Digital Forensics Jobs: United States
250 current openings, updated daily. Links to original listings.
Digital Forensics & eDiscovery
MUFG
Tempe, AZ
An AVP-level role conducting digital forensic collections, artifact analysis and eDiscovery in support of security incidents, internal investigations and legal/compliance matters within a major financial institution. Requires 3+ years of forensics experience.
View JobIncident Response Principal Consultant
Jobgether
United States
Senior IR consulting role leading complex cybersecurity incident investigations across host, network, cloud, and malware forensics environments. Involves executive stakeholder communication, threat hunting, remediation strategy, and mentoring junior team members.
View JobDigital Forensic Examiner
CACI International Inc
Forest Park, GA
Cleared Digital Forensic Examiner required to collect, process, analyse and preserve digital evidence using tools including Cellebrite, EnCase, FTK and XRY in support of intelligence operations and investigative requirements, with up to 25% CONUS travel.
View JobSenior Consultant, DFIR, Reactive Services (Unit 42)
Palo Alto Networks
Santa Clara, CA
Unit 42 Senior DFIR Consultant conducting forensic analysis of endpoints, cloud, and networks during active security incidents. Responsibilities include evidence acquisition, malware investigation, client reporting, and remediation support across enterprise environments.
View JobSenior Incident Response Consultant, DFIR
Zurich North America
Missouri
Lead complex incident response and digital forensics engagements for external clients, conducting forensic examinations, malware analysis, and threat attribution while delivering executive briefings, mentoring junior staff, and supporting cyber insurance breach response.
View JobForensic Computer Analyst SR
United States Postal Service
Richmond, CA
Senior forensic computer analyst conducting complex digital and multimedia evidence examinations, producing expert reports, providing court testimony, leading evidence collection, and advising on forensic techniques within a federal postal inspection laboratory.
View JobVP, Digital Forensics Expert Witness – SME (Testifying)
LevelBlue
United States
Senior testifying expert witness role conducting digital forensic investigations across endpoints, cloud and email systems, authoring expert reports and declarations, and providing sworn testimony in depositions, hearings and trials supporting litigation counsel.
View JobSenior DFIR Consultant – Remote (Anywhere in the U.S.)
GuidePoint Security
United States
Lead and execute complex DFIR investigations including host forensics, network traffic analysis, malware triage and log review. Author client deliverables, drive automation, and contribute to practice development across reactive and proactive engagements.
View JobSenior Incident Response Consultant | USA, Remote | $120,000 – $155,000
Maestro Search
United States
Lead end-to-end incident response investigations across host, network, cloud and application environments, delivering containment guidance, forensic analysis and client-facing findings for complex, high-impact cases including ransomware and nation-state threats.
View JobForensic Data Analyst with Security Clearance
Akima Infrastructure Services
Arlington, VA
Supports federal law enforcement by conducting mobile device forensic examinations, physical data extractions, evidence handling, and trial testimony. Requires CCME certification, 3+ years mobile forensics experience, and ability to obtain Public Trust clearance.
View JobPrincipal DFIR Consultant
Tokio Marine HCC
United States
Lead complex digital forensics and incident response investigations for insured organisations, covering triage, containment, forensic analysis, and recovery. Mentor DFIR teams, manage client relationships, and drive strategy for BEC and ransomware incidents.
View JobPrincipal Consultant, DFIR
LevelBlue
United States
Lead cybersecurity incident response and digital forensic investigations across servers, endpoints, SaaS, and network systems. Conduct threat actor communications and ransomware negotiations, support clients from evidence collection through to reporting and recovery.
View JobAssociate Director, Incident Response and Forensics
CSL
King, AR
Lead a global DFIR team covering digital forensics, incident response, eDiscovery, and threat hunting. Drive strategy, tool adoption, forensic analysis, IOC development, and partner with legal and compliance teams on investigations.
View JobSr. Cyber Analyst, Digital Forensics Incident Response
At-Bay
United States
Senior DFIR analyst role supporting insured SMBs with forensic evidence collection and analysis, incident investigation, root cause identification, ransomware response, threat hunting, and delivery of detailed incident reports and recovery recommendations.
View JobDigital Forensics Analyst
Gunnison Consulting Group
Alexandria, VA
Performs network and media digital forensic investigations supporting cybersecurity incident response and threat hunting. Analyses malware, compromised systems and cloud environments, prepares detailed forensic reports, and develops SOPs and automation tools.
View JobSenior Director, Digital Forensics & Incident Response
AstraZeneca
Gaithersburg, MD
Senior leadership role owning AstraZeneca's global DFIR capability. Responsibilities span incident command, forensic defensibility, team building, 24x7 coverage, executive reporting, and regulatory compliance across cloud, on-premises and OT/ICS environments.
View JobDigital Forensic Technician
Infotrend
Lorton, VA
Join a digital forensics laboratory supporting evidence seizure, preservation, imaging, and documentation. Responsibilities include chain-of-custody management, forensic reporting, court testimony, tool validation, and accreditation support for government investigations.
View JobCTN – Digital Forensics/Law Enforcement Integration SME
BLUEFORCE INC
Carrollton, VA
Senior SME role supporting a DoD counter-narcotics programme, delivering digital forensics and law enforcement integration training to partner-nation personnel, developing curricula, assessing capability gaps, and mentoring investigators in evidence handling and cybercrime workflows.
View JobDigital Forensics Investigator
City of Vancouver
Vancouver, WA
Conduct forensic examination of digital devices and electronic media to support law enforcement criminal investigations, including violent crimes and ICAC cases. Prepare detailed reports, provide expert court testimony, and assist prosecutors with digital evidence presentation.
View JobMid-Level Digital Forensic Analyst
SkyePoint Decisions
Arlington, VA
Conduct forensic examinations of digital devices and cloud sources, analyse evidence for criminal and civil matters, produce detailed reports, provide expert witness testimony, and support search warrant executions for a federal government client.
View JobDFIR Consultant
Tokio Marine HCC
Remote
Join a specialist incident response firm supporting cyber insurance claims. Perform triage, forensic acquisition, and analysis of endpoint, cloud, and log evidence, delivering clear investigative reports for BEC and ransomware incidents.
View JobIncident Response Senior Consultant (Remote)
CrowdStrike
Remote
Lead incident response engagements and intrusion investigations for major organisations. Conduct host and network-based forensics across Windows, Mac and Linux, perform malware analysis, and deliver findings to senior stakeholders and legal counsel.
View JobCyber Crime Investigator
Sphinx LLC
Quantico, VA
Technical SME supporting federal counterintelligence investigations through full-lifecycle digital forensic examinations, evidence acquisition, forensic analysis and reporting, incident response, and malware analysis, requiring TS/SCI clearance and DCITA certification.
View JobSenior Cyber Crypto & Blockchain Forensic Investigator
HallieMorgan Technologies
Washington, DC
Support a federal law enforcement agency conducting advanced cryptocurrency tracing, blockchain forensic analysis, financial forensics, and OSINT across complex cyber-enabled fraud and financial crime investigations involving multi-chain obfuscation techniques.
View Job(2027 Bachelor’s/Master’s graduates) Cyber & Forensic Technology Consulting Analyst/Associate
Charles River Associates
Dallas, TX
Entry-level consulting role supporting digital forensic investigations, incident response, and eDiscovery. Responsibilities include forensic analysis of computers, networks and mobile devices, evidence handling, malware analysis, and drafting technical reports for legal and corporate clients.
View JobAssociate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Dallas, TX
Join a forensic services consulting practice conducting digital forensic investigations, incident response, malware analysis, and expert reporting for clients facing data breaches, fraud, and cybercrime matters. Involves hands-on forensic acquisition, artifact analysis, and IOC development.
View JobComputer Forensic Examiner, Computer Crimes
Virginia Office of the Attorney General
Richmond, VA
Conduct computer forensic examinations and criminal investigations covering child exploitation, fraud, identity theft, and computer crimes. Collaborate with federal, state, and local law enforcement across Virginia, with occasional statewide and interstate travel required.
View JobPrincipal Incident Response Security Consultant, Mandiant
Georgia
Senior IR consultant role managing incident response engagements, performing digital forensics, host-based analysis, network traffic analysis and malware triage across cloud and on-premise environments, with client reporting responsibilities.
View JobIncident Response Principal Consultant (Remote)
CrowdStrike
Remote
Lead incident response engagements for enterprise clients, conducting host and network forensics, malware analysis, and intrusion investigations across Windows, Mac, and Linux platforms. Produce reports and present findings to senior stakeholders and legal counsel.
View JobDigital Forensic Analyst I
Contact Government Services, LLC
Detroit, MI
Performs forensic data collection and analysis of mobile devices, cloud sources, and endpoints using tools such as Cellebrite, EnCase, and FTK Imager. Coordinates with legal teams, manages chain of custody, and supports on-site and remote collection efforts.
View JobSenior Incident Response Security Consultant, Mandiant, Google Cloud
New Mexico
Senior consultant role delivering end-to-end incident response engagements, including host and network forensics, malware triage, threat hunting, and cloud investigations, while leading client-facing projects and mentoring junior consultants.
View JobIT Incident Response and Forensics Specialist III
RoShay Services
Greensboro, NC
Lead complex security investigations and digital forensics across endpoints, networks, and cloud environments. Responsibilities include threat hunting, evidence preservation, root cause analysis, playbook development, and post-incident reporting to strengthen security posture.
View JobSenior Incident Response Security Consultant, Mandiant, Google Cloud
Arizona
Senior IR consultant at Mandiant delivering end-to-end incident response investigations, forensic analysis, threat hunting, and malware triage for clients. Leads engagements, mentors consultants, and communicates findings to technical and executive audiences.
View JobIncident Response Principal Consultant (Remote)
CrowdStrike
United States
Lead incident response engagements and forensic investigations across Windows, Mac, and Linux platforms. Hunt for threat actors, perform network and host forensics, malware analysis, and deliver findings to senior stakeholders including legal counsel.
View JobHost Based Cyber Systems Analyst III
ARGO Cyber Systems
Arlington, VA
Experienced analyst needed to lead host-based forensic investigations for DHS HIRT, conducting evidence acquisition, malware triage, memory analysis, and intrusion reporting across federal civilian networks and critical government systems.
View JobCriminalist I, Digital Forensics (8259) – San Francisco Police Department
City and County of San Francisco
San Francisco, CA
Performs scientific examination and analysis of digital evidence including computers, mobile devices, storage media and cloud environments in support of criminal investigations. Prepares technical reports and maintains chain-of-custody for investigative and judicial purposes.
View JobPrincipal/Digital Forensics, Incident Response & Cybersecurity (Forensic Services practice)
Charles River Associates
Houston, TX
Senior consulting role leading digital forensics, incident response and cyber investigations for corporate clients. Responsibilities include forensic analysis, expert testimony, team leadership, client engagement and cybersecurity framework assessments within a forensic services practice.
View JobPrincipal Incident Response Analyst
Blackbaud
Charleston, SC
Senior analyst role leading incident response, digital forensic investigations, and threat hunting within a large enterprise environment. Requires 8+ years' experience, forensic tooling proficiency, and expertise in SIEM, EDR, and security frameworks.
View JobDigital Forensic Examiner, Mid
Booz Allen Hamilton
Washington, DC
Mid-level DFIR examiner role conducting forensic image analysis, malware investigation, log analysis, and incident response. Identifies IOCs, determines unauthorized access or data exfiltration, and prepares detailed technical reports for client leadership and counsel.
View JobDigital Forensics Lead (CBP)
Agile Defense
Ashburn, VA
Lead digital forensics investigations supporting U.S. Customs and Border Protection, preserving evidence, maintaining chain of custody, reconstructing incidents, and delivering defensible findings for incident response, insider threat, and law enforcement use.
View JobAssociate Principal/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Chicago, IL
Senior forensic consulting role leading cyber intrusion investigations, digital forensics, and incident response engagements. Responsibilities include malware analysis, expert testimony, client management, business development, and team leadership within a forensic services practice.
View JobPrincipal Incident Response Security Consultant, Mandiant
New York
Senior Mandiant consultant managing complex incident response engagements, performing digital forensics, threat hunting, and malware analysis across cloud and on-premise environments, while communicating findings to executive and legal stakeholders.
View JobSenior Security Engineer, Digital Forensics
San Jose, CA
Join a global 24/7 detection and response team to investigate security and privacy incidents, conduct digital forensic analysis, develop forensic tooling, and contribute to large-scale incident response across a major technology organisation.
View JobSenior Consultant, Digital Forensic and Incident Response (DFIR) (Remote)
Surefire Cyber Inc.
United States
Senior DFIR consultant role conducting forensic analysis and leading incident response engagements across ransomware, BEC, and malware cases. Involves client communication, mentoring junior staff, report writing, and on-call support.
View JobCyber Defense Forensics Lead
Gritter Francona
Ashburn, VA
Lead a cyber defense forensics team supporting DHS/CBP, directing digital forensic investigations across Windows, Linux, Mac and cloud systems, managing insider threat operations, DLP monitoring, evidence handling and formal investigation reporting.
View JobCryptologist
The Amatriot Group
Linthicum Heights, MD
Supports DoD cyber investigations by decrypting and recovering data from seized mobile devices, computers, and storage media. Produces technical reports for federal court proceedings and collaborates with digital forensic examiners on law enforcement and counterintelligence operations.
View JobCryptologist (Digital Forensics & Data Recovery)
Apex Systems
Linthicum, MD
Supports DoD law enforcement and counterintelligence investigations by decrypting mobile devices and storage media, recovering deleted data, performing chip-level extractions, and producing technical reports suitable for federal court proceedings. Top Secret/SCI clearance required.
View JobSenior Forensic Technician/Analyst
Strategic Data Systems
Dahlgren, VA
Performs forensic analysis on computer systems, servers, and mobile devices at a naval warfare centre. Collects and preserves digital evidence, investigates cybersecurity incidents, recovers data, and produces forensic examination reports. May supervise junior analysts.
View JobLead Digital Investigations Engineer
MITRE
Orlando, FL
Lead digital investigations role supporting law enforcement sponsors, conducting forensic analysis of endpoints, mobile devices, cloud environments and networks, handling evidence, producing investigative reports, and assisting with incident response and containment efforts.
View JobDigital Forensics Analyst
Gunnison
Alexandria, VA
Conducts network and media digital forensic investigations supporting cybersecurity incident response and threat hunting. Analyses malware, compromised systems and digital evidence, prepares forensic reports, and develops SOPs and detection capabilities across enterprise infrastructure.
View JobSenior Forensic Developer – HYBRID!
AnaVation LLC
Chantilly, VA
Design and build specialised forensic software supporting federal cybercrime and digital evidence investigations. Responsibilities include file-system parsing, memory analysis, binary reverse engineering, mobile device parsing, and producing court-ready, validated investigative tooling.
View JobIT – Cyber Security Specialist IV
Apex Systems
Linthicum, MD
Seeking a cryptologist to decrypt data from mobile devices, computers and storage media, recover deleted data, perform chip-level extractions, and produce technical reports supporting federal law enforcement and counterintelligence investigations. TS/SCI clearance required.
View JobForensic Data Analyst with Security Clearance
Akima Infrastructure Services
Fairfax, VA
Supports federal law enforcement with mobile device forensics including physical extractions, board-level repair, chip-off, vehicle infotainment analysis, evidence handling, chain-of-custody documentation, and expert courtroom testimony. Requires CCME certification and 3+ years' experience.
View JobDigital Forensic Analyst I with Security Clearance
CGS Federal (Contact Government Services)
New York, NY
Seeking a Digital Forensic Analyst specialising in mobile device and cloud data preservation and collection. Responsibilities include on-site and remote forensic acquisitions, chain of custody management, legal team liaison, and supporting a growing forensics department.
View JobCFL Intrusions Lead
Nightwing
Lexington Park, MD
Lead technical and management operations of a Cyber Forensics Laboratory supporting intrusion investigations, digital/network forensic examinations, malware analysis, and reverse engineering for the Defense Cyber Crime Center.
View JobSecurity Analyst: Forensic Investigations
PNC
Pittsburgh, PA
Conduct forensic investigations for a major bank, covering employee relations, email, and legal holds. Perform forensic examination, data loss prevention, log analysis, and corrective action recommendations using lab examiner machines.
View JobPrincipal/Digital Forensics, Incident Response & Cybersecurity (Forensic Services practice)
Charles River Associates
Dallas, TX
Senior principal role leading digital forensics and incident response engagements, including cyber breach investigations, malware analysis, forensic evidence handling, expert testimony, and cybersecurity advisory. Requires 10+ years' experience and team leadership capability.
View JobSenior Incident Response Consultant, DFIR
Zurich North America
St. Louis City County, MO
Senior consultant delivering expert incident response and digital forensics services to external clients, leading complex investigations, conducting forensic examinations, providing executive briefings, and supporting ransomware, BEC, and APT incidents with 24/7 on-call availability.
View JobConsulting Director, DFIR, Reactive Services (Unit 42)
Palo Alto Networks
Burbank, CA
Senior DFIR consulting director leading breach response engagements and forensic investigations for Unit 42 clients. Combines hands-on technical leadership with strategic advisory, client management, and team oversight across complex, high-pressure incidents.
View JobSenior Security Consultant, Incident Response, Mandiant
Cambridge, MA
Senior IR consultant at Mandiant/Google Cloud leading complex investigations, performing forensic analysis, threat hunting, and malware triage. Requires 5+ years end-to-end incident response and forensics experience across cloud, network, disk, and memory.
View JobForensic Computer Analyst
United States Postal Service
Dulles, VA
Conducts forensic examinations of digital and multimedia evidence in a federal laboratory setting, supporting criminal and civil investigations. Responsibilities include evidence analysis, expert witness testimony, training, and cybersecurity breach investigations.
View JobDigital Forensics SME
ActioNet
Rockville, MD
Senior DFIR SME role supporting a government agency enterprise, performing forensic imaging, memory analysis, malware reverse engineering, mobile investigations, and producing evidentiary-quality documentation while leading SOC incident response. Requires TS/DOE Q clearance.
View JobCERT Lead
TECHNOLOGY & INNOVATION
Brooklyn, NY
Lead a six-person CERT team delivering citywide DFIR capabilities for NYC government, managing high-profile incident response, malware analysis, memory/disk/network forensics, and cloud investigations across enterprise environments.
View JobHost Based Systems Analyst III
Farfield Systems
Arlington, VA
Senior host forensics analyst supporting DHS's Hunt and Incident Response Team, conducting onsite/remote DFIR investigations, forensic imaging, malware analysis, report writing, and mentoring junior analysts across US federal engagements.
View JobSenior Cyber Lead
Quantum Sky
Linthicum Heights, MD
Lead digital forensics and incident response operations at a DoD cyber forensics laboratory, overseeing forensic examinations, intrusion analysis, malware analysis, evidence handling, and technical teams supporting classified cyber investigations.
View JobAssociate Director, Incident Response and Forensics
CSL Behring
King of Prussia, PA
Lead a global Digital Forensics and eDiscovery team, directing incident response, forensic analysis, threat hunting, and malware analysis. Partner with Security Operations and Legal to defend against cyber threats and manage eDiscovery matters.
View JobHost Based Systems Analyst III
ARSIEM
Arlington, VA
Seeks an experienced host forensics analyst to lead DFIR engagements for a government client, conducting forensic imaging, artifact analysis, malware evaluation, investigative reporting, and mentoring junior staff during onsite incident investigations.
View JobPrincipal Consultant, DFIR
LevelBlue LLC
United States
Seeking an experienced DFIR practitioner to lead cybersecurity incident investigations, conduct digital forensic analysis across diverse platforms, and manage threat actor communications and ransomware negotiations on behalf of clients.
View JobCyber Forensics Analyst
Everforth ECS
Portland, OR
Performs hands-on forensic analysis and malware investigation supporting SOC security incidents and threat hunting. Analyses endpoints, memory, Windows/Linux artifacts, creates IOCs and investigation reports, and supports incident response activities.
View JobDigital Forensic Examiner
Metadata Forensics, LLC
Richmond, VA
Examines digital evidence across criminal, corporate and civil cases using tools such as Axiom, Cellebrite and FTK. Responsibilities include evidence management, data recovery, expert witness testimony, client reporting and forensic R&D.
View JobDigital Forensics Lab Technician
TKC Holdings
Birmingham, AL
Perform forensic data extractions from contraband mobile devices recovered in correctional facilities, maintain chain-of-custody, prepare extraction summary reports, and upload digital evidence into case management systems at approximately 50 devices per week.
View JobDigital Forensic Specialist (NMDOJ #1116)
State of New Mexico
Albuquerque, NM
Digital Forensic Examiner supporting an ICAC Task Force, conducting forensic analysis of computers, mobile devices and cloud storage, preparing court-ready reports, providing expert witness testimony, and training law enforcement partners on digital evidence.
View JobAssociate Principal/Digital Forensics (Forensic Services practice)
Charles River Associates
Oakland, CA
Senior digital forensics role within a forensic consulting practice, leading investigations into trade secret theft, conducting MacOS/iOS/Android artifact analysis, mobile extractions, expert witness testimony, and mentoring forensic teams across client engagements.
View JobDigital Forensics Analyst
Pantex
Amarillo, TX
Conduct digital forensic investigations supporting ethics and employee concerns, performing evidence acquisition, forensic imaging, Windows registry analysis, malware analysis, data carving, and producing defensible reports in compliance with Federal Rules of Evidence.
View JobDigital Forensics Technician I (Hourly)
City of Chula Vista, CA
Chula Vista, CA
Entry-level, part-time role supporting law enforcement digital forensics. Responsibilities include examining computers, mobile devices and storage media, extracting and preserving digital evidence, preparing forensic reports, and supporting video enhancement and redaction.
View JobDigital Forensic Examiner (Remote 10-99)
Elite Digital Forensics
Remote
Subcontractor role performing digital forensic examinations on computers, mobile devices, cloud data and IoT devices. Responsibilities include evidence extraction, forensic reporting, and expert testimony for individuals, businesses, and law firms nationwide.
View JobPrincipal Incident Response Consultant, Google Public Sector
Austin, TX
Lead incident response and forensic consulting engagements for US public sector clients, managing breach containment, threat hunting, and remediation while mentoring staff and developing new business opportunities leveraging Google and Mandiant capabilities.
View JobPrincipal/Digital Forensics, Incident Response & Cybersecurity (Forensic Services practice)
Charles River Associates
Chicago, IL
Senior consulting role leading cyber intrusion investigations, digital forensics, and incident response engagements. Responsibilities include forensic analysis, client management, team leadership, business development, and cybersecurity framework assessments for a global forensic services practice.
View JobConsulting Associate/Recovery Services (Forensic Services practice)
Charles River Associates
New York, NY
Hands-on forensic analyst and incident responder supporting ransomware, BEC, and fraud investigations. Responsibilities include digital forensic collection, endpoint containment, enterprise identity remediation, and producing defensible written findings for clients and counsel.
View JobDigital Forensic Technician
Infotrend Inc
Washington DC-Baltimore
Join a digital forensics laboratory supporting evidence collection, preservation, imaging, and documentation. Responsibilities include chain of custody management, forensic reporting, court testimony, tool validation, and training on emerging forensic techniques.
View JobDigital Forensics Analyst
Pantex Plant
Amarillo, TX
Conducts digital forensic investigations for an ethics and employee concerns department, performing evidence acquisition, forensic imaging, malware and registry analysis, data carving, and producing defensible investigative reports in support of legal and audit teams.
View JobPrincipal/Digital Forensics, Incident Response & Cybersecurity (Forensic Services practice)
Charles River Associates
Washington, DC
Senior consulting role leading digital forensics and incident response investigations, managing cross-functional teams, supporting fraud and cybercrime matters, providing expert testimony, and advising clients on cybersecurity frameworks and controls.
View JobForensic Data Analyst
Akima
Fairfax, VA
Supports federal law enforcement with mobile device forensics including physical extractions, board-level repair, microsoldering, vehicle infotainment analysis, chain-of-custody documentation, and courtroom testimony. Requires CCME certification and 3+ years' experience.
View JobDigital Forensics Lab Technician
TKC Holdings, Inc.
Birmingham, AL
Performs forensic data extractions from contraband mobile devices in correctional facilities, maintains chain-of-custody, prepares extraction summary reports, and uploads digital evidence into case management systems at a rate of ~50 devices per week.
View JobIBM CISO – Cybersecurity Forensic Analyst
IBM
Austin, TX
Join IBM's CSIRT as a Forensic Analyst conducting endpoint, network, and cloud investigations, preserving digital evidence, reconstructing attack timelines, and producing defensible reports to support incident response across the Americas.
View JobInformation Technology Manager II
Arrow Electronics
Englewood, CO
Senior DFIR lead role managing complex cyber incident investigations, digital forensics, malware analysis, and threat hunting across enterprise and cloud environments, while mentoring teams and driving security detection engineering improvements.
View JobDFIR Consultant
Tokio Marine HCC - Cyber & Professional Lines Group
United States
Join a specialist DFIR team responding to BEC and ransomware incidents. Responsibilities include evidence acquisition, forensic analysis, malware triage, timeline development, client communication, and written reporting across endpoint, server, and cloud environments.
View JobDFIR Consultant
Colossus Technologies Group
United States
DFIR Consultant role involving forensic artifact collection, Windows and memory forensics, IOC analysis, log review, and incident remediation. Requires up to 50% client travel, on-call availability, and 2+ years of DFIR experience.
View JobAssistant Director -Cyber Crimes Unit
St. Joseph County Prosecutor's Office
South Bend-Mishawaka Region
Supervisory role within a county prosecutor's Cyber Crimes Unit, conducting digital forensics investigations, producing evidential reports, managing unit operations, and collaborating with law enforcement, attorneys, and students.
View JobDFIR Cybersecurity Consultant (Remote)
PNG Cyber, LLC
United States
Conduct forensic analysis and incident response investigations covering ransomware, business email compromise and litigation support. Collect and analyse data, produce technical reports, develop modern forensic techniques, and assist with EDR deployment and triage.
View JobPrincipal DFIR Consultant – Remote (Anywhere in the U.S.)
GuidePoint Security
Remote
Serves as the highest individual contributor in a DFIR practice, leading complex ransomware, APT and insider threat investigations, conducting advanced host, network and cloud forensics, mentoring staff, and supporting business development.
View JobDirector, DFIR (Remote)
Surefire Cyber
Remote
Lead a team of 3–5 forensic professionals managing complex client-facing incident response engagements across the full IR lifecycle. Responsibilities include scoping, stakeholder communication, mentorship, and refining DFIR processes and best practices.
View JobPrincipal DFIR Consultant
Tokio Marine HCC
Remote
Lead digital forensics and incident response investigations for insured organisations, managing BEC and ransomware cases. Oversee triage, containment, forensic analysis, and team development while serving as incident commander for cyber events.
View JobPrincipal Consultant, Digital Forensic and Incident Response (DFIR) (Remote)
Surefire Cyber
Remote
Principal-level DFIR consultant leading forensic investigations across ransomware, BEC, and malware incidents. Manages end-to-end IR engagements, mentors junior staff, produces forensic reports, and advises technical and non-technical stakeholders remotely.
View JobEngineer, Cybersecurity DFIR
Intercontinental Exchange Holdings, Inc.
Jacksonville, FL
Join a cybersecurity DFIR team defending critical financial infrastructure. Responsibilities include endpoint forensics, incident management, threat hunting, behavioral analysis, intrusion detection, and implementing preventative controls against emerging global cyber threats.
View JobPrincipal Consultant, DFIR, Reactive Services (Unit 42) – Remote Weekend Shift
Palo Alto Networks
Burbank, CA
Senior DFIR practitioner role within Unit 42 leading incident response and forensic investigations across enterprise environments. Covers host, network and cloud forensics, ransomware response, evidence acquisition, and client remediation guidance on a weekend overnight shift.
View JobSenior Associate, Digital Forensics and Incident Response (DFIR)
Prescient
Chicago, IL
Seeks an experienced DFIR professional to lead and support cybersecurity investigations including ransomware and data breaches, perform forensic analysis of endpoints and cloud environments, and document findings for litigation and regulatory purposes.
View JobCyber Network Defense Analyst (CNDA) – Cloud Forensics
Argo Cyber Systems
Arlington, VA
Seeking an experienced DFIR specialist to lead cloud forensic investigations across Azure, AWS, and GCP environments for a federal mission, conducting evidence acquisition, artifact analysis, threat hunting, and producing executive-level reports.
View JobMedia Malware Analyst, Senior
Leidos
Odenton, MD
Support US Cyber Command by leading forensic analysis of compromised systems and media, static and dynamic malware analysis including reverse engineering, TTP identification, signature development, and delivering actionable threat intelligence reports to leadership.
View JobCyber Network Defense Analyst III
Nightwing Intelligence Solutions, LLC
Sterling, VA
Support DHS's Hunt and Incident Response Team performing Tier 2/3 DFIR investigations, forensic triage, network traffic analysis, threat hunting, and incident reporting to protect critical national cyber infrastructure.
View JobCyber Network Defense Analyst II
Nightwing Intelligence Solutions, LLC
Sterling, VA
Support DHS's Hunt and Incident Response Team performing Tier 2/3 DFIR investigations, proactive threat hunting, forensic triage, network traffic analysis, and incident documentation for critical national cyber infrastructure.
View JobContract Bench, Incident Responder (DFIR)
MOXFIVE
United States
Contract bench role for experienced DFIR professionals, supporting live incident response investigations across Windows, cloud, and SaaS environments. Flexible, part-time-friendly engagement covering ransomware, nation-state threats, and account takeovers.
View JobSenior Consultant, DFIR (Wed-Sun)
MOXFIVE
United States
Join a specialist IR consulting team responding to ransomware and nation-state threats across enterprise and cloud environments. Conduct forensic investigations on Windows, Mac, Linux, AWS, GCP and Azure, supporting clients through active incidents.
View JobSenior Consultant, DFIR
MOXFIVE
United States
Join a specialist IR consulting team responding to ransomware and nation-state threats across enterprise and cloud environments. Lead forensic investigations on Windows, Mac, Linux, and cloud platforms including AWS, Azure, and GCP.
View JobSenior Incident Response Consultant
Pondurance
Remote
Lead forensic investigations and incident response engagements for clients facing active cyber threats. Responsibilities span host/network forensics, ransomware response, remediation guidance, client communication, and supporting IT teams through recovery and rebuild.
View JobLead Cyber Mission Threat Analyst – Clearance Required
Ironclad Technology Services
Port Hueneme, CA
Senior technical authority leading cyber threat hunting, digital forensics, and incident response for U.S. Navy cybersecurity operations. Conducts host/network forensic investigations, IOC analysis, root cause assessments, and develops remediation strategies for mission-critical systems.
View JobDFIR
Cyesec
United States
Join a DFIR team performing incident response and digital forensics investigations across cloud, Windows, and Linux environments. Responsibilities include threat hunting, TTP analysis, and supporting clients in detecting and mitigating cyber threats.
View JobSenior Cyber Lead
Tyto Athene, LLC
Linthicum Heights, MD
Lead DFIR operations at a DoD-accredited cyber forensics laboratory, overseeing host-based forensics, malware and intrusion analysis, evidence handling, and technical teams supporting law enforcement and counterintelligence investigations.
View JobPrincipal Engagement Lead (Remote)
Surefire Cyber
Remote
Lead multiple active client-facing cybersecurity incident response engagements, coordinating forensic consultants, scoping investigations, liaising with insurers and legal counsel, and guiding clients through the full IR lifecycle from detection to recovery.
View JobIncident Response and Forensics Lead
Accenture Federal Services
Germantown, MD
Lead and manage a DFIR team supporting US federal clients, overseeing incident response operations, forensic analysis of intrusion artifacts, technical mentorship of analysts, and senior stakeholder briefings. Requires TS clearance and 7+ years DFIR experience.
View JobLead Cyber Mission Threat Analyst – Clearance Required
Cydecor, Inc.
Port Hueneme, CA
Senior technical authority for cyber threat hunting, forensic investigations, and incident response supporting U.S. Navy cybersecurity operations. Leads enterprise monitoring, IOC analysis, malware analysis, and remediation strategy for critical DoD mission systems.
View JobDigital Forensics Lead
Agile Defense
Reston, VA
Lead digital forensics and insider-threat investigations within a 24/7 SOC environment, overseeing evidence handling, chain-of-custody, endpoint and network forensic analysis, malware triage, and mentoring junior analysts.
View JobDigital Forensic Examiner Trainee / Trainee-Forensic Scientist 1
State of Minnesota - Public Safety Dept
Minnesota
Trainee digital forensic examiner role within a state forensic science lab, examining digital evidence including computers, mobile devices and storage media for criminal cases, with court testimony training included.
View JobForensic Analyst (VIG-FA-01.080626)
Capital Solutions Group
Fort Meade, MD
Forensic Analyst role at Fort Meade requiring TS/SCI with polygraphs. Responsibilities include examining computers, networks, devices and digital evidence, exploiting captured media, investigating security incidents and deriving actionable intelligence.
View JobDigital Forensics Consultant (PST hours Seattle Area preferred)
Lighthouse Document Technologies Inc
Seattle, WA
Provides forensic analysis and ESI collection from computers, mobile devices, cloud repositories and networks. Prepares detailed forensic reports and declarations, conducts custodian interviews, and offers court testimony in support of investigations and litigation.
View JobICITAP Forensic Digital Evidence Advisor
Amentum
Remote
Subject matter expert advising and mentoring host-nation forensic examiners on digital evidence collection, examination, analysis tools, chain of custody, and report writing under a DOJ ICITAP programme supporting international rule-of-law initiatives.
View JobSenior Forensic Analyst
Revolutional, LLC
Washington, DC
Conduct forensic evaluations of federal enterprise systems suspected of compromise, performing host and network analysis, maintaining chain of custody, producing legally defensible reports, and interfacing with the intelligence community. Requires active Top Secret clearance.
View JobForensic Science, Digital Forensics – Full-Time, Non-Tenure Track Assistant Professor
University of Central Oklahoma
Edmond, OK
Teach undergraduate and graduate digital forensics courses including mobile, network and lab-based modules; mentor student research; develop curriculum; support expert witness and legal standards training within an accredited forensic science programme.
View JobAOUSC – Forensic and Malware Lead
cFocus Software Incorporated
Washington, DC
Lead digital forensics and malware analysis for a federal judiciary SOC, conducting disk, memory and registry analysis, static/dynamic malware analysis, evidence handling, and forensic reporting across Windows, Linux, macOS and cloud environments.
View JobAssociate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Washington, DC
Consulting forensics associate supporting clients through cybersecurity investigations, data breach response, digital evidence acquisition and analysis, malware hunting, incident response, and expert report drafting for legal proceedings.
View JobCriminal Crypto Technical Support Specialist- Expert – 4 Tyler Texas
HallieMorgan Technologies
Tyler, TX
Expert-level crypto forensic investigator supporting federal law enforcement in Tyler, TX. Responsibilities include blockchain tracing, digital evidence analysis, financial forensics, OSINT, and producing findings for criminal prosecutions and judicial forfeiture actions.
View JobComputer Forensics Investigator
XTREME SOLUTIONS INC
Atlanta, GA
Seeking a certified Computer Forensics Investigator to collect, preserve and analyse digital evidence from computers, mobile devices and networks, produce detailed forensic reports, and support legal proceedings and cybersecurity teams.
View JobDigital Forensic Examiner II
City of New York
New York, NY
Bronx District Attorney's Digital Forensics Laboratory seeks an examiner to analyse mobile devices, computers and storage media, perform data recovery, write forensic reports, testify in court proceedings and guide junior staff.
View JobDigital Forensic Analyst I
Contact Government Services, LLC
Washington, DC
Mid-level forensic analyst role focused on preservation and collection of mobile device and cloud-stored data. Involves on-site and remote acquisitions, chain of custody management, and use of industry-standard forensic tools for government clients.
View JobDigital Forensic Examiners 23-E-25
Office of the Illinois Attorney General
Chicago, IL
Conduct forensic examinations of digital evidence for criminal investigations in a lab and on-scene environment, providing technical support to investigators and attorneys within the Illinois Attorney General's Office.
View JobDigital Forensic Examiner (DFE) 24-E-10
Office of the Illinois Attorney General
Springfield, IL
Conduct forensic examinations of digital evidence for criminal investigations in laboratory and on-scene environments, provide technical support to investigators and attorneys, and qualify as an expert witness in Illinois courts.
View JobSenior Digital Forensics Examiner
Flashback Data
Washington, DC
Senior examiner role at an ISO 17025-accredited digital forensics lab, conducting device examinations across civil and criminal cases, producing peer-reviewed lab reports, and providing expert testimony in depositions and court proceedings.
View JobDigital Forensic Examiner
City of Goodyear, AZ
Goodyear, AZ
Performs advanced forensic examinations of computers, mobile devices, cloud and network environments for criminal investigations. Collects and preserves digital evidence, conducts cybersecurity analysis, prepares expert reports and provides court testimony.
View JobMinimum qualifications
CyberJobs.Com
San Francisco, CA
Security Engineer role on a global Detection and Response team, performing DFIR investigations, participating in large-scale security incidents, developing forensic tooling, and applying digital forensics expertise across a complex enterprise environment.
View JobDigital Forensic Examiner
The Goodyear Tire & Rubber Company
Goodyear, AZ
Perform forensic examination of mobile devices, computers, and digital media to support criminal investigations. Responsibilities include evidence collection, data acquisition, cloud and network forensics, malware analysis, report writing, and expert court testimony.
View JobDigital Forensics Lead (26-091) with Security Clearance
Strategic Analysis Incorporated
Washington, DC
Lead and conduct digital forensics investigations into agency systems and devices, develop and mature the forensics programme, and deliver analysis reports to senior leadership within a federal health research agency.
View JobDigital Forensics Analyst (Cyber Analyst III) TS/SCI with Security Clearance
Akima Infrastructure Services
Fort Liberty, NC
Support U.S. Special Operations Command conducting forensically sound acquisition, examination, and reporting of mobile, computer, and server evidence. Analyse artifacts, maintain chain of custody, produce intelligence-linked forensic reports, and train junior examiners in operational environments.
View JobDigital Forensic Examiner
City of Goodyear Economic Development
Goodyear, AZ
Law enforcement digital forensics role examining mobile devices, computers, cloud and network environments to support criminal investigations. Duties include evidence collection, forensic acquisition, malware analysis, report writing and expert court testimony.
View JobMid-Level Digital Forensic Analyst
Peraton
Arlington, VA
Conduct forensic examinations of digital devices and media, analyse evidence for criminal and cyber investigations, produce court-defensible reports, provide expert witness testimony, and support search warrant executions for a federal government programme.
View JobIncident Response Expert
Sygnia
United States
Lead complex forensic investigations and incident response engagements involving ransomware, nation-state attacks, and advanced threats. Conduct host, network, and memory forensics, threat hunting, IOC identification, and deliver technical reports to clients.
View JobDigital Forensics Consultant (PST hours Seattle Area preferred)
Lighthouse
Seattle, WA
Perform forensic collection and analysis of ESI from computers, mobile devices, cloud repositories and networks; prepare detailed reports and declarations; provide court testimony; support litigation and investigation projects for clients.
View JobDigital Forensics Consultant (Onsite in San Francisco Lab)
Lighthouse
San Francisco, CA
Performs forensic analysis and ESI collections from computers, mobile devices, cloud repositories and networks in support of investigations and litigation. Prepares detailed reports, provides court testimony, and liaises with clients on forensic project scoping.
View JobDigital Forensics Analyst (Cyber Analyst III) TS/SCI
Akima
Fort Liberty, NC
Conducts forensic acquisition, examination, and analysis of digital devices and media in support of USSOCOM special operations missions. Produces intelligence-linked forensic reports, maintains chain of custody, and trains junior examiners. TS/SCI clearance required.
View JobDigital Forensic Examiner 1
Commonwealth of Pennsylvania
Crawford County, PA
Entry-level forensic examiner role with Pennsylvania State Police, analysing electronic devices, recovering digital evidence, supporting criminal investigations, assisting at crime scenes, and preparing evidence for court proceedings.
View JobDigital Forensics Analyst
Infotree Global Solutions
Santa Clara, CA
Conducts enterprise digital forensics investigations covering insider threat, data exfiltration, and misconduct cases. Requires expertise in endpoint, cloud, and M365 forensics, EDR platforms, forensic tooling, and AI-augmented investigative workflows.
View JobForensic Analyst (VIG-FA-01.080626)
Capital Solutions Group (CSG)
Fort Meade, MD
Examines computers, networks, devices, logs and digital media to support cybersecurity, intelligence and investigative analysis. Exploits captured media, investigates security incidents and derives actionable intelligence to mitigate network vulnerabilities. TS/SCI with polygraphs required.
View JobSenior Associate/Digital Forensics (Forensic Services practice)
Charles River Associates
Houston, TX
Senior forensic professional conducting digital evidence collection and analysis across MacOS, iOS, Windows and Linux platforms, including mobile extractions, trade secret investigations, cloud storage analysis and team leadership within a consulting practice.
View JobDigital Forensics Senior Consultant
Crowe
The Woodlands, TX
Lead complex digital forensic investigations across computers, mobile devices, cloud platforms, and email systems. Manage evidence intake, chain of custody, forensic analysis, client reporting, and mentor junior consultants within a consulting practice.
View JobEngineer, Cybersecurity DFIR
ICE
Jacksonville, FL
Join a financial sector DFIR team defending critical infrastructure. Responsibilities include endpoint forensics, incident investigation, threat hunting, anomaly detection, intrusion detection, and behavioural analysis, requiring 3+ years of relevant experience.
View JobSenior Computer Forensics Analyst
Capsicum Group, LLC
Miami-Fort Lauderdale
Senior forensics analyst conducting full forensic examinations of computers, servers and mobile devices, managing a forensics lab, mentoring staff, producing expert reports and providing court testimony across legal and corporate investigations.
View JobSenior Investigator Digital Forensics, Incident Response (DFIR)
Accenture
Chicago, IL
Senior DFIR investigator conducting complex forensic analysis, threat hunting, memory forensics, and malware triage across enterprise, cloud, and OT environments. Mentors junior staff, leads large investigation workstreams, and delivers client-facing reports and briefings.
View JobCSIRT Analyst
CTG
Buffalo, NY
CSIRT Analyst role within a managed detection and response team, handling escalated incidents, conducting DFIR investigations, compromise assessments, threat hunting, threat intelligence collection, and contributing to detection engineering and playbook development.
View JobForensics Lead
MANTECH
Chandler, AZ
Lead digital forensics operations for a DHS cybersecurity programme, conducting remote imaging, media analysis, malware reverse engineering, and forensically sound data preservation to counter Advanced Persistent Threats across complex network environments.
View JobThreat Hunt Analyst – High – Digital Forensics
Koniag Government Services
Washington, DC
Senior analyst role supporting a US federal agency, designing and leading threat hunting programmes while conducting advanced digital forensics investigations, malware analysis, and incident response across on-premises, cloud, and hybrid environments.
View JobComputer Specialist * Network and Digital Forensics Examiner (Sa with Security Clearance
Longeviti, LLC
San Diego, CA
Support NCIS as a Digital Forensic Examiner conducting complex forensic examinations of seized digital media, network intrusion analysis, evidence collection, and expert witness testimony. Requires active TS/SCI clearance and DoD/FBI CART certification.
View JobDigital Forensics and Incident Response Advisory – Manager
CohnReznick
Tysons Corner, VA
Lead complex cybersecurity incident response and digital forensics investigations involving APTs, ransomware and data breaches. Perform endpoint, mobile and memory forensics, mentor junior analysts, advise clients and attorneys, and help build the IR practice.
View JobGlobal Director of Autonomous Incident Response and Forensic Analysis
MUFG
Jersey City, NJ
Lead a 24/7 global incident response and digital forensics function for a major financial group, overseeing strategy, AI-assisted workflows, evidence handling, executive reporting, and cross-regional teams and budgets.
View JobDigital Forensics SME
ActioNet, Inc.
Rockville, MD
Senior DFIR role requiring 8+ years' experience performing advanced forensic analysis on endpoints, networks and digital media, malware analysis, evidence handling, IOC production and forensic reporting within a federal agency environment. TS/DOE Q clearance required.
View JobInformation Security Forensic Analyst
Ryder System, Inc.
Coral Gables, FL
Supports 24/7 SOC incident response through host and network forensic analysis, personnel investigations, and security incident remediation. Produces executive and technical reports, manages evidence handling, and collaborates with legal and security teams across a distributed enterprise.
View JobDigital Forensics Analyst
Cyber Management International Corporation
Arlington, VA
Experienced Digital Forensics Analyst needed to conduct forensic examinations of mobile devices, computers, and cloud data for a Diplomatic Security Cyber Mission Program, producing reports and providing expert witness testimony in legal proceedings.
View JobDigital Forensics SME
AnaVation LLC
Washington, DC
Senior digital forensics SME supporting federal law enforcement investigations. Responsibilities include mobile, disk and memory forensics, capability development, forensic reporting for legal proceedings, and mentoring investigators and analysts on evidentiary best practices.
View JobDigital Forensics Consultant (PST hours)
Lighthouse
United States
Performs forensic collection and analysis of ESI from computers, mobile devices, cloud repositories and networks. Prepares detailed reports, declarations and court testimony in support of investigations and litigation. Requires 4+ years DF experience.
View JobDigital Forensic Analyst I with Security Clearance
CGS Federal (Contact Government Services)
Atlanta, GA
Performs forensic data collection and analysis across mobile devices, cloud, and endpoints in support of government clients. Coordinates with legal teams, manages chain of custody, and travels for on-site collections using industry-standard forensic tools.
View JobConsulting Associate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Houston, TX
Join a forensic services consulting practice to conduct cybersecurity investigations, digital forensic analysis, incident response, and malware analysis. Support counsel with expert reports, affidavits, and testimony across data breach and fraud matters.
View JobDigital Forensics Consultant (PST hours)
Lighthouse Document Technologies Inc
Remote
Provides forensic analysis and ESI collection from computers, mobile devices, cloud repositories and networks. Prepares detailed forensic reports and declarations, assists with client scoping, and occasionally provides court testimony in legal proceedings.
View JobDigital Forensics Analyst
City of Hickory, NC
Hickory, NC
Supports criminal investigations through digital evidence acquisition, preservation, analysis and reporting. Examines computers, mobile devices and storage media using industry-standard forensic tools, prepares technical reports, and assists with court testimony preparation.
View JobSenior Security Engineer, Digital Forensics
New York, NY
Senior DFIR engineer joining a global on-call security response team, investigating security and privacy incidents, developing forensic tooling, and applying broad digital forensics and incident response expertise across a large-scale enterprise environment.
View JobDigital Forensics Analyst
DELAWARE RESOURCE GROUP OF OKLAHOMA LLC
Fayetteville, NC
Supports DoD operations conducting digital forensic investigations, malware analysis, incident response, and vulnerability assessments in classified environments. Requires TS/SCI clearance, reverse engineering skills, and 6+ years of DFIR experience.
View JobForensic Computer Analyst
U.S. Postal Service
Anaheim, CA
Conducts forensic examinations of digital and multimedia evidence for criminal and civil investigations, prepares comprehensive reports, provides expert witness testimony, advises on evidence handling, and delivers training in forensic laboratory services and field examination.
View JobDigital Forensic Examiner 1
Commonwealth of PA
Meadville, PA
Entry-level forensic examiner role with a state police agency, analysing electronic devices, recovering digital evidence, assisting at crime scenes, and preparing evidence for criminal court cases under expert supervision.
View JobDigital Forensics / Malware Analyst
Digital Global Connectors
McLean, VA
Experienced forensics and malware analyst sought to support a federal information security program. Responsibilities include forensic acquisition, evidence preservation, malware reverse engineering, IOC development, and incident response support using tools such as EnCase, Ghidra, and Volatility.
View JobSenior Digital Forensics Automation SME
Peraton
Linthicum, MD
Senior SME role optimising and automating digital forensics workflows for a federal government customer. Responsibilities include designing automated evidence pipelines, standardising ICAC investigative processes, ensuring lab accreditation compliance, and supporting criminal trial proceedings.
View JobDigital Forensics Consultant (Onsite in San Francisco Lab)
Lighthouse Document Technologies Inc
San Francisco, CA
Performs forensic analysis and ESI collections from computers, mobile devices, cloud repositories and networks in support of investigations and litigation. Prepares detailed reports, provides court testimony, and liaises with clients on scoping and project planning.
View JobDigital Forensics Analyst (Cyber Analyst III) TS/SCI
Akima, LLC
Fort Bragg, NC
Conduct forensically sound acquisition, examination, and reporting of digital evidence supporting US Special Operations Command missions. Responsibilities include mobile/computer forensics, malware triage, chain-of-custody management, and producing intelligence-linked forensic reports. TS/SCI clearance required.
View JobAssociate Principal/Digital Forensics (Forensic Services practice)
Charles River Associates
Washington, DC
Leads digital forensic investigations primarily involving trade secret theft, performing device collections, artifact analysis across macOS/iOS/Android/Windows/Linux, expert witness testimony, and team/business development within a forensic consulting practice.
View JobTier II-III Incident Response Analyst-Senior
Boston Government Services, LLC (BGS)
Knoxville
Senior analyst leading advanced incident response investigations, forensic analysis, malware analysis, threat hunting, and APT hunting for government clients. Involves evidence handling, chain-of-custody, IOC development, and SOC engineering support across complex secure environments.
View JobSenior Forensic Analyst
Revolutional
Kansas City
Conduct end-to-end forensic evaluations of federal enterprise systems suspected of compromise, including host and network analysis, chain of custody management, legally defensible reporting, and intelligence community liaison. Active Top Secret clearance required.
View JobDigital Forensic Analyst I with Security Clearance
CGS Federal (Contact Government Services)
Washington, DC
Performs forensic data collection and analysis across mobile, cloud, and desktop environments for government clients. Coordinates with legal teams, maintains chain of custody, uses industry-standard tools, and supports complex eDiscovery projects on-site and remotely.
View JobDigital Forensics and Incident Analyst (TS)
Agile Defense
Washington, DC
Supports Threat Analysis & Investigations via digital evidence analysis, malware examination, memory forensics, and file system analysis. Provides Tier 2/3 SOC incident response, maintains chain of custody, and delivers written forensic reports to authorised stakeholders.
View JobForensic Computer Analyst
United States Postal Service
Anaheim, CA
Conducts forensic examinations of digital and multimedia evidence for criminal and civil investigations, produces expert reports and court testimony, advises on evidence handling, delivers training, and supports cybersecurity breach investigations.
View JobDigital Analyst
Prince George's County, Maryland
Landover, MD
Perform digital evidence collection, preservation, analysis and documentation for criminal investigations within a police department's Computer Forensics Unit. Respond to crime scenes, execute search warrants, prepare reports and provide expert court testimony.
View JobSenior Forensic Developer
AnaVation LLC
Washington, DC
Design and develop advanced forensic software for federal cybercrime and digital evidence investigations, including file system parsing, memory analysis, mobile device forensics, and automated investigative workflows meeting strict evidentiary standards.
View JobDigital Forensics Analyst
Steampunk, Inc.
McLean, VA
Support federal law enforcement digital forensics lab by seizing and imaging devices, conducting forensic examinations using Cellebrite and Magnet Forensics, documenting findings, and testifying as an expert witness in legal proceedings.
View JobDigital Forensics and Incident Response, Senior Manager
Booz Allen Hamilton
Washington, DC
Senior manager role leading multiple DFIR teams, overseeing complex forensic investigations and high-severity incident response engagements, managing client relationships with insurers and legal counsel, and driving practice growth and team development.
View JobLead Cyber Defense Forensics Analyst
Revolutional, LLC
Washington, DC
Senior forensic practitioner leading complex digital forensic investigations within a classified federal facility. Responsibilities include host and network forensics, evidence acquisition, malware triage, chain of custody, incident response support, and threat hunt contribution.
View JobDigital Forensics SME
AnaVation
Washington, DC
Senior digital forensics expert supporting federal law enforcement investigations, conducting mobile, disk and memory forensics, developing advanced forensic capabilities, mentoring investigators, and preparing court-admissible reports for cybercrime and national security missions.
View JobDigital Analyst
Prince George's County, MD Government
Landover, MD
Performs digital evidence collection, preservation, analysis and documentation for criminal investigations within a police Computer Forensics Unit. Responds to crime scenes, supports warrant execution, prepares forensic reports and provides expert court testimony.
View JobDigital Forensics Analyst
SOLUTION ONE INDUSTRIES
Fayetteville, NC
Seeking an experienced examiner to conduct forensic triage, acquisition, and exploitation of digital media including mobile devices, computers, and removable media, supporting USSOCOM intelligence requirements with deployed and OCONUS potential.
View JobPolice Digital Forensic Analyst
The City of Orem
Orem, UT
Performs digital forensic examination and analysis of electronic evidence to support criminal investigations, assists with suspect identification, prepares evidentiary materials for judicial proceedings, and delivers expert courtroom testimony.
View JobDigital Forensics Senior Examiner
City of Chandler
Chandler, AZ
Conducts forensic examinations of digital evidence for a municipal police department, supporting criminal investigations through evidence collection, analysis, reporting, and expert court testimony, including cases involving child exploitation material.
View JobDigital Forensics & eDiscovery Manager
KLA
Milpitas, CA
Lead a global digital forensics and eDiscovery team within a legal compliance function, overseeing forensic investigations, ESI preservation, legal holds, evidence collection and analysis, insider risk support, and information governance across a multinational organisation.
View JobDigital Forensics Analyst
Steampunk
McLean, VA
Supports federal law enforcement digital forensics in a lab environment, performing device acquisitions, evidence examination using tools such as Cellebrite and Magnet Forensics, detailed report writing, and expert witness testimony in legal proceedings.
View JobDigital Forensic Examiner
City of Fort Myers, FL
Fort Myers, FL
Conducts forensic examinations of computers, mobile devices, and storage media for criminal investigations. Recovers and analyses digital evidence, prepares detailed reports, and provides expert court testimony in support of law enforcement.
View JobSenior Consultant, Digital Forensic and Incident Response (DFIR) (Remote)
Surefire Cyber
Remote
Senior DFIR consultant role conducting forensic investigations and incident response engagements across ransomware, BEC and malware cases. Leads small-to-medium investigations, mentors junior staff, and delivers client-facing analysis and written reports.
View JobDigital Forensics & Incident Response Analyst
Delaware Resource Group
Fayetteville, North Carolina
Supports DoD mission-critical cyber operations, conducting digital forensic investigations, malware analysis, incident response, and vulnerability assessments in classified environments. Requires TS/SCI clearance and 6+ years of DFIR experience.
View JobHost Forensic Analyst/Host Based Systems Analyst
Node.Digital LLC
Arlington, VA
Supports federal forensic investigations by leading evidence collection, conducting host-based digital forensic analysis, writing technical reports, mentoring junior staff, and liaising with stakeholders on forensic methodologies. Requires TS/SCI clearance and 5+ years' experience.
View JobDigital Forensics Consultant
TruLegal (formerly TRU Staffing)
United States
Supports high-profile litigation through forensic imaging of computers, mobile devices, servers, and cloud accounts. Performs artifact analysis, deleted data recovery, chain of custody documentation, and assists in preparing expert reports and client deliverables.
View JobComputer Forensic Examiner
South 6
United States
Freelance/contract forensic examiners sought for short-term project work supporting ransomware investigations. Responsibilities include leading forensic examinations, identifying points of compromise, data exfiltration, IOCs, and writing forensic reports across Windows, Linux, and VMware environments.
View JobCyber Analyst, Digital Forensics Incident Response
At-Bay
United States
Join a growing DFIR team delivering forensic investigation and incident response services to insured businesses. Responsibilities include digital evidence collection and analysis, timeline development, root cause identification, threat actor negotiations, and incident reporting.
View JobDigital Forensic Examiner
CACI International Inc
Fort Liberty, NC
Support Special Operations as a Digital Forensic Examiner conducting triage, acquisition and exploitation of digital media including computers, mobile devices and UAVs, generating intelligence reports in a TS/SCI-cleared DoD environment.
View JobAOUSC – Digital Forensics Analyst
cFocus Software Incorporated
Washington, DC
Support the Administrative Office of the US Courts as a Digital Forensics Analyst, performing disk, memory and registry analysis using tools such as Axiom, EnCase, FTK and Volatility, adhering to federal evidence and chain of custody requirements.
View JobDigital Forensics Analyst
City of Hickory
Hickory, NC
Join a police department forensics unit supporting criminal investigations through digital evidence acquisition, preservation, analysis, and reporting. Covers mobile, computer, video, and call data record forensics with court testimony support.
View JobDigital Forensic Technician
St. Louis County, MN
Duluth, MN
Responsible for identifying, extracting and recovering digital evidence from electronic devices in support of criminal investigations. Maintains chain of custody, disseminates data to law enforcement staff and may testify in court regarding evidence integrity.
View JobForensic Computer Analyst SR
U.S. Postal Service
Richmond, CA
Senior forensic computer analyst conducting digital and multimedia evidence examinations, producing expert reports and court testimony, leading crime scene collections, conducting research, and advising on forensic techniques for federal criminal investigations.
View JobDigital Forensic Analyst
Peraton
Washington DC-Baltimore
Mid-level and senior analysts conduct forensic examinations of mobile devices, computers, cloud sources and removable media for a federal digital forensic laboratory, producing expert reports and providing testimony in federal, state and local proceedings.
View JobComputer Forensic Examiner
Infotrend Inc
Washington DC-Baltimore
Seeking an experienced Computer Forensics Specialist to perform forensic collection, imaging, analysis and reporting on computers and mobile devices, supporting investigative and legal matters, including potential expert testimony.
View JobDigital Forensics Investigator – Vice President
Morgan Stanley
Alpharetta, GA
Lead end-to-end digital forensic investigations and eDiscovery activities supporting insider risk, incident response, litigation, and compliance matters within a global financial services firm's Cyber, Data, Risk & Resilience function.
View JobCyber Crime Analyst 1/2
State of Louisiana
Baton Rouge, LA
Entry-level role at a state police crime lab conducting digital forensic examinations of computers, networks and electronic media, supporting cybercrime investigations, incident response, and providing technical guidance to investigators and prosecutors.
View JobCyber Crime Investigator
Pop-Up Talent
Fredericksburg, VA
Technical SME role supporting counterintelligence and counterterrorism investigations, conducting digital forensic examinations, network intrusion analysis, malware analysis, and evidence acquisition in accordance with legal and evidentiary standards. TS/SCI clearance required.
View JobDigital Forensics Investigator/Sheriff
Florence County SC
Effingham, SC
Conduct forensic examination of computers, mobile devices and digital media for criminal investigations. Acquire and preserve evidence, prepare expert reports, testify in court, support detectives, and manage a digital forensics lab for a county sheriff's office.
View JobSenior Forensic Examiner
Garrett Discovery Inc
Orlando, FL
Conducts advanced digital forensic examinations on mobile devices, computers, cloud accounts and multimedia files for civil and criminal cases. Prepares technical reports, maintains chain of custody, and delivers expert witness testimony in court.
View JobDigital Forensic Analyst
City of Auburn, AL
Auburn, AL
Processes and examines digital evidence for a police department, compiles forensic reports, liaises with prosecutors, and provides court testimony. Requires forensic certifications such as CFCE or GCFE and experience with tools like Cellebrite and Magnet Axiom.
View JobSenior Digital Forensics Incident Response Analyst (DoD TS/SCI Clearance)
MartinFed
Redstone Arsenal, AL
Senior DFIR analyst role supporting U.S. government at Redstone Arsenal. Responsibilities include forensic imaging, memory and malware analysis, host/network investigations, incident triage, SOC support, and lab management. Requires TS/SCI clearance and 7–9 years' experience.
View JobDigital Forensics and Incident Response Analyst Mid-Level
Cayuse Holdings
Huntsville, AL
Mid-level DFIR analyst role supporting federal cybersecurity operations, conducting forensic investigations, incident response, threat hunting, malware analysis, and network traffic analysis within large enterprise environments requiring TS/SCI clearance.
View JobDigital Forensic Examiner
TransPerfect
Philadelphia, PA
Performs forensic preservation and analysis of digital media, mobile devices, cloud systems and email. Manages cases independently, conducts forensic collections, identifies relevant artifacts and coordinates data handoffs to internal teams.
View JobSenior Digital Forensics Engineer
Northern Technologies Group, Inc.
Alexandria, VA
SME-level forensic examiner and malware analyst supporting a DoD Pentagon Security Operations Centre, conducting device examinations, malware analysis, IOC identification, and producing detailed forensic reports to inform enterprise defensive measures.
View JobDigital Forensic Specialist
County of Davidson
Lexington, NC
Civilian law enforcement role responsible for processing digital evidence, maintaining forensic lab equipment, assisting crime scene investigators, preparing reports, and providing expert court testimony across a wide range of criminal investigations.
View JobSenior Director of Digital Forensics & Incident Response
Otis
Farmington, CT
Strategic senior leader overseeing a global 24x7 SOC, enterprise incident response, digital forensic investigations, insider risk, DLP, and eDiscovery programmes, advising executives during major cyber incidents.
View JobDigital Forensic Examiner
CACI
Fort Bragg, NC
Support Special Operations as a Digital Forensic Examiner at Fort Bragg, conducting triage and technical exploitation of computers, mobile devices and multimedia. Generate intelligence reports and manage forensic operations using industry-standard tools. TS/SCI clearance required.
View JobSenior Digital Forensics Analyst
SkyePoint Decisions
Arlington, VA
Senior forensic analyst supporting a federal cybersecurity mission, performing in-depth examination of mobile devices, storage media, cloud and computer systems, providing expert witness testimony and on-scene search warrant support for criminal and civil proceedings.
View JobE-Discovery & Digital Forensics Lead (Legal Operations)
USAA
San Antonio, TX
Leads eDiscovery and digital forensics support for legal, HR and corporate investigations teams. Conducts full forensic examinations, manages evidence collections, administers review platforms, advises counsel, and develops compliant procedures for digital evidence handling.
View JobSenior Director, Digital Forensics and Incident Response
BlueVoyant
Remote
Senior leadership role managing complex DFIR engagements end-to-end, acting as incident commander for ransomware, BEC and cloud compromise investigations while advising executives, legal counsel and technical teams across multiple concurrent incidents.
View JobSenior Digital Media Forensic Analyst (Contingent)
Sphinx LLC
Fort Meade, MD
Senior forensic analyst supporting U.S. Army Counterintelligence and Counterterrorism investigations, performing end-to-end digital media examination including mobile, memory and host forensics, timeline reconstruction, malware analysis, and pre-trial-quality reporting with strict chain-of-custody.
View JobDigital Forensics and Incident Response (DFIR) Consultant
Cypfer
Houston, TX
DFIR consultant role focused on ransomware and cyber-attack response, performing forensic acquisitions, artifact analysis, log review, timeline correlation, and threat remediation for insurance carriers, law firms, and enterprise clients.
View JobDigital Media Forensics Analyst Expert
General Dynamics Information Technology
Fort Meade, MD
Senior digital forensics expert providing forensic examination and cyber analytical support to US Army counterintelligence and counterterrorism investigations, including evidence acquisition, artifact analysis, mobile forensics, reporting, and emerging technology evaluation.
View JobLateral Digital Forensics Unit (DFU) Detective
City of Peoria
Peoria, AZ
A law enforcement Digital Forensics Unit Detective role requiring 3+ years' experience recovering, analysing and preserving electronic evidence. Includes case management, investigative techniques and occasional patrol support duties.
View JobSenior Digital Forensic Analyst
Peraton
Arlington, VA
Conduct forensic examinations of digital devices, mobile platforms, and cloud sources in support of federal investigations. Produce expert reports, provide witness testimony, support search warrant executions, and mentor junior analysts using industry-standard forensic tools.
View JobDigital Forensic Specialist (Forensic Scientist 4) | Medicaid Fraud & Abuse | Olympia
State of Washington Attorney General's Office
Olympia, WA
Specialist role within the Attorney General's Medicaid Fraud & Abuse Division, providing digital forensic expertise on criminal and civil investigations involving provider fraud, abuse and neglect, and digital evidence analysis.
View JobIncident Response and Forensic Analyst
The Aerospace Corporation
Colorado Springs, CO
Experienced DFIR analyst sought to lead incident response and conduct digital forensic examinations on compromised systems. Responsibilities include evidence preservation, malware analysis, forensic reporting, playbook development, and mentoring junior analysts in a classified aerospace environment.
View JobDigital Forensics and Incident Response Analyst
Tyto Athene, LLC
Washington, DC
Tier 3 DFIR Analyst role requiring TS/SCI clearance, leading complex incident investigations, performing digital forensics and malware analysis, mentoring junior analysts, and collaborating with threat hunting and intelligence teams in a hybrid SOC environment.
View JobDigital Forensics Examiner
Peraton
Lorton, VA
Examines hard drives, mobile devices and storage media for digital evidence in support of DoD cyber investigations. Responsibilities include forensic analysis, data recovery, evidence handling, courtroom-ready reporting and potential expert witness testimony.
View JobPrincipal Consultant, Cloud DFIR (Unit 42) – Remote
Palo Alto Networks
Harrisburg, PA
Lead cloud-focused DFIR investigations across AWS, Azure, and GCP environments. Conduct forensic analysis, investigate breaches and ransomware, guide containment and recovery, and deliver executive-level reporting and remediation recommendations.
View JobSenior Investigator Digital Forensics, Incident Response (DFIR)
Logic
Chicago, IL
Hands-on senior DFIR role within a global cyber forensics practice, conducting complex forensic analysis, memory forensics, malware triage, threat hunting, cloud IR, and mentoring junior investigators across enterprise engagements worldwide.
View JobTier 3 Digital Forensics and Incident Response Analyst
Tyto Athene, LLC
Washington, DC
Senior DFIR analyst role requiring TS/SCI clearance, leading high-priority incident investigations, conducting digital forensics and malware analysis, mentoring junior SOC analysts, and coordinating with law enforcement and threat intelligence teams.
View JobDigital Media Forensics SME
Leidos
Odenton, MD
Senior forensic SME conducting full-spectrum digital media examinations, evidence acquisition, imaging and analysis for national security missions. Requires extensive host and mobile forensics experience, TS/SCI clearance, and DoD-recognised certifications.
View JobSr. Digital Forensics & eDiscovery Engineer, Security Intelligence
Tesla
Austin, TX
Lead complex insider threat investigations and eDiscovery matters across endpoints, cloud, and network environments. Conduct forensic acquisitions, artifact analysis, legal hold management, and produce defensible documentation for Legal, Compliance, and executive stakeholders.
View JobCyber Incident Responder/ Forensic Analyst
eTRANSERVICES
Maryland
Investigate and respond to cyber incidents through forensic collection, log analysis, endpoint artifact examination, and evidence documentation. Support containment, remediation, and incident reporting in coordination with response leadership and engineering teams.
View JobDigital Forensic Lab Analyst (DFL Analyst)
City of New York
Bronx, NY
Analyse digital evidence from smartphones, computers and storage media for a DA's office. Responsibilities include reviewing forensic extractions, CDR/cell site records, OSINT research, discovery compliance, and supporting criminal investigations and prosecutions.
View JobDigital Forensics Examiner
Loehrs Forensics
Phoenix, AZ
Full-time hybrid examiner role collecting, preserving and analysing digital evidence from computers, mobile devices and cloud sources. Duties include forensic imaging, artifact analysis, report writing, litigation support and expert testimony across civil and criminal matters.
View JobDigital Forensics Lead (#26-091)
Strategic Analysis, Inc.
Washington, DC
Lead and conduct digital forensics investigations into agency systems and devices, develop a forensics program, and deliver analysis reports to senior leadership for a federal health research agency.
View JobDIGITAL FORENSICS EXAMINER CELLEX/MEDEX
Quiet Professionals LLC
Tampa, FL
Mid-level digital forensics examiner supporting USSOCOM in Tampa with OCONUS deployments. Conducts mobile and media exploitation using Cellebrite, XRY, AXIOM and X-Ways, performs SSE, produces technical reports, and delivers forensic training. TS/SCI required.
View JobDigital Forensic Examiner II
City of New York
Bronx, NY
Conduct forensic analysis of mobile devices, computers, and storage media for a county DA's office. Responsibilities include data extraction, evidence recovery, report writing, court testimony, search warrant execution, and mentoring junior staff.
View JobDigital Forensics Analyst
SAIC
Chantilly, VA
Perform forensic acquisition and analysis on computers, mobile, IoT, cloud and digital media devices. Review evidentiary data to identify threats and data spills, produce analytical reports, and maintain forensic tools per SWGDE/NIST guidelines. Requires TS/SCI with Poly.
View JobCyber Defense Forensics Analyst
EY
Los Angeles, CA
Senior internal security role investigating and resolving incidents through digital forensic analysis, malware examination, artifact review, IOC identification, and remediation support, with on-call global IR responsibilities and process documentation duties.
View JobCyber Forensic Specialist
Accenture Federal Services
Arlington, VA
Join a DFIR team supporting a federal cyber incident response function. Conduct digital forensic analysis, internal investigations, litigation holds, eDiscovery collections, and evidence management using tools such as EnCase, FTK, and Magnet Axiom.
View JobDigital Forensics Examiner
Peraton
Linthicum, MD
Senior digital forensics examiner supporting federal criminal investigations, analysing computers, mobile devices and storage media using tools such as EnCase, FTK and Cellebrite. Prepares court-ready reports and may testify as an expert witness. Requires active Secret clearance.
View JobIBM CISO – Cybersecurity Forensic Analyst
IBM
Austin, TX
Join IBM's CSIRT as a Forensic Analyst supporting incident response and digital forensics investigations across the Americas. Conduct endpoint, network, and cloud forensics, preserve evidence, reconstruct attack timelines, and produce defensible reports for technical and executive stakeholders.
View JobLead Digital Investigations Engineer
MITRE
McLean, VA
Lead digital investigations role supporting law enforcement and government sponsors, conducting forensic analysis of endpoints, mobile devices, cloud environments and networks, managing evidence handling, and preparing defensible investigative reports.
View JobSenior Investigations Analyst – Digital Forensics
Corebridge Financial
Houston, TX
Lead digital forensics investigations for a financial services firm, conducting forensically sound evidence acquisition, artifact analysis, email/cloud forensics, and expert reporting for legal, HR, and executive stakeholders using tools like Nuix and Axiom.
View JobDigital Forensics Examiner
The Amatriot Group
Linthicum Heights, MD
Support federal criminal investigations by examining digital media including computers, mobile devices and storage. Conduct forensic analysis, evidence handling, data recovery and report writing; expert witness testimony in federal/military court may be required.
View JobJunior Digital Forensic Analyst
Peraton
Arlington, VA
Support a federal forensics lab conducting examinations of digital media including mobile devices, computers and cloud sources. Produce court-admissible reports, provide expert witness testimony, and assist during search warrant executions for criminal and cyber investigations.
View JobSenior Investigations Analyst – Digital Forensics
Corebridge Financial
Jersey City, NJ
Lead digital forensics investigator responsible for forensic acquisition, artifact analysis, data recovery, and expert reporting on security breaches, policy violations, and litigation matters using tools including Nuix, Axiom, Cellebrite, and EnCase.
View JobDigital Forensics Cybersecurity Advisor
Booz Allen Hamilton
Washington, DC
Serve as a strategic digital forensics advisor supporting a US government health research agency. Conduct forensic investigations across Windows, MacOS, and iOS, manage evidence collection, and assess cybersecurity risks using tools including CrowdStrike and Microsoft Defender.
View JobCyber Forensics Analyst
ECS
Portland, OR
Hands-on forensic analyst role supporting SOC investigations, incident response, malware analysis, and threat hunting. Responsibilities include endpoint/memory forensics, IOC development, reporting, and cross-team collaboration using industry-standard DFIR tools.
View JobDigital Forensics Analyst ( Python, Splunk, Arcsight)
BAE Systems, Inc.
Falls Church, VA
Conduct digital media acquisition, evidence analysis, and incident response in an enterprise environment. Responsibilities include deleted file recovery, USB/data carving, malware analysis, insider threat investigations, and Python automation development.
View JobGet new DFIR jobs in your inbox
A weekly round-up of every new listing on the board — no noise, unsubscribe anytime.