Digital Forensics Jobs: United States
282 current openings, updated daily. Links to original listings.
Senior Digital Forensics Trainer
Detego Global
East Coast
Senior Digital Forensics Trainer role delivering technical training to law enforcement, government, military and enterprise customers. Responsibilities include delivering onsite and remote training in mobile and computer forensics, developing course content and practical exercises, running workshops and certification programmes, acting as a digital forensics subject matter expert, supporting product demonstrations and customer engagements, and representing Detego at industry events.
View JobDigital Forensics Consultant
ENDUIR Cyber
United States
Join a cybersecurity consulting firm as a forensics practitioner supporting breach investigations and incident response engagements. Collect and analyse digital evidence, reconstruct incident timelines, and produce clear findings reports for technical, executive, and legal audiences.
View JobManager, Digital Forensics & Incident Response (DFIR)
Stealth Talent Solutions
United States
Lead complex cyber investigations and forensic engagements across ransomware, data breaches, and insider threats. Manage client communications, mentor IR practitioners, and conduct hands-on Windows forensic analysis from triage through recovery.
View JobSenior Analyst – Forensics & Response
TikTok USDS Joint Venture
Washington, DC
Lead complex digital forensic investigations and incident response across enterprise endpoints, mobile devices, servers, and cloud infrastructure. Responsibilities include evidence acquisition, artifact analysis, forensic reporting, and legal/compliance support within an insider threat detection team.
View JobCybersecurity Operations Analyst
SITEC Consulting, LLC.
Springfield, VA
Senior Tier 3 incident responder supporting complex cybersecurity incidents in a mission-focused environment, performing host, memory and network forensic analysis, malware investigation, threat attribution, and coordinating with law enforcement and counterintelligence stakeholders.
View JobSenior Incident Responder / Threat Hunter
ShorePoint, LLC
Albuquerque, NM
Lead structured threat hunts, complex incident response actions and digital forensic investigations across enterprise environments, integrating cyber threat intelligence to detect, analyse and mitigate malicious activity for high-profile public and private sector clients.
View JobPrincipal DFIR Consultant – Remote (Anywhere in the U.S.)
GuidePoint Security
United States
Lead complex breach investigations and forensic engagements as the highest individual contributor in a specialist DFIR practice, covering host forensics, cloud forensics, malware triage, threat actor attribution, and client-facing delivery for enterprise and government clients.
View JobSenior DFIR Consultant – Engagement Lead
Zurich North America
St. Louis City County, MO
Lead complex incident response engagements and digital forensics investigations for external clients, managing stakeholder communications, forensic examinations, malware analysis, and executive reporting during active cybersecurity incidents.
View JobSecurity Engineer
Catapult Solutions Group
United States
A hands-on, remote contract role within a Security Operations Centre, focused on leading incident response investigations, performing host, network and cloud forensic analysis, and improving detection capabilities using SIEM, EDR and AI-assisted platforms.
View JobSME Digital Media Forensics Team Support (Computer Forensic Specialist)
Prescient Edge
Linthicum Heights, MD
A senior computer forensic specialist is sought to support federal CI/CT investigations, conducting forensic examination of digital media, evidence acquisition, malware analysis, and incident response, while evaluating emerging forensic technologies and developing processes.
View JobSr. DFIR Analyst
SentinelOne
United States
Lead technical DFIR breach response investigations across endpoint, network, cloud, and SaaS environments. Own evidence handling, forensic analysis, containment guidance, and formal reporting, while mentoring analysts and driving continuous process improvement.
View JobSenior Digital Forensics and Incident Response Engineer
Ladders
United States
Lead high-impact forensic investigations into identity theft and account takeover within a healthcare environment, combining hands-on digital forensics, incident response, workflow automation, and strategic leadership to mature organisational forensic capabilities.
View JobDigital Forensics Analyst
SoTalent
Indianapolis, IN
Seeking an experienced digital forensics analyst to conduct investigations across endpoints, networks, cloud and manufacturing environments, handling evidence acquisition, malware triage, chain-of-custody documentation and forensic reporting for security and legal stakeholders.
View JobSr. Digital Media Forensics Team Support (Computer Forensic Spec with Security Clearance
Prescient Edge
Linthicum Heights, MD
Senior forensic examiner role supporting CI/CT investigations through full-cycle digital media examination, evidence acquisition, forensic analysis and reporting, malware analysis, and incident response, with a TS/SCI CI Poly clearance required.
View JobSenior Associate/Digital Forensics (Forensic Services practice)
Charles River Associates
Chicago, IL
Join a forensic consulting practice to lead digital investigations involving device collection, macOS/iOS artifact analysis, mobile forensics, and trade secret matters. Oversee project teams, support business development, and drive quality across client engagements.
View JobSenior Digital Forensics and Incident Response Engineer
Humana
Charlotte, NC
Senior DFIR engineer leading forensic investigations into identity theft, account takeover and cyber incidents. Develops automated detection workflows, conducts root-cause analysis, and supports enterprise incident response across cloud and on-premises environments.
View JobCybersecurity Operations Analyst
SITEC Consulting
West Springfield, VA
Senior Tier 3 incident responder performing forensic analysis, malware investigation, threat attribution, and host/network/memory artifact analysis in a mission-critical, clearance-required environment supporting complex cybersecurity incidents.
View JobDigital Forensic Examiner (Local Las Vegas. No Relocation or Remote)
EXPERT DATA FORENSICS
Las Vegas, NV
Part-time in-office examiner role acquiring, analysing and reporting on digital evidence from mobile devices, computers and cloud accounts, using industry-standard forensic tools, with courtroom testimony responsibilities.
View JobLateral Digital Forensics Unit (DFU) Detective
City of Peoria, AZ
Peoria, AZ
Join a municipal police department's Digital Forensics Unit, recovering, analysing and preserving electronic evidence as a detective. Requires at least three years' DFU experience, with occasional patrol support duties.
View JobIntrusion Analysis Technical Lead
Parsons
Maryland
Lead a team of cyber analysts conducting advanced intrusion investigations, including host-based and network forensic analysis, malware analysis, and reverse engineering, while providing technical mentorship and improving analytic workflows.
View JobCyber Forensics Analyst / Cyber Intrusion Analyst
Parsons
Maryland
Join a growing cyber forensics team supporting mission-critical government work. Roles span forensic imaging, host and network analysis, intrusion investigation, malware analysis, and reverse engineering across multiple seniority levels, requiring an active TS/SCI clearance.
View JobIncident Response Lead
Parsons
Maryland
Lead a team conducting advanced incident response and cyber investigations, including host and network forensic analysis, APT tracking, and malware analysis, while mentoring analysts and driving technical excellence across workflows.
View JobDigital Forensics Analyst
Rolls-Royce
Indianapolis, IN
Join a purple team as a DFIR specialist, leading incident response investigations, conducting threat hunting, performing forensic analysis across endpoints and cloud, and developing detections within SIEM and EDR platforms. US citizenship required.
View JobHost Forensics Analyst
BCMC
Arlington, VA
Support a critical federal cyber mission by conducting host-based digital forensics investigations, leading forensic teams at onsite engagements, analysing digital artefacts, and producing detailed technical and executive-level reports for senior stakeholders.
View JobSenior Digital Forensics and Incident Response Engineer
Humana
Atlanta, GA
Senior DFIR engineer role leading forensic investigations, identity theft response, and root-cause analysis across enterprise infrastructure. Requires experience with forensic tooling, Splunk, and cloud IR, with a focus on automation and scalable detection capabilities.
View JobeDiscovery Forensic Analyst
KLDiscovery
California
Conduct forensic acquisitions, investigations and analysis across diverse digital environments, producing reports and expert testimony. Work with internal and external clients to scope, collect and analyse data using industry-standard forensic tools.
View JobPrincipal DFIR Consultant
MOXFIVE
United States
Lead complex incident response and digital forensics investigations across enterprise and multi-cloud environments, including AWS, GCP and Azure. Contribute to building an AI-assisted investigative platform while hunting and eradicating advanced threat actors.
View JobDigital Forensic Investigator
Avalon
Buffalo, NY
A hybrid forensic examiner role based in Buffalo, NY, conducting examinations of computers, mobile devices, and cloud sources. Responsibilities include evidence acquisition, artifact analysis, reporting, and laboratory operations across corporate, civil, and criminal matters.
View JobCyber Forensics Analyst / Cyber Intrusion Analyst
Parsons Corporation
Linthicum, MD
Hands-on cyber forensics and intrusion analyst roles at multiple seniority levels, covering host and network forensics, malware analysis, reverse engineering, and digital evidence handling in support of mission-critical government cybersecurity operations.
View JobSenior Incident Response Consultant, Mandiant, Google Cloud
New York, NY
Join Mandiant's elite incident response team, helping clients navigate complex cyber incidents through forensic analysis, threat hunting, malware triage, and containment — communicating findings to technical and executive stakeholders across diverse engagements.
View JobConsulting Associate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Washington, DC
Join a forensic services consulting practice supporting fraud, data breach and cybercrime investigations. Conduct digital forensic analysis, incident response, malware investigation and expert report drafting for corporate clients and legal counsel.
View JobCriminal Digital Forensic Analyst
ViaPath Technologies
Mechanicsburg, PA
Perform forensic extraction and analysis of legally seized cellular devices within a correctional environment, support facility investigations through data mining and link analysis, produce intelligence reports, and provide court testimony as required.
View JobAssociate Principal/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Dallas, TX
Lead cyber intrusion investigations, digital forensics and incident response engagements within a forensic consulting practice, managing client relationships, supervising teams, supporting business development and providing expert technical guidance.
View JobIncident Response Lead
Parsons Corporation
Linthicum, MD
Lead a team of cyber analysts conducting advanced incident response and forensic investigations, including host and network analysis, APT tracking, and malware forensics, while mentoring analysts and driving continuous improvement in investigative processes.
View JobMobile Forensics Analyst (SME)
GovCIO
Triangle, NC
Senior mobile forensics analyst role supporting a government contract, performing forensic imaging and analysis of mobile devices — primarily iOS — using Cellebrite tools, collaborating with legal teams, and providing expert testimony in litigation matters.
View JobDigital Forensics Lead
Convergenz
United States
Lead and conduct digital forensics investigations across agency systems and devices, mature a forensics programme, and deliver analysis reports to leadership. Requires 5+ years of forensics experience and relevant GIAC certification preferred.
View JobInformation Technology Specialist (INFOSEC)
U.S. Customs and Border Protection
San Diego, CA
A federal government digital forensics specialist role based across multiple US border locations, conducting advanced laboratory analysis of digital and mobile evidence, developing forensic tool validation plans, and preserving and authenticating electronic media for investigative purposes.
View JobDigital Forensics & Incident Response
Boundless_ Expert Staffing
United States
Join a vetted network of on-call DFIR practitioners deployed to client incidents and engagements. Conduct digital forensic investigations, lead or support incident response, handle evidence, and deliver clear forensic documentation — part-time or full-time.
View JobIntrusion Analysis Technical Lead
Parsons Corporation
Linthicum, MD
Lead a team of cyber analysts conducting advanced intrusion analysis, host and network forensics, malware analysis, and reverse engineering in support of critical government mission objectives. Requires TS/SCI clearance and 8+ years' experience.
View JobAssociate Principal/Digital Forensics (Forensic Services practice)
Charles River Associates
New York, NY
Lead digital forensic investigations, primarily trade secret matters, conducting hands-on analysis of MacOS, iOS, Windows and Linux devices. Oversee teams, deliver expert testimony, and drive business development within a forensic consulting practice.
View JobDigital Forensics Examiner
Peraton
Bethesda, MD
Senior forensic examiner role supporting a US government national security customer, conducting end-to-end digital evidence examinations across hard drives, mobile devices and removable media, producing formal reports and expert consultation.
View JobCriminal Digital Forensic Analyst
ViaPath Technologies
Rancho Cordova, CA
Perform forensic extraction and analysis of legally seized cellular devices within a correctional facility, support investigations with actionable intelligence, produce detailed reports, and provide testimony in court or administrative hearings.
View JobSenior Incident Response Analyst
OpenLoop
United States
Join a telehealth security operations team as a hands-on DFIR responder, owning incidents end to end — from detection and forensic investigation through containment, eradication, and post-incident review — across host, cloud, and identity environments.
View JobSenior Associate/Digital Forensics (Forensic Services practice)
Charles River Associates
Dallas, TX
A senior forensic role within a consulting firm's Forensic Services practice, conducting device collections, macOS and mobile forensic examinations, trade secret investigations, and leading client engagements across Windows, Linux, iOS and Android platforms.
View JobIBM CISO – Cybersecurity Forensic Analyst
IBM
Chicago, IL
A hands-on forensic analyst role within a global corporate CSIRT, conducting digital forensic investigations across endpoints, networks and cloud environments, supporting incident response, and producing clear technical and executive-level reports.
View JobSenior Digital Forensics and Incident Response Engineer
Humana
Dallas, TX
A senior-level DFIR role leading forensic investigations into identity theft, account takeover, and enterprise cyber incidents. Involves forensic analysis, incident response, root-cause identification, automation development, and investigative reporting for security leadership.
View JobSenior Digital Forensics Examiner
Minnesota IT Services
St Paul, MN
A senior-level forensics examiner role within a state government digital forensics laboratory, responsible for complex investigations, evidence acquisition, analysis, reporting, expert testimony, lab maintenance, and mentoring junior staff.
View JobForensics Consultant
Lineal
Columbus, Ohio
Lead end-to-end digital forensic investigations across PCs, mobile devices, servers and cloud systems, guiding clients through data collection, processing and analysis while acting as a subject matter expert.
View JobIncident Response Senior Consultant (Remote)
CrowdStrike
United States
Lead incident response engagements for global organisations, conducting host and network forensics, threat hunting, malware analysis and intrusion investigations, while producing high-quality reports and contributing to industry thought leadership.
View JobCyber DFIR Lead Consultant
PNG Cyber, LLC
United States
Lead senior-level digital forensics and incident response engagements covering ransomware, BEC, and insider threats. Manage case lifecycles, mentor analysts, conduct forensic analysis, liaise with clients and legal counsel, and deliver professional technical reports.
View JobSenior DFIR Consultant – Remote (Anywhere in the U.S.)
GuidePoint Security
Remote
Lead and execute complex DFIR investigations including host forensics, network traffic analysis, malware triage and log review. Deliver high-quality client reporting, drive practice improvement and support proactive threat hunting engagements across diverse sectors.
View JobDigital Forensic Examiner
Infotrend
Lorton, VA
A hands-on forensic examiner role supporting a government laboratory, performing digital evidence seizure, imaging, artifact analysis, tool validation, and court testimony, with onsite work in Lorton, VA and occasional field travel across the US.
View JobManager, Forensics Technology – Digital Forensics
BDO
United States
Manage digital forensics and eDiscovery matters involving evidence identification, preservation, collection and analysis. Lead client engagements, coordinate project workstreams, mentor junior staff, and deliver clear, defensible findings across complex multi-source investigations.
View JobCareers – Job Details (redesign)
Maximus
San Antonio, TX
Senior incident response role supporting DoD mission assurance in a classified onsite environment. Requires 10+ years' IR experience, TS/SCI clearance, DoD 8140 certifications, and forensic tooling expertise including EnCase, FTK, and Volatility.
View JobX-Force Incident Response Associate Consultant 2027
IBM
Herndon, VA
Join an elite incident response team supporting Fortune 1000 clients through cyber incident response, threat hunting, and digital forensic investigations, applying knowledge of EDR tools, MITRE frameworks, and forensic analysis techniques.
View JobSenior Associate, Forensic Technology
val's services
San Francisco, CA
Support end-to-end forensic investigations across iOS, macOS and Windows platforms, advising on misconduct, IP theft and data breach cases, automating forensic workflows, and communicating technical findings to stakeholders.
View JobDigital Forensics & eDiscovery Manager
KLA
Ann Arbor, MI
Lead a global digital forensics and eDiscovery function within a corporate legal team, overseeing forensic investigations, ESI preservation, legal holds, insider risk support, and evidence management across endpoints, cloud, mobile, and AI platforms.
View JobCERT Lead
New York City Office of Technology & Innovation
Brooklyn, NY
Lead a six-person DFIR team serving as the top-level technical escalation point for high-profile cybersecurity incidents across New York City agencies, covering incident response, digital forensics, malware analysis, threat hunting, and cloud investigations.
View JobDigital Forensics Examiner
CYBIR
Moorestown, NJ
Experienced examiner sought to take technical ownership of digital forensic and eDiscovery matters, performing collections, artifact analysis, and defensible report writing across computers, mobile devices, cloud platforms, and email systems.
View JobPrincipal/Digital Forensics, Incident Response & Cybersecurity (Forensic Services practice)
Charles River Associates
New York, NY
A senior consulting role leading cyber intrusion investigations, digital forensics, and incident response engagements for corporate clients. Responsibilities include forensic analysis, expert testimony, team leadership, client management, and business development within a forensic services practice.
View JobSenior Digital Forensics and Incident Response Engineer
Humana
Tampa, FL
Senior DFIR engineer role investigating identity theft, account takeover, and cyber incidents. Responsibilities include forensic analysis, root-cause identification, automation of detection workflows, and reporting to leadership across enterprise infrastructure.
View JobCyber Operations Analyst
MITRE
McLean, VA
Join a digital investigations team supporting national security and law enforcement missions. Responsibilities span digital forensics, OSINT analysis, investigative data analytics, adversary analysis, and development of new investigative capabilities and tradecraft.
View JobSecurity Spec Lead – Digital Forensics Analyst
American Electric Power
Columbus, OH
A senior digital forensics analyst role conducting end-to-end investigations into internal and external matters, supporting insider threat programmes, managing evidence, and communicating findings to HR, Legal, and executive stakeholders.
View JobDigital Forensics Senior Director – New York City
APT Search
New York City
Lead a US and Mexico digital forensics team within a global risk consultancy, managing end-to-end casework from evidence collection to expert witness testimony, while driving business development and mentoring junior practitioners.
View JobLead Analyst, Information Security (Forensics)
RXO, Inc.
Charlotte, NC
Lead digital forensic investigations across endpoints, cloud, mobile and email platforms, supporting cybersecurity incidents, HR, legal and compliance matters. Prepare defensible reports, maintain chain-of-custody, mentor junior analysts and drive investigative best practices.
View JobCyber Crypto & Blockchain Forensic Investigator
HallieMorgan Technologies
Atlanta, GA
Support a federal law enforcement agency by conducting cryptocurrency tracing, on-chain pattern analysis, and financial forensic investigations across major blockchains, assisting senior investigators with case development and analytical reporting.
View JobPrincipal, Digital Forensics
Control Risks
New York, NY
A senior leadership role managing digital forensics and eDiscovery services for law firm and corporate clients, overseeing forensic investigations, expert witness testimony, team development, and business development across US and international markets.
View JobDFIR Team Lead
Booz Allen Hamilton
McLean, VA
Lead a team of incident response analysts handling major cybersecurity incidents, conducting digital forensic examinations, coordinating containment efforts, mentoring junior staff, and delivering detailed technical reports to senior stakeholders.
View JobConsulting Associate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Dallas, TX
Join a forensic services consulting practice supporting fraud, misconduct and data breach investigations. Responsibilities span digital forensic acquisition, incident response, malware analysis, IOC development, and drafting expert reports for counsel and clients.
View JobLCG Digital Forensic Analyst 1
LCG Discovery Experts, LLC
Richmond, TX
Entry-level digital forensics analyst role supporting evidence intake, preservation, forensic acquisition, and lower-complexity analysis. Involves chain-of-custody documentation, forensic imaging, and litigation support under experienced supervision. On-site, full-time position in Richmond, TX.
View JobSenior Director, Digital Forensics and Incident Response
BlueVoyant
United States
Lead complex cyber investigations as incident commander, advising executives, legal counsel, and technical teams through ransomware, cloud, identity, and advanced threat incidents. Mentor DFIR consultants and drive client-facing forensic engagements end to end.
View JobPrincipal Incident Response Security Consultant, Mandiant
Massachusetts
Lead complex incident response engagements and forensic investigations for enterprise clients, performing host, network, and cloud forensics, malware triage, and threat hunting while managing project lifecycles and communicating findings to executive stakeholders.
View JobIT PROFESSIONAL 2 – CYBERSECURITY
State of Nevada
Las Vegas, NV
A government forensic examiner role supporting criminal investigations through forensic analysis of computers, mobile devices, and cloud storage. Works across task forces covering fraud, trafficking, cybercrime, and other offences, presenting findings in court.
View JobForensics / Incident Response SME
Valiant Solutions, LLC
Remote
A senior DFIR SME role supporting a US Government client, combining real-time incident response with deep forensic analysis across enterprise and cloud environments, including malware analysis, mobile forensics, and threat hunting.
View JobIntrusions Management Chief
MANTECH
Linthicum Heights, MD
Lead all DFIR activities for a government customer, managing incident responders and intrusion investigations, analysing APT activity across host forensics, network logs and threat intelligence, and briefing findings to senior leadership.
View JobForensic Computer Analyst
United States Postal Service
Cleveland, OH
Conduct forensic examinations of digital and multimedia evidence in support of criminal and administrative investigations, produce expert reports, provide court testimony, advise on evidence handling, and deliver forensic training across federal, state, and local contexts.
View JobDigital Forensic Examiner
Commonwealth of Pennsylvania
Breinigsville, PA
Join a state law enforcement agency as a forensic examiner analysing digital evidence from criminal investigations. Responsibilities include device examination, evidence handling, field support, report writing, and presenting findings in court proceedings.
View JobForensic Analyst
Arete Event Staffing Firm
United States
Conduct digital forensic analysis across Windows, Mac, Linux and network appliances, documenting findings, building attack timelines, identifying IOCs and TTPs, and producing detailed reports in support of incident response investigations.
View JobMedia Malware Analyst, Journeyman
Leidos
Odenton, MD
Support US Cyber Command operations by conducting forensic analysis of compromised systems and media, performing static and dynamic malware analysis, reverse engineering malicious files, and producing actionable threat intelligence reports for defence leadership.
View JobParanoids Forensic and Incident Response Operations (FIRE) Sr Analyst (NIGHT SHIFT)
Yahoo
United States
Senior night-shift analyst role on a global internet company's DFIR team, leading incident response investigations, threat hunting at scale, and mentoring junior analysts using AI-augmented tools and world-class telemetry.
View JobMobile Threat Analyst / Active Top Secret
Peraton
Arlington, VA
Seeking an experienced mobile forensics specialist to conduct device acquisitions, application assessments, and threat analysis supporting U.S. diplomatic security. Requires active Top Secret clearance and proficiency with tools such as Cellebrite and Magnet.
View JobForensic Software Engineer
REDLattice, Inc.
Quantico, VA
Seeking a skilled engineer to conduct mobile device forensic analysis, reverse engineering, and vulnerability assessment in support of law enforcement and national security missions. Requires TS/SCI clearance and five years of relevant forensic experience.
View JobDigital Forensic Examiner
U.S. Bank
Minneapolis, MN
Join a corporate E-Discovery and Forensic Investigations team conducting forensic collections and examinations across endpoints, mobile devices, email and messaging platforms, supporting legal, HR, fraud and information security investigations.
View JobDigital Forensic Analyst
Koniag Government Services
Washington, DC
Support a federal government client as the primary digital forensics technical expert, conducting forensic examinations, incident investigations, insider threat inquiries, e-discovery support, and malware analysis across a complex enterprise IT environment.
View JobSenior Security Engineer, Digital Forensics
San Francisco, CA
Join a global security response team performing forensic investigations and incident response across a major technology organisation. Requires deep DFIR expertise, coding ability, and experience with industry-standard forensic and security tooling.
View JobForensics / Incident Response SME
Valiant Solutions
United States
A senior SME role combining real-time incident response with deep digital forensics expertise across enterprise and cloud environments, including malware analysis, mobile forensics, memory forensics, and evidentiary reporting for a US government client.
View JobCyber Defense Response Analyst II
CME Group
Chicago, IL
A mid-level DFIR analyst role responding to cyber incidents across a global financial markets environment, conducting threat hunts, applying endpoint forensics and malware analysis, and contributing to automation, runbooks, and tabletop exercises.
View JobAssociate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Boston, MA
Join a forensic services consulting practice supporting clients through cybersecurity investigations, data breach response, and digital forensic analysis. Responsibilities include evidence acquisition, malware analysis, IOC development, timeline analysis, and expert report drafting.
View JobDigital Forensic Examiner 2
Commonwealth of Pennsylvania
Lehigh County, PA
Join a state law enforcement agency as a digital forensic examiner, conducting technical examination of electronic devices, handling digital evidence, supporting criminal investigations, assisting at field scenes, and presenting findings in court proceedings.
View JobCybersecurity Digital Forensics Investigator
Integra
Dallas, TX
Conduct end-to-end digital forensic investigations across mobile, desktop, cloud, and network environments. Collect and preserve evidence under strict chain-of-custody, analyse artefacts, support incident response, and coordinate findings with legal counsel and federal agencies.
View JobDigital Forensics Analyst
Saliense
Alexandria, VA
Seeking an experienced digital forensics analyst to conduct forensic examination of Windows, Linux, Mac, and mobile devices, perform cloud investigations across M365/Azure/AWS, and support threat hunting using EDR, SIEM, and packet capture tools.
View JobReverse Engineer, Mandiant FLARE
New York, NY
Join Mandiant's FLARE team to perform static and dynamic binary analysis, develop reverse engineering and malware automation tools, write technical reports, and support intrusion investigations and threat actor tracking across multiple platforms.
View JobPrincipal Incident Response Analyst – 90406800 – Remote
Amtrak
United States
Lead cyber incident response and digital forensics investigations within a Cyber Fusion Center, performing host, network, memory and malware analysis, threat hunting, and supporting crisis management across IT and OT environments.
View JobIncident Response Senior Analyst (Tier 3)
Resource Management Concepts, Inc.
Quantico, VA
Senior analyst role supporting defensive cyberspace operations for a DoD contract at Quantico, VA. Responsibilities span DFIR investigations, forensic analysis, incident management, detection tuning, and mentoring junior analysts. TS/SCI clearance required.
View JobDigital Forensics and Evidence Handling SME
accel bi corporation
Florida
Subject matter expert role supporting cybersecurity capability-building through digital evidence handling, chain-of-custody guidance, forensic-readiness materials, and training covering logs, artifacts, cloud, mobile, and communication data.
View JobCybersecurity Operations Specialist 720
Freedom Technology Solutions Group, LLC
St Louis, MO
A CSOC Tier 2/3 role supporting 24x7 cyber incident response, including containment, eradication, forensic artifact analysis, malware analysis, and digital media examination within a government defence environment requiring active TS/SCI clearance.
View JobIncident Response (IR) Tech Lead
Edgewater Federal Solutions, Inc.
Bethesda, MD
Lead a federal incident response team providing Tier-2/3 support across a 24x7 environment. Responsibilities span threat hunting, digital forensics, malware analysis, SIEM content development, and mentoring junior analysts on a national-level government contract.
View JobDigital Forensic Specialist
Washington State Office of the Attorney General
Olympia, WA
Expert-level digital forensics roles within a state Medicaid Fraud division, involving forensic acquisition and analysis of digital evidence, lab operations, court testimony, and technical training across computers, mobile devices, cloud services, and IoT.
View JobDigital Forensics & eDiscovery
MUFG
Tempe, AZ
An AVP-level role conducting digