lead client-facing incident response and forensic investigations, analysing digital evidence, producing clear reports, and coordinating across technical and legal teams.
View JobCyber Forensics Analyst / Cyber Intrusion Analyst
Parsons Corporation
Baltimore, MD
Hands-on cyber forensics and intrusion analysis role covering forensic imaging, host and network forensics, malware analysis and reverse engineering, supporting a mission-critical government cybersecurity program.
View JobIncident Response Consultant (Remote)
CrowdStrike
United States
Join a security services team conducting incident response investigations for major global organizations, performing host and network forensics, threat hunting, and producing findings for stakeholders and legal counsel.
View JobAssociate Director, Cyber Operations – Cyber Response and Digital Forensics
KPMG US
Albany, NY
Lead high-severity cyber incident investigations, performing disk, memory, log and network forensics across Windows, Linux and cloud platforms, advising executives, building detection automation, and mentoring junior forensic analysts.
View JobSenior Incident Response & Digital Forensics Analyst
Bloomberg
New York, NY
Lead complex cyber incident investigations, analysing host, memory, network and log evidence, performing malware analysis and forensic acquisitions, while mentoring analysts and shaping investigative standards and tooling.
View JobICAC Technical Investigator
State of Oklahoma
Oklahoma County, OK
Conduct field forensic previews and full mobile device examinations supporting child exploitation investigations, handling evidence, writing technical reports, and testifying in court on findings.
View JobDigital Forensics & Incident Response (DFIR) Director
IronGate Cybersecurity LLC
United States
Lead complex forensic investigations and incident response engagements, overseeing analysts, client communication, and quality of deliverables. Requires deep DFIR expertise, leadership skills, and experience with forensic tools and methodologies.
View JobDigital Forensics & Incident Response Analyst
TikTok USDS Joint Venture
New York
Lead digital forensic investigations across endpoints, servers, mobile devices, and cloud infrastructure, handling evidence acquisition, malware and artifact analysis, and detailed reporting to support insider threat and incident response efforts.
View JobSenior Forensic and Malware Analyst Top Secret/SCI w/Poly
Peraton
Fort Gordon, GA
Senior analyst needed to perform malware reverse engineering, digital and mobile forensics, and network traffic analysis supporting a military cyber command, requiring Top Secret/SCI clearance with polygraph.
View JobSenior Incident Response Consultant | $110,000 – $145,000
Maestro Search
Tysons Corner, VA
Lead end-to-end forensic investigations across host, network, cloud and application environments, directing client containment during live incidents, and producing findings for boards, counsel and regulators.
View JobSenior Associate/Digital Forensics (Forensic Services practice)
Charles River Associates
Oakland, CA
Lead forensic investigations across MacOS, Windows, Linux, and mobile devices, performing data collection, artifact analysis, and trade secret misappropriation investigations while supervising teams and supporting business development.
View JobDigital Forensics Lead
22nd Century Technologies Inc.
Fairmont, WV
Leads digital forensic investigations for government contracts, overseeing evidence collection, analysis, and reporting while mentoring junior staff and coordinating with legal, security, and IT teams on-site in West Virginia.
View JobMobile Threat Analyst / Active Secret
Peraton
Arlington, VA
Conduct forensic examinations of iOS and Android devices, analyze mobile apps for malicious behavior and data exfiltration, and deliver threat intelligence supporting a federal cybersecurity mission.
View JobPrincipal Digital Forensics Examiner
Leidos
Bethesda, MD
Lead a digital forensics program supporting a defense intelligence mission, overseeing examiners performing evidence acquisition, analysis and reporting, while managing staffing, training and program strategy. Requires TS/SCI clearance and forensic certification.
View JobDirector
Iceberg
United States
Lead complex digital forensic engagements for law firms and corporates, covering evidence preservation, examination, expert reports and testimony, while building your own client relationships and business.
View JobSenior Analyst, Investigations and Forensics
Cypress HCM
Santa Clara County, CA
Lead complex digital forensic investigations across endpoint, cloud, email, and identity environments, covering insider threat, IP theft, fraud, and misconduct cases. Produce legally defensible reports and support eDiscovery, litigation, and AI-augmented investigative workflows.
View JobCyber Security Analyst III – Digital Forensics and Incident Response
Jobgether
United States
A senior-level remote role supporting federal cybersecurity operations, combining hands-on digital forensic investigations with incident response, security monitoring, threat analysis, and mentoring of junior analysts across enterprise environments.
View JobMedia Malware Analyst, Journeyman
Leidos
Fort Meade, MD
Support US Cyber Command operations by conducting forensic analysis of compromised systems and media, performing static and dynamic malware analysis, reverse engineering malicious files, and producing technical threat reports and risk assessments.
View JobSenior Forensics Consultant
Innovative Driven
United States
A senior, client-facing digital forensics role conducting defensible ESI collections and forensic examinations across computers, mobile devices, servers and cloud platforms, advising legal teams and providing expert testimony in court proceedings.
View JobForensics Investigations Analyst
Central Business Solutions Inc.
United States
Conduct end-to-end digital forensic investigations across endpoint, cloud, email and SaaS environments, covering insider threat, data exfiltration and misconduct cases, producing legally defensible reports for HR, legal and regulatory audiences.
View JobSenior Incident Response Security Consultant, Google Cloud, Mandiant
Georgia
Join Mandiant's Google Cloud team as a senior consultant delivering end-to-end incident response services, including forensic analysis, threat hunting, malware triage, and crisis management for complex, high-profile client engagements.
View JobCybersecurity Forensic Analyst-IBM CISO
IBM
Austin, TX
Join IBM's global CSIRT team conducting forensic investigations across endpoint, network, and cloud environments. Preserve and analyse digital evidence, reconstruct attack timelines, and deliver clear findings to support incident response across the Americas region.
View JobSenior DFIR Consultant
IronGate Cybersecurity LLC
United States
Lead complex digital forensic investigations including ransomware, BEC and intrusion cases, mentor junior analysts, develop forensic best practices, and communicate findings to technical and non-technical stakeholders in a professional services environment.
View JobSenior Digital Forensics and Incident Response (DFIR) Consultant
CYPFER
Miami, FL
Lead DFIR workstreams across incident response and post-breach recovery engagements, performing forensic acquisition, IOC triage, timeline construction, and log analysis while coordinating junior consultants and presenting findings to client stakeholders.
View JobSenior Incident Response Consultant, Mandiant, Google Cloud
Texas
Lead complex incident response engagements for enterprise clients, performing forensic analysis, threat hunting, and malware triage across cloud, endpoint, and network environments, while mentoring junior consultants and presenting findings to executive audiences.
View JobSr. Principal Consultant, DFIR
LevelBlue
United States
A senior DFIR consulting role leading cybersecurity incident investigations, digital forensic examinations across endpoints, networks and cloud platforms, evidence collection, and authoring detailed reports for technical and non-technical stakeholders.
View JobLead Principal Consultant DFIR – Spiderlabs
LevelBlue
United States
A senior client-facing DFIR consultant role leading cybersecurity incident investigations, conducting digital forensic examinations across servers, endpoints and SaaS platforms, and delivering clear, actionable reports to technical and non-technical stakeholders.
View JobSenior Incident Response Consultant
Quorum Cyber
United States
Lead complex cyber security incident investigations across diverse environments, performing advanced host, network, and memory forensics. Provide expert analysis, stakeholder guidance, and contribute to IR capability development within a Microsoft-focused security organisation.
View JobIncident Response Consultant (North America)
Quorum Cyber
United States
Support and lead investigations into cyber security incidents, performing host, network, and memory forensics across Windows, Linux, macOS, and multi-cloud environments. Collaborate with SOC, MDR, and Threat Intelligence teams to contain, remediate, and recover from breaches.
View JobDirector, Incident Response
KPMG US
Atlanta, GA
Lead enterprise cyber incident response engagements for a global advisory practice, directing investigations, remediation, and resilience efforts while advising executive stakeholders and developing high-performing DFIR teams and service offerings.
View JobMedia Malware Analyst, Senior
Leidos
Fort Meade, MD
Senior role supporting US Cyber Command operations through forensic analysis of compromised systems and media, static and dynamic malware analysis, reverse engineering, threat reporting, and signature development to defend national security networks.
View JobDFIR Analyst
SentinelOne
United States
Serve as technical lead on breach response investigations spanning endpoint, network, cloud, and SaaS environments. Own evidence handling, forensic analysis, containment guidance, and formal investigative reports for a 24x7 global DFIR team.
View JobProject – Manager, Cyber and Cryptocurrency Forensics and Investigations
Deloitte
San Diego, CA
Analyse cyber-enabled activity and cryptocurrency/blockchain transactions to support forensic investigations and financial intelligence objectives. Lead project workstreams, mentor team members, and correlate on-chain and off-chain data for government and public sector clients.
View JobDigital Forensic Examiner
Booz Allen Hamilton
Warrenton, OR
An intermediate-to-advanced DFIR examiner role collecting, analysing and presenting digital evidence for cyber incident and criminal investigations, including forensic imaging, malware analysis, log review, IOC identification and technical reporting.
View JobDigital Forensics Analyst SME
Booz Allen Hamilton
Bethesda, MD
Support a 24x7 SOC and incident response team by conducting forensic imaging, evidence collection, artifact analysis, and chain-of-custody documentation across Windows, Linux, macOS, and cloud environments, while producing high-quality investigative reports for federal stakeholders.
View JobDIGITAL FORENSIC EXAMINER
City of Douglasville
Douglasville, GA
A law enforcement digital forensics role focused on recovering and analysing evidence from digital devices and media, preparing detailed forensic reports, supporting criminal investigations, and testifying in court proceedings at multiple judicial levels.
View JobSenior Cybersecurity – Digital Forensic Investigator
AT&T
Charlotte, NC
Conduct digital forensic investigations across enterprise environments including endpoint, cloud, memory, and network systems. Analyse evidence, reconstruct attack timelines, identify root cause, and produce technically defensible reports for technical and executive audiences.
View JobDigital Forensics Lead
SAIC
Bethesda, MD
Senior technical and managerial lead overseeing all digital forensics activities within an Intelligence Community program, including forensic examination, DFIR, lab accreditation, chain of custody, and cross-functional intelligence support in Bethesda, MD.
View JobSenior Analyst – Forensics & Response
TikTok USDS Joint Venture
New York
Lead complex digital forensic investigations and incident response across enterprise endpoints, mobile devices, cloud infrastructure, and data platforms. Produce detailed forensic reports and support legal, compliance, and eDiscovery functions within a high-stakes insider threat programme.
View JobPrincipal Incident Response Security Consultant, Mandiant, Google Cloud
Arizona
Lead complex incident response investigations for enterprise clients, conducting host, network, cloud and memory forensics, malware triage and threat hunting, while presenting findings to technical and executive audiences.
View JobDigital Forensics Analyst
Breadcrumb Cybersecurity
Fresno, CA
Full-time, on-site digital forensics analyst role based in Fresno, CA. Responsibilities span evidence collection, forensic imaging, artifact analysis, timeline development, report writing, chain-of-custody management, and supporting legal and litigation matters.
View JobManager, Complex Digital Events
Kroll
United States
Lead complex digital forensic and incident response investigations for a global client base, mentor junior staff, manage case lifecycles from scoping to closure, and maintain key client relationships across multiple industry sectors.
View JobForensics Imaging Lead
Parsons Corporation
Linthicum, MD
Lead a team conducting cyber forensics imaging and digital evidence collection in a classified environment. Responsibilities include evidence acquisition, chain-of-custody enforcement, tool validation, team mentorship, and process improvement across diverse device types.
View JobUnix/Linux Infrastructure Forensics & Incident Engineer
Canvendor
San Jose, CA
A senior-level role leading complex digital forensic investigations and incident response across Unix/Linux servers, cloud infrastructure, containers, and enterprise networks. Requires deep expertise in forensic analysis, threat hunting, and IR methodology within large-scale environments.
View JobForensics Analysis Lead
Parsons Corporation
Linthicum, MD
Lead a team of cyber forensics analysts conducting host-based forensic examination across Windows, Linux, and macOS environments. Responsibilities include artifact analysis, technical reporting, mentorship, process improvement, and quality assurance within an ISO/IEC 17025-accredited laboratory.
View JobSenior Incident Response Consultant
Pondurance
McLean, VA
Lead technical incident response investigations for clients, conducting forensic analysis of host, network, and application data. Communicate findings to executive and technical stakeholders, develop custom IR tools, and provide actionable remediation guidance.
View JobDigital Forensics and Incident Analyst (TS)
Agile Defense
Washington, DC
Support a government SOC as a Tier 2/3 digital forensics and incident analyst, examining digital evidence, conducting malware and file system analysis, maintaining chain of custody, and delivering written findings to authorised stakeholders.
View JobSystems Forensic Examiner
Peraton
Linthicum, MD
Support DoD cyber investigations by examining digital media — including hard drives, mobile devices and storage — using industry-standard forensic tools. Analyse evidence, recover data, and prepare detailed reports suitable for courtroom presentation.
View JobDigital Forensics Consultant
ENDUIR Cyber
United States
Join a cybersecurity consulting firm as a forensics practitioner supporting breach investigations and incident response engagements. Collect and analyse digital evidence, reconstruct incident timelines, and produce clear findings reports for technical, executive, and legal audiences.
View JobManager, Digital Forensics & Incident Response (DFIR)
Stealth Talent Solutions
United States
Lead complex cyber investigations and forensic engagements across ransomware, data breaches, and insider threats. Manage client communications, mentor IR practitioners, and conduct hands-on Windows forensic analysis from triage through recovery.
View JobSenior Analyst – Forensics & Response
TikTok USDS Joint Venture
Washington, DC
Lead complex digital forensic investigations and incident response across enterprise endpoints, mobile devices, servers, and cloud infrastructure. Responsibilities include evidence acquisition, artifact analysis, forensic reporting, and legal/compliance support within an insider threat detection team.
View JobCybersecurity Operations Analyst
SITEC Consulting, LLC.
Springfield, VA
Senior Tier 3 incident responder supporting complex cybersecurity incidents in a mission-focused environment, performing host, memory and network forensic analysis, malware investigation, threat attribution, and coordinating with law enforcement and counterintelligence stakeholders.
View JobSenior Incident Responder / Threat Hunter
ShorePoint, LLC
Albuquerque, NM
Lead structured threat hunts, complex incident response actions and digital forensic investigations across enterprise environments, integrating cyber threat intelligence to detect, analyse and mitigate malicious activity for high-profile public and private sector clients.
View JobPrincipal DFIR Consultant – Remote (Anywhere in the U.S.)
GuidePoint Security
United States
Lead complex breach investigations and forensic engagements as the highest individual contributor in a specialist DFIR practice, covering host forensics, cloud forensics, malware triage, threat actor attribution, and client-facing delivery for enterprise and government clients.
View JobSenior DFIR Consultant – Engagement Lead
Zurich North America
St. Louis City County, MO
Lead complex incident response engagements and digital forensics investigations for external clients, managing stakeholder communications, forensic examinations, malware analysis, and executive reporting during active cybersecurity incidents.
View JobSecurity Engineer
Catapult Solutions Group
United States
A hands-on, remote contract role within a Security Operations Centre, focused on leading incident response investigations, performing host, network and cloud forensic analysis, and improving detection capabilities using SIEM, EDR and AI-assisted platforms.
View JobSME Digital Media Forensics Team Support (Computer Forensic Specialist)
Prescient Edge
Linthicum Heights, MD
A senior computer forensic specialist is sought to support federal CI/CT investigations, conducting forensic examination of digital media, evidence acquisition, malware analysis, and incident response, while evaluating emerging forensic technologies and developing processes.
View JobSr. DFIR Analyst
SentinelOne
United States
Lead technical DFIR breach response investigations across endpoint, network, cloud, and SaaS environments. Own evidence handling, forensic analysis, containment guidance, and formal reporting, while mentoring analysts and driving continuous process improvement.
View JobSenior Digital Forensics and Incident Response Engineer
Ladders
United States
Lead high-impact forensic investigations into identity theft and account takeover within a healthcare environment, combining hands-on digital forensics, incident response, workflow automation, and strategic leadership to mature organisational forensic capabilities.
View JobDigital Forensics Analyst
SoTalent
Indianapolis, IN
Seeking an experienced digital forensics analyst to conduct investigations across endpoints, networks, cloud and manufacturing environments, handling evidence acquisition, malware triage, chain-of-custody documentation and forensic reporting for security and legal stakeholders.
View JobSr. Digital Media Forensics Team Support (Computer Forensic Spec with Security Clearance
Prescient Edge
Linthicum Heights, MD
Senior forensic examiner role supporting CI/CT investigations through full-cycle digital media examination, evidence acquisition, forensic analysis and reporting, malware analysis, and incident response, with a TS/SCI CI Poly clearance required.
View JobSenior Associate/Digital Forensics (Forensic Services practice)
Charles River Associates
Chicago, IL
Join a forensic consulting practice to lead digital investigations involving device collection, macOS/iOS artifact analysis, mobile forensics, and trade secret matters. Oversee project teams, support business development, and drive quality across client engagements.
View JobSenior Digital Forensics and Incident Response Engineer
Humana
Charlotte, NC
Senior DFIR engineer leading forensic investigations into identity theft, account takeover and cyber incidents. Develops automated detection workflows, conducts root-cause analysis, and supports enterprise incident response across cloud and on-premises environments.
View JobCybersecurity Operations Analyst
SITEC Consulting
West Springfield, VA
Senior Tier 3 incident responder performing forensic analysis, malware investigation, threat attribution, and host/network/memory artifact analysis in a mission-critical, clearance-required environment supporting complex cybersecurity incidents.
View JobDigital Forensic Examiner (Local Las Vegas. No Relocation or Remote)
EXPERT DATA FORENSICS
Las Vegas, NV
Part-time in-office examiner role acquiring, analysing and reporting on digital evidence from mobile devices, computers and cloud accounts, using industry-standard forensic tools, with courtroom testimony responsibilities.
View JobLateral Digital Forensics Unit (DFU) Detective
City of Peoria, AZ
Peoria, AZ
Join a municipal police department's Digital Forensics Unit, recovering, analysing and preserving electronic evidence as a detective. Requires at least three years' DFU experience, with occasional patrol support duties.
View JobIntrusion Analysis Technical Lead
Parsons
Maryland
Lead a team of cyber analysts conducting advanced intrusion investigations, including host-based and network forensic analysis, malware analysis, and reverse engineering, while providing technical mentorship and improving analytic workflows.
View JobCyber Forensics Analyst / Cyber Intrusion Analyst
Parsons
Maryland
Join a growing cyber forensics team supporting mission-critical government work. Roles span forensic imaging, host and network analysis, intrusion investigation, malware analysis, and reverse engineering across multiple seniority levels, requiring an active TS/SCI clearance.
View JobIncident Response Lead
Parsons
Maryland
Lead a team conducting advanced incident response and cyber investigations, including host and network forensic analysis, APT tracking, and malware analysis, while mentoring analysts and driving technical excellence across workflows.
View JobDigital Forensics Analyst
Rolls-Royce
Indianapolis, IN
Join a purple team as a DFIR specialist, leading incident response investigations, conducting threat hunting, performing forensic analysis across endpoints and cloud, and developing detections within SIEM and EDR platforms. US citizenship required.
View JobHost Forensics Analyst
BCMC
Arlington, VA
Support a critical federal cyber mission by conducting host-based digital forensics investigations, leading forensic teams at onsite engagements, analysing digital artefacts, and producing detailed technical and executive-level reports for senior stakeholders.
View JobSenior Digital Forensics and Incident Response Engineer
Humana
Atlanta, GA
Senior DFIR engineer role leading forensic investigations, identity theft response, and root-cause analysis across enterprise infrastructure. Requires experience with forensic tooling, Splunk, and cloud IR, with a focus on automation and scalable detection capabilities.
View JobeDiscovery Forensic Analyst
KLDiscovery
California
Conduct forensic acquisitions, investigations and analysis across diverse digital environments, producing reports and expert testimony. Work with internal and external clients to scope, collect and analyse data using industry-standard forensic tools.
View JobPrincipal DFIR Consultant
MOXFIVE
United States
Lead complex incident response and digital forensics investigations across enterprise and multi-cloud environments, including AWS, GCP and Azure. Contribute to building an AI-assisted investigative platform while hunting and eradicating advanced threat actors.
View JobDigital Forensic Investigator
Avalon
Buffalo, NY
A hybrid forensic examiner role based in Buffalo, NY, conducting examinations of computers, mobile devices, and cloud sources. Responsibilities include evidence acquisition, artifact analysis, reporting, and laboratory operations across corporate, civil, and criminal matters.
View JobCyber Forensics Analyst / Cyber Intrusion Analyst
Parsons Corporation
Linthicum, MD
Hands-on cyber forensics and intrusion analyst roles at multiple seniority levels, covering host and network forensics, malware analysis, reverse engineering, and digital evidence handling in support of mission-critical government cybersecurity operations.
View JobSenior Incident Response Consultant, Mandiant, Google Cloud
New York, NY
Join Mandiant's elite incident response team, helping clients navigate complex cyber incidents through forensic analysis, threat hunting, malware triage, and containment — communicating findings to technical and executive stakeholders across diverse engagements.
View JobConsulting Associate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Washington, DC
Join a forensic services consulting practice supporting fraud, data breach and cybercrime investigations. Conduct digital forensic analysis, incident response, malware investigation and expert report drafting for corporate clients and legal counsel.
View JobCriminal Digital Forensic Analyst
ViaPath Technologies
Mechanicsburg, PA
Perform forensic extraction and analysis of legally seized cellular devices within a correctional environment, support facility investigations through data mining and link analysis, produce intelligence reports, and provide court testimony as required.
View JobAssociate Principal/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Dallas, TX
Lead cyber intrusion investigations, digital forensics and incident response engagements within a forensic consulting practice, managing client relationships, supervising teams, supporting business development and providing expert technical guidance.
View JobIncident Response Lead
Parsons Corporation
Linthicum, MD
Lead a team of cyber analysts conducting advanced incident response and forensic investigations, including host and network analysis, APT tracking, and malware forensics, while mentoring analysts and driving continuous improvement in investigative processes.
View JobMobile Forensics Analyst (SME)
GovCIO
Triangle, NC
Senior mobile forensics analyst role supporting a government contract, performing forensic imaging and analysis of mobile devices — primarily iOS — using Cellebrite tools, collaborating with legal teams, and providing expert testimony in litigation matters.
View JobDigital Forensics Lead
Convergenz
United States
Lead and conduct digital forensics investigations across agency systems and devices, mature a forensics programme, and deliver analysis reports to leadership. Requires 5+ years of forensics experience and relevant GIAC certification preferred.
View JobInformation Technology Specialist (INFOSEC)
U.S. Customs and Border Protection
San Diego, CA
A federal government digital forensics specialist role based across multiple US border locations, conducting advanced laboratory analysis of digital and mobile evidence, developing forensic tool validation plans, and preserving and authenticating electronic media for investigative purposes.
View JobDigital Forensics & Incident Response
Boundless_ Expert Staffing
United States
Join a vetted network of on-call DFIR practitioners deployed to client incidents and engagements. Conduct digital forensic investigations, lead or support incident response, handle evidence, and deliver clear forensic documentation — part-time or full-time.
View JobIntrusion Analysis Technical Lead
Parsons Corporation
Linthicum, MD
Lead a team of cyber analysts conducting advanced intrusion analysis, host and network forensics, malware analysis, and reverse engineering in support of critical government mission objectives. Requires TS/SCI clearance and 8+ years' experience.
View JobAssociate Principal/Digital Forensics (Forensic Services practice)
Charles River Associates
New York, NY
Lead digital forensic investigations, primarily trade secret matters, conducting hands-on analysis of MacOS, iOS, Windows and Linux devices. Oversee teams, deliver expert testimony, and drive business development within a forensic consulting practice.
View JobDigital Forensics Examiner
Peraton
Bethesda, MD
Senior forensic examiner role supporting a US government national security customer, conducting end-to-end digital evidence examinations across hard drives, mobile devices and removable media, producing formal reports and expert consultation.
View JobCriminal Digital Forensic Analyst
ViaPath Technologies
Rancho Cordova, CA
Perform forensic extraction and analysis of legally seized cellular devices within a correctional facility, support investigations with actionable intelligence, produce detailed reports, and provide testimony in court or administrative hearings.
View JobSenior Incident Response Analyst
OpenLoop
United States
Join a telehealth security operations team as a hands-on DFIR responder, owning incidents end to end — from detection and forensic investigation through containment, eradication, and post-incident review — across host, cloud, and identity environments.
View JobSenior Associate/Digital Forensics (Forensic Services practice)
Charles River Associates
Dallas, TX
A senior forensic role within a consulting firm's Forensic Services practice, conducting device collections, macOS and mobile forensic examinations, trade secret investigations, and leading client engagements across Windows, Linux, iOS and Android platforms.
View JobIBM CISO – Cybersecurity Forensic Analyst
IBM
Chicago, IL
A hands-on forensic analyst role within a global corporate CSIRT, conducting digital forensic investigations across endpoints, networks and cloud environments, supporting incident response, and producing clear technical and executive-level reports.
View JobSenior Digital Forensics and Incident Response Engineer
Humana
Dallas, TX
A senior-level DFIR role leading forensic investigations into identity theft, account takeover, and enterprise cyber incidents. Involves forensic analysis, incident response, root-cause identification, automation development, and investigative reporting for security leadership.
View JobSenior Digital Forensics Examiner
Minnesota IT Services
St Paul, MN
A senior-level forensics examiner role within a state government digital forensics laboratory, responsible for complex investigations, evidence acquisition, analysis, reporting, expert testimony, lab maintenance, and mentoring junior staff.
View JobForensics Consultant
Lineal
Columbus, Ohio
Lead end-to-end digital forensic investigations across PCs, mobile devices, servers and cloud systems, guiding clients through data collection, processing and analysis while acting as a subject matter expert.
View JobIncident Response Senior Consultant (Remote)
CrowdStrike
United States
Lead incident response engagements for global organisations, conducting host and network forensics, threat hunting, malware analysis and intrusion investigations, while producing high-quality reports and contributing to industry thought leadership.
View JobCyber DFIR Lead Consultant
PNG Cyber, LLC
United States
Lead senior-level digital forensics and incident response engagements covering ransomware, BEC, and insider threats. Manage case lifecycles, mentor analysts, conduct forensic analysis, liaise with clients and legal counsel, and deliver professional technical reports.
View JobSenior DFIR Consultant – Remote (Anywhere in the U.S.)
GuidePoint Security
Remote
Lead and execute complex DFIR investigations including host forensics, network traffic analysis, malware triage and log review. Deliver high-quality client reporting, drive practice improvement and support proactive threat hunting engagements across diverse sectors.
View JobDigital Forensic Examiner
Infotrend
Lorton, VA
A hands-on forensic examiner role supporting a government laboratory, performing digital evidence seizure, imaging, artifact analysis, tool validation, and court testimony, with onsite work in Lorton, VA and occasional field travel across the US.
View JobManager, Forensics Technology – Digital Forensics
BDO
United States
Manage digital forensics and eDiscovery matters involving evidence identification, preservation, collection and analysis. Lead client engagements, coordinate project workstreams, mentor junior staff, and deliver clear, defensible findings across complex multi-source investigations.
View JobCareers – Job Details (redesign)
Maximus
San Antonio, TX
Senior incident response role supporting DoD mission assurance in a classified onsite environment. Requires 10+ years' IR experience, TS/SCI clearance, DoD 8140 certifications, and forensic tooling expertise including EnCase, FTK, and Volatility.
View JobSenior Associate, Forensic Technology
val's services
San Francisco, CA
Support end-to-end forensic investigations across iOS, macOS and Windows platforms, advising on misconduct, IP theft and data breach cases, automating forensic workflows, and communicating technical findings to stakeholders.
View JobDigital Forensics & eDiscovery Manager
KLA
Ann Arbor, MI
Lead a global digital forensics and eDiscovery function within a corporate legal team, overseeing forensic investigations, ESI preservation, legal holds, insider risk support, and evidence management across endpoints, cloud, mobile, and AI platforms.
View JobCERT Lead
New York City Office of Technology & Innovation
Brooklyn, NY
Lead a six-person DFIR team serving as the top-level technical escalation point for high-profile cybersecurity incidents across New York City agencies, covering incident response, digital forensics, malware analysis, threat hunting, and cloud investigations.
View JobDigital Forensics Examiner
CYBIR
Moorestown, NJ
Experienced examiner sought to take technical ownership of digital forensic and eDiscovery matters, performing collections, artifact analysis, and defensible report writing across computers, mobile devices, cloud platforms, and email systems.
View JobPrincipal/Digital Forensics, Incident Response & Cybersecurity (Forensic Services practice)
Charles River Associates
New York, NY
A senior consulting role leading cyber intrusion investigations, digital forensics, and incident response engagements for corporate clients. Responsibilities include forensic analysis, expert testimony, team leadership, client management, and business development within a forensic services practice.
View JobCyber Operations Analyst
MITRE
McLean, VA
Join a digital investigations team supporting national security and law enforcement missions. Responsibilities span digital forensics, OSINT analysis, investigative data analytics, adversary analysis, and development of new investigative capabilities and tradecraft.
View JobSecurity Spec Lead – Digital Forensics Analyst
American Electric Power
Columbus, OH
A senior digital forensics analyst role conducting end-to-end investigations into internal and external matters, supporting insider threat programmes, managing evidence, and communicating findings to HR, Legal, and executive stakeholders.
View JobDigital Forensics Senior Director – New York City
APT Search
New York City
Lead a US and Mexico digital forensics team within a global risk consultancy, managing end-to-end casework from evidence collection to expert witness testimony, while driving business development and mentoring junior practitioners.
View JobLead Analyst, Information Security (Forensics)
RXO, Inc.
Charlotte, NC
Lead digital forensic investigations across endpoints, cloud, mobile and email platforms, supporting cybersecurity incidents, HR, legal and compliance matters. Prepare defensible reports, maintain chain-of-custody, mentor junior analysts and drive investigative best practices.
View JobCyber Crypto & Blockchain Forensic Investigator
HallieMorgan Technologies
Atlanta, GA
Support a federal law enforcement agency by conducting cryptocurrency tracing, on-chain pattern analysis, and financial forensic investigations across major blockchains, assisting senior investigators with case development and analytical reporting.
View JobPrincipal, Digital Forensics
Control Risks
New York, NY
A senior leadership role managing digital forensics and eDiscovery services for law firm and corporate clients, overseeing forensic investigations, expert witness testimony, team development, and business development across US and international markets.
View JobDFIR Team Lead
Booz Allen Hamilton
McLean, VA
Lead a team of incident response analysts handling major cybersecurity incidents, conducting digital forensic examinations, coordinating containment efforts, mentoring junior staff, and delivering detailed technical reports to senior stakeholders.
View JobSenior Director, Digital Forensics and Incident Response
BlueVoyant
United States
Lead complex cyber investigations as incident commander, advising executives, legal counsel, and technical teams through ransomware, cloud, identity, and advanced threat incidents. Mentor DFIR consultants and drive client-facing forensic engagements end to end.
View JobPrincipal Incident Response Security Consultant, Mandiant
Massachusetts
Lead complex incident response engagements and forensic investigations for enterprise clients, performing host, network, and cloud forensics, malware triage, and threat hunting while managing project lifecycles and communicating findings to executive stakeholders.
View JobForensics / Incident Response SME
Valiant Solutions, LLC
Remote
A senior DFIR SME role supporting a US Government client, combining real-time incident response with deep forensic analysis across enterprise and cloud environments, including malware analysis, mobile forensics, and threat hunting.
View JobForensic Analyst
Arete Event Staffing Firm
United States
Conduct digital forensic analysis across Windows, Mac, Linux and network appliances, documenting findings, building attack timelines, identifying IOCs and TTPs, and producing detailed reports in support of incident response investigations.
View JobMedia Malware Analyst, Journeyman
Leidos
Odenton, MD
Support US Cyber Command operations by conducting forensic analysis of compromised systems and media, performing static and dynamic malware analysis, reverse engineering malicious files, and producing actionable threat intelligence reports for defence leadership.
View JobParanoids Forensic and Incident Response Operations (FIRE) Sr Analyst (NIGHT SHIFT)
Yahoo
United States
Senior night-shift analyst role on a global internet company's DFIR team, leading incident response investigations, threat hunting at scale, and mentoring junior analysts using AI-augmented tools and world-class telemetry.
View JobForensic Software Engineer
REDLattice, Inc.
Quantico, VA
Seeking a skilled engineer to conduct mobile device forensic analysis, reverse engineering, and vulnerability assessment in support of law enforcement and national security missions. Requires TS/SCI clearance and five years of relevant forensic experience.
View JobDigital Forensic Examiner
U.S. Bank
Minneapolis, MN
Join a corporate E-Discovery and Forensic Investigations team conducting forensic collections and examinations across endpoints, mobile devices, email and messaging platforms, supporting legal, HR, fraud and information security investigations.
View JobDigital Forensic Analyst
Koniag Government Services
Washington, DC
Support a federal government client as the primary digital forensics technical expert, conducting forensic examinations, incident investigations, insider threat inquiries, e-discovery support, and malware analysis across a complex enterprise IT environment.
View JobSenior Security Engineer, Digital Forensics
San Francisco, CA
Join a global security response team performing forensic investigations and incident response across a major technology organisation. Requires deep DFIR expertise, coding ability, and experience with industry-standard forensic and security tooling.
View JobForensics / Incident Response SME
Valiant Solutions
United States
A senior SME role combining real-time incident response with deep digital forensics expertise across enterprise and cloud environments, including malware analysis, mobile forensics, memory forensics, and evidentiary reporting for a US government client.
View JobCyber Defense Response Analyst II
CME Group
Chicago, IL
A mid-level DFIR analyst role responding to cyber incidents across a global financial markets environment, conducting threat hunts, applying endpoint forensics and malware analysis, and contributing to automation, runbooks, and tabletop exercises.
View JobAssociate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Boston, MA
Join a forensic services consulting practice supporting clients through cybersecurity investigations, data breach response, and digital forensic analysis. Responsibilities include evidence acquisition, malware analysis, IOC development, timeline analysis, and expert report drafting.
View JobDigital Forensic Examiner 2
Commonwealth of Pennsylvania
Lehigh County, PA
Join a state law enforcement agency as a digital forensic examiner, conducting technical examination of electronic devices, handling digital evidence, supporting criminal investigations, assisting at field scenes, and presenting findings in court proceedings.
View JobCybersecurity Digital Forensics Investigator
Integra
Dallas, TX
Conduct end-to-end digital forensic investigations across mobile, desktop, cloud, and network environments. Collect and preserve evidence under strict chain-of-custody, analyse artefacts, support incident response, and coordinate findings with legal counsel and federal agencies.
View JobDigital Forensics Analyst
Saliense
Alexandria, VA
Seeking an experienced digital forensics analyst to conduct forensic examination of Windows, Linux, Mac, and mobile devices, perform cloud investigations across M365/Azure/AWS, and support threat hunting using EDR, SIEM, and packet capture tools.
View JobIncident Response Senior Analyst (Tier 3)
Resource Management Concepts, Inc.
Quantico, VA
Senior analyst role supporting defensive cyberspace operations for a DoD contract at Quantico, VA. Responsibilities span DFIR investigations, forensic analysis, incident management, detection tuning, and mentoring junior analysts. TS/SCI clearance required.
View JobCybersecurity Operations Specialist 720
Freedom Technology Solutions Group, LLC
St Louis, MO
A CSOC Tier 2/3 role supporting 24x7 cyber incident response, including containment, eradication, forensic artifact analysis, malware analysis, and digital media examination within a government defence environment requiring active TS/SCI clearance.
View JobDigital Forensics & eDiscovery
MUFG
Tempe, AZ
An AVP-level role conducting digital forensic collections, artifact analysis and eDiscovery in support of security incidents, internal investigations and legal/compliance matters within a major financial institution. Requires 3+ years of forensics experience.
View JobDigital Forensics Analyst
Lighthouse
United States
Perform onsite and remote forensic collections of ESI from laptops, mobile devices, servers and cloud sources. Analyse and verify data in support of investigations and litigation, maintaining chain of custody and preparing detailed forensic reports.
View JobSenior Incident Response Consultant, DFIR
Zurich North America
Missouri
Lead complex incident response and digital forensics engagements for external clients, conducting forensic examinations, malware analysis, and threat attribution while delivering executive briefings, mentoring junior staff, and supporting cyber insurance breach response.
View JobForensic Computer Analyst SR
United States Postal Service
Richmond, CA
Senior forensic computer analyst conducting complex digital and multimedia evidence examinations, producing expert reports, providing court testimony, leading evidence collection, and advising on forensic techniques within a federal postal inspection laboratory.
View JobVP, Digital Forensics Expert Witness – SME (Testifying)
LevelBlue
United States
Senior testifying expert witness role conducting digital forensic investigations across endpoints, cloud and email systems, authoring expert reports and declarations, and providing sworn testimony in depositions, hearings and trials supporting litigation counsel.
View JobSenior DFIR Consultant – Remote (Anywhere in the U.S.)
GuidePoint Security
United States
Lead and execute complex DFIR investigations including host forensics, network traffic analysis, malware triage and log review. Author client deliverables, drive automation, and contribute to practice development across reactive and proactive engagements.
View JobSenior Incident Response Consultant | USA, Remote | $120,000 – $155,000
Maestro Search
United States
Lead end-to-end incident response investigations across host, network, cloud and application environments, delivering containment guidance, forensic analysis and client-facing findings for complex, high-impact cases including ransomware and nation-state threats.
View JobPrincipal DFIR Consultant
Tokio Marine HCC
United States
Lead complex digital forensics and incident response investigations for insured organisations, covering triage, containment, forensic analysis, and recovery. Mentor DFIR teams, manage client relationships, and drive strategy for BEC and ransomware incidents.
View JobSr. Cyber Analyst, Digital Forensics Incident Response
At-Bay
United States
Senior DFIR analyst role supporting insured SMBs with forensic evidence collection and analysis, incident investigation, root cause identification, ransomware response, threat hunting, and delivery of detailed incident reports and recovery recommendations.
View JobDigital Forensics Analyst
Gunnison Consulting Group
Alexandria, VA
Performs network and media digital forensic investigations supporting cybersecurity incident response and threat hunting. Analyses malware, compromised systems and cloud environments, prepares detailed forensic reports, and develops SOPs and automation tools.
View JobSenior Director, Digital Forensics & Incident Response
AstraZeneca
Gaithersburg, MD
Senior leadership role owning AstraZeneca's global DFIR capability. Responsibilities span incident command, forensic defensibility, team building, 24x7 coverage, executive reporting, and regulatory compliance across cloud, on-premises and OT/ICS environments.
View JobCTN – Digital Forensics/Law Enforcement Integration SME
BLUEFORCE INC
Carrollton, VA
Senior SME role supporting a DoD counter-narcotics programme, delivering digital forensics and law enforcement integration training to partner-nation personnel, developing curricula, assessing capability gaps, and mentoring investigators in evidence handling and cybercrime workflows.
View JobDFIR Consultant
Tokio Marine HCC
Remote
Join a specialist incident response firm supporting cyber insurance claims. Perform triage, forensic acquisition, and analysis of endpoint, cloud, and log evidence, delivering clear investigative reports for BEC and ransomware incidents.
View JobSenior Cyber Crypto & Blockchain Forensic Investigator
HallieMorgan Technologies
Washington, DC
Support a federal law enforcement agency conducting advanced cryptocurrency tracing, blockchain forensic analysis, financial forensics, and OSINT across complex cyber-enabled fraud and financial crime investigations involving multi-chain obfuscation techniques.
View Job(2027 Bachelor’s/Master’s graduates) Cyber & Forensic Technology Consulting Analyst/Associate
Charles River Associates
Dallas, TX
Entry-level consulting role supporting digital forensic investigations, incident response, and eDiscovery. Responsibilities include forensic analysis of computers, networks and mobile devices, evidence handling, malware analysis, and drafting technical reports for legal and corporate clients.
View JobComputer Forensic Examiner, Computer Crimes
Virginia Office of the Attorney General
Richmond, VA
Conduct computer forensic examinations and criminal investigations covering child exploitation, fraud, identity theft, and computer crimes. Collaborate with federal, state, and local law enforcement across Virginia, with occasional statewide and interstate travel required.
View JobPrincipal Incident Response Security Consultant, Mandiant
Georgia
Senior IR consultant role managing incident response engagements, performing digital forensics, host-based analysis, network traffic analysis and malware triage across cloud and on-premise environments, with client reporting responsibilities.
View JobDFIR Engineer II – Incident Response
Northwestern Mutual
Milwaukee, WI
Join a Threat Detection & Response team to investigate and contain security incidents, analyse system artifacts and memory, conduct threat hunting, and continuously improve IR procedures and detection capabilities.
View JobSenior Incident Response Security Consultant, Mandiant, Google Cloud
Arizona
Senior IR consultant at Mandiant delivering end-to-end incident response investigations, forensic analysis, threat hunting, and malware triage for clients. Leads engagements, mentors consultants, and communicates findings to technical and executive audiences.
View JobIncident Response Principal Consultant (Remote)
CrowdStrike
United States
Lead incident response engagements and forensic investigations across Windows, Mac, and Linux platforms. Hunt for threat actors, perform network and host forensics, malware analysis, and deliver findings to senior stakeholders including legal counsel.
View JobPrincipal Incident Response Analyst
Blackbaud
Charleston, SC
Senior analyst role leading incident response, digital forensic investigations, and threat hunting within a large enterprise environment. Requires 8+ years' experience, forensic tooling proficiency, and expertise in SIEM, EDR, and security frameworks.
View JobDigital Forensic Examiner, Mid
Booz Allen Hamilton
Washington, DC
Mid-level DFIR examiner role conducting forensic image analysis, malware investigation, log analysis, and incident response. Identifies IOCs, determines unauthorized access or data exfiltration, and prepares detailed technical reports for client leadership and counsel.
View JobDigital Forensics Lead (CBP)
Agile Defense
Ashburn, VA
Lead digital forensics investigations supporting U.S. Customs and Border Protection, preserving evidence, maintaining chain of custody, reconstructing incidents, and delivering defensible findings for incident response, insider threat, and law enforcement use.
View JobPrincipal Incident Response Security Consultant, Mandiant
New York
Senior Mandiant consultant managing complex incident response engagements, performing digital forensics, threat hunting, and malware analysis across cloud and on-premise environments, while communicating findings to executive and legal stakeholders.
View JobSenior Consultant, Digital Forensic and Incident Response (DFIR) (Remote)
Surefire Cyber Inc.
United States
Senior DFIR consultant role conducting forensic analysis and leading incident response engagements across ransomware, BEC, and malware cases. Involves client communication, mentoring junior staff, report writing, and on-call support.
View JobCyber Defense Forensics Lead
Gritter Francona
Ashburn, VA
Lead a cyber defense forensics team supporting DHS/CBP, directing digital forensic investigations across Windows, Linux, Mac and cloud systems, managing insider threat operations, DLP monitoring, evidence handling and formal investigation reporting.
View JobCryptologist
The Amatriot Group
Linthicum Heights, MD
Supports DoD cyber investigations by decrypting and recovering data from seized mobile devices, computers, and storage media. Produces technical reports for federal court proceedings and collaborates with digital forensic examiners on law enforcement and counterintelligence operations.
View JobSenior Forensic Technician/Analyst
Strategic Data Systems
Dahlgren, VA
Performs forensic analysis on computer systems, servers, and mobile devices at a naval warfare centre. Collects and preserves digital evidence, investigates cybersecurity incidents, recovers data, and produces forensic examination reports. May supervise junior analysts.
View JobConsulting Director, DFIR, Reactive Services (Unit 42)
Palo Alto Networks
Burbank, CA
Senior DFIR consulting director leading breach response engagements and forensic investigations for Unit 42 clients. Combines hands-on technical leadership with strategic advisory, client management, and team oversight across complex, high-pressure incidents.
View JobHost Based Systems Analyst III
Farfield Systems
Arlington, VA
Senior host forensics analyst supporting DHS's Hunt and Incident Response Team, conducting onsite/remote DFIR investigations, forensic imaging, malware analysis, report writing, and mentoring junior analysts across US federal engagements.
View JobSenior Cyber Lead
Quantum Sky
Linthicum Heights, MD
Lead digital forensics and incident response operations at a DoD cyber forensics laboratory, overseeing forensic examinations, intrusion analysis, malware analysis, evidence handling, and technical teams supporting classified cyber investigations.
View JobAssociate Director, Incident Response and Forensics
CSL Behring
King of Prussia, PA
Lead a global Digital Forensics and eDiscovery team, directing incident response, forensic analysis, threat hunting, and malware analysis. Partner with Security Operations and Legal to defend against cyber threats and manage eDiscovery matters.
View JobHost Based Systems Analyst III
ARSIEM
Arlington, VA
Seeks an experienced host forensics analyst to lead DFIR engagements for a government client, conducting forensic imaging, artifact analysis, malware evaluation, investigative reporting, and mentoring junior staff during onsite incident investigations.
View JobPrincipal Consultant, DFIR
LevelBlue LLC
United States
Seeking an experienced DFIR practitioner to lead cybersecurity incident investigations, conduct digital forensic analysis across diverse platforms, and manage threat actor communications and ransomware negotiations on behalf of clients.
View JobPrincipal/Digital Forensics, Incident Response & Cybersecurity (Forensic Services practice)
Charles River Associates
Chicago, IL
Senior consulting role leading cyber intrusion investigations, digital forensics, and incident response engagements. Responsibilities include forensic analysis, client management, team leadership, business development, and cybersecurity framework assessments for a global forensic services practice.
View JobPrincipal/Digital Forensics, Incident Response & Cybersecurity (Forensic Services practice)
Charles River Associates
Washington, DC
Senior consulting role leading digital forensics and incident response investigations, managing cross-functional teams, supporting fraud and cybercrime matters, providing expert testimony, and advising clients on cybersecurity frameworks and controls.
View JobInformation Technology Manager II
Arrow Electronics
Englewood, CO
Senior DFIR lead role managing complex cyber incident investigations, digital forensics, malware analysis, and threat hunting across enterprise and cloud environments, while mentoring teams and driving security detection engineering improvements.
View JobDFIR Consultant
Tokio Marine HCC - Cyber & Professional Lines Group
United States
Join a specialist DFIR team responding to BEC and ransomware incidents. Responsibilities include evidence acquisition, forensic analysis, malware triage, timeline development, client communication, and written reporting across endpoint, server, and cloud environments.
View JobDFIR Consultant
Colossus Technologies Group
United States
DFIR Consultant role involving forensic artifact collection, Windows and memory forensics, IOC analysis, log review, and incident remediation. Requires up to 50% client travel, on-call availability, and 2+ years of DFIR experience.
View JobDFIR Cybersecurity Consultant (Remote)
PNG Cyber, LLC
United States
Conduct forensic analysis and incident response investigations covering ransomware, business email compromise and litigation support. Collect and analyse data, produce technical reports, develop modern forensic techniques, and assist with EDR deployment and triage.
View JobDirector, DFIR (Remote)
Surefire Cyber
Remote
Lead a team of 3–5 forensic professionals managing complex client-facing incident response engagements across the full IR lifecycle. Responsibilities include scoping, stakeholder communication, mentorship, and refining DFIR processes and best practices.
View JobPrincipal Consultant, Digital Forensic and Incident Response (DFIR) (Remote)
Surefire Cyber
Remote
Principal-level DFIR consultant leading forensic investigations across ransomware, BEC, and malware incidents. Manages end-to-end IR engagements, mentors junior staff, produces forensic reports, and advises technical and non-technical stakeholders remotely.
View JobPrincipal Consultant, DFIR, Reactive Services (Unit 42) – Remote Weekend Shift
Palo Alto Networks
Burbank, CA
Senior DFIR practitioner role within Unit 42 leading incident response and forensic investigations across enterprise environments. Covers host, network and cloud forensics, ransomware response, evidence acquisition, and client remediation guidance on a weekend overnight shift.
View JobSenior Associate, Digital Forensics and Incident Response (DFIR)
Prescient
Chicago, IL
Seeks an experienced DFIR professional to lead and support cybersecurity investigations including ransomware and data breaches, perform forensic analysis of endpoints and cloud environments, and document findings for litigation and regulatory purposes.
View JobCyber Network Defense Analyst (CNDA) – Cloud Forensics
Argo Cyber Systems
Arlington, VA
Seeking an experienced DFIR specialist to lead cloud forensic investigations across Azure, AWS, and GCP environments for a federal mission, conducting evidence acquisition, artifact analysis, threat hunting, and producing executive-level reports.
View JobMedia Malware Analyst, Senior
Leidos
Odenton, MD
Support US Cyber Command by leading forensic analysis of compromised systems and media, static and dynamic malware analysis including reverse engineering, TTP identification, signature development, and delivering actionable threat intelligence reports to leadership.
View JobCyber Network Defense Analyst III
Nightwing Intelligence Solutions, LLC
Sterling, VA
Support DHS's Hunt and Incident Response Team performing Tier 2/3 DFIR investigations, forensic triage, network traffic analysis, threat hunting, and incident reporting to protect critical national cyber infrastructure.
View JobCyber Network Defense Analyst II
Nightwing Intelligence Solutions, LLC
Sterling, VA
Support DHS's Hunt and Incident Response Team performing Tier 2/3 DFIR investigations, proactive threat hunting, forensic triage, network traffic analysis, and incident documentation for critical national cyber infrastructure.
View JobContract Bench, Incident Responder (DFIR)
MOXFIVE
United States
Contract bench role for experienced DFIR professionals, supporting live incident response investigations across Windows, cloud, and SaaS environments. Flexible, part-time-friendly engagement covering ransomware, nation-state threats, and account takeovers.
View JobSenior Consultant, DFIR (Wed-Sun)
MOXFIVE
United States
Join a specialist IR consulting team responding to ransomware and nation-state threats across enterprise and cloud environments. Conduct forensic investigations on Windows, Mac, Linux, AWS, GCP and Azure, supporting clients through active incidents.
View JobDFIR
Cyesec
United States
Join a DFIR team performing incident response and digital forensics investigations across cloud, Windows, and Linux environments. Responsibilities include threat hunting, TTP analysis, and supporting clients in detecting and mitigating cyber threats.
View JobPrincipal Engagement Lead (Remote)
Surefire Cyber
Remote
Lead multiple active client-facing cybersecurity incident response engagements, coordinating forensic consultants, scoping investigations, liaising with insurers and legal counsel, and guiding clients through the full IR lifecycle from detection to recovery.
View JobIncident Response and Forensics Lead
Accenture Federal Services
Germantown, MD
Lead and manage a DFIR team supporting US federal clients, overseeing incident response operations, forensic analysis of intrusion artifacts, technical mentorship of analysts, and senior stakeholder briefings. Requires TS clearance and 7+ years DFIR experience.
View JobLead Cyber Mission Threat Analyst – Clearance Required
Cydecor, Inc.
Port Hueneme, CA
Senior technical authority for cyber threat hunting, forensic investigations, and incident response supporting U.S. Navy cybersecurity operations. Leads enterprise monitoring, IOC analysis, malware analysis, and remediation strategy for critical DoD mission systems.
View JobDigital Forensics Consultant (PST hours Seattle Area preferred)
Lighthouse Document Technologies Inc
Seattle, WA
Provides forensic analysis and ESI collection from computers, mobile devices, cloud repositories and networks. Prepares detailed forensic reports and declarations, conducts custodian interviews, and offers court testimony in support of investigations and litigation.
View JobMinimum qualifications
CyberJobs.Com
San Francisco, CA
Security Engineer role on a global Detection and Response team, performing DFIR investigations, participating in large-scale security incidents, developing forensic tooling, and applying digital forensics expertise across a complex enterprise environment.
View JobDigital Forensics Lead (26-091) with Security Clearance
Strategic Analysis Incorporated
Washington, DC
Lead and conduct digital forensics investigations into agency systems and devices, develop and mature the forensics programme, and deliver analysis reports to senior leadership within a federal health research agency.
View JobDigital Forensics Senior Consultant
Crowe
The Woodlands, TX
Lead complex digital forensic investigations across computers, mobile devices, cloud platforms, and email systems. Manage evidence intake, chain of custody, forensic analysis, client reporting, and mentor junior consultants within a consulting practice.
View JobSenior Computer Forensics Analyst
Capsicum Group, LLC
Miami-Fort Lauderdale
Senior forensics analyst conducting full forensic examinations of computers, servers and mobile devices, managing a forensics lab, mentoring staff, producing expert reports and providing court testimony across legal and corporate investigations.
View JobHost Based Systems Analyst II
ARSIEM
Arlington, VA
Government-facing Cyber Network Defense Analyst role combining incident response, network traffic analysis, digital forensics, threat hunting, and malicious activity investigation to protect federal client environments in Arlington, VA.
View JobForensics Lead
MANTECH
Chandler, AZ
Lead digital forensics operations for a DHS cybersecurity programme, conducting remote imaging, media analysis, malware reverse engineering, and forensically sound data preservation to counter Advanced Persistent Threats across complex network environments.
View JobThreat Hunt Analyst – High – Digital Forensics
Koniag Government Services
Washington, DC
Senior analyst role supporting a US federal agency, designing and leading threat hunting programmes while conducting advanced digital forensics investigations, malware analysis, and incident response across on-premises, cloud, and hybrid environments.
View JobDigital Forensics SME
ActioNet, Inc.
Rockville, MD
Senior DFIR role requiring 8+ years' experience performing advanced forensic analysis on endpoints, networks and digital media, malware analysis, evidence handling, IOC production and forensic reporting within a federal agency environment. TS/DOE Q clearance required.
View JobConsulting Associate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Houston, TX
Join a forensic services consulting practice to conduct cybersecurity investigations, digital forensic analysis, incident response, and malware analysis. Support counsel with expert reports, affidavits, and testimony across data breach and fraud matters.
View JobSenior Security Engineer, Digital Forensics
New York, NY
Senior DFIR engineer joining a global on-call security response team, investigating security and privacy incidents, developing forensic tooling, and applying broad digital forensics and incident response expertise across a large-scale enterprise environment.
View JobAssociate Principal/Digital Forensics (Forensic Services practice)
Charles River Associates
Washington, DC
Leads digital forensic investigations primarily involving trade secret theft, performing device collections, artifact analysis across macOS/iOS/Android/Windows/Linux, expert witness testimony, and team/business development within a forensic consulting practice.
View JobTier II-III Incident Response Analyst-Senior
Boston Government Services, LLC (BGS)
Knoxville
Senior analyst leading advanced incident response investigations, forensic analysis, malware analysis, threat hunting, and APT hunting for government clients. Involves evidence handling, chain-of-custody, IOC development, and SOC engineering support across complex secure environments.
View JobDigital Forensics and Incident Response, Senior Manager
Booz Allen Hamilton
Washington, DC
Senior manager role leading multiple DFIR teams, overseeing complex forensic investigations and high-severity incident response engagements, managing client relationships with insurers and legal counsel, and driving practice growth and team development.
View JobDigital Forensics & eDiscovery Manager
KLA
Milpitas, CA
Lead a global digital forensics and eDiscovery team within a legal compliance function, overseeing forensic investigations, ESI preservation, legal holds, evidence collection and analysis, insider risk support, and information governance across a multinational organisation.
View JobSenior Consultant, Digital Forensic and Incident Response (DFIR) (Remote)
Surefire Cyber
Remote
Senior DFIR consultant role conducting forensic investigations and incident response engagements across ransomware, BEC and malware cases. Leads small-to-medium investigations, mentors junior staff, and delivers client-facing analysis and written reports.
View JobSenior Director of Digital Forensics & Incident Response
Otis
Farmington, CT
Strategic senior leader overseeing a global 24x7 SOC, enterprise incident response, digital forensic investigations, insider risk, DLP, and eDiscovery programmes, advising executives during major cyber incidents.
View JobSenior Digital Forensic Analyst
Peraton
Arlington, VA
Conduct forensic examinations of digital devices, mobile platforms, and cloud sources in support of federal investigations. Produce expert reports, provide witness testimony, support search warrant executions, and mentor junior analysts using industry-standard forensic tools.
View JobPrincipal Consultant, Cloud DFIR (Unit 42) – Remote
Palo Alto Networks
Harrisburg, PA
Lead cloud-focused DFIR investigations across AWS, Azure, and GCP environments. Conduct forensic analysis, investigate breaches and ransomware, guide containment and recovery, and deliver executive-level reporting and remediation recommendations.
View JobDigital Forensics Analyst
SAIC
Chantilly, VA
Perform forensic acquisition and analysis on computers, mobile, IoT, cloud and digital media devices. Review evidentiary data to identify threats and data spills, produce analytical reports, and maintain forensic tools per SWGDE/NIST guidelines. Requires TS/SCI with Poly.
View JobCyber Forensic Specialist
Accenture Federal Services
Arlington, VA
Join a DFIR team supporting a federal cyber incident response function. Conduct digital forensic analysis, internal investigations, litigation holds, eDiscovery collections, and evidence management using tools such as EnCase, FTK, and Magnet Axiom.
View JobDigital Forensics Examiner
Peraton
Linthicum, MD
Senior digital forensics examiner supporting federal criminal investigations, analysing computers, mobile devices and storage media using tools such as EnCase, FTK and Cellebrite. Prepares court-ready reports and may testify as an expert witness. Requires active Secret clearance.
View JobIBM CISO – Cybersecurity Forensic Analyst
IBM
Austin, TX
Join IBM's CSIRT as a Forensic Analyst supporting incident response and digital forensics investigations across the Americas. Conduct endpoint, network, and cloud forensics, preserve evidence, reconstruct attack timelines, and produce defensible reports for technical and executive stakeholders.
View JobSenior Investigations Analyst – Digital Forensics
Corebridge Financial
Houston, TX
Lead digital forensics investigations for a financial services firm, conducting forensically sound evidence acquisition, artifact analysis, email/cloud forensics, and expert reporting for legal, HR, and executive stakeholders using tools like Nuix and Axiom.
View JobJunior Digital Forensic Analyst
Peraton
Arlington, VA
Support a federal forensics lab conducting examinations of digital media including mobile devices, computers and cloud sources. Produce court-admissible reports, provide expert witness testimony, and assist during search warrant executions for criminal and cyber investigations.
View JobSenior Investigations Analyst – Digital Forensics
Corebridge Financial
Jersey City, NJ
Lead digital forensics investigator responsible for forensic acquisition, artifact analysis, data recovery, and expert reporting on security breaches, policy violations, and litigation matters using tools including Nuix, Axiom, Cellebrite, and EnCase.
View JobDigital Forensics Cybersecurity Advisor
Booz Allen Hamilton
Washington, DC
Serve as a strategic digital forensics advisor supporting a US government health research agency. Conduct forensic investigations across Windows, MacOS, and iOS, manage evidence collection, and assess cybersecurity risks using tools including CrowdStrike and Microsoft Defender.
View JobGet new DFIR jobs in your inbox
A weekly round-up of every new listing on the board — no noise, unsubscribe anytime.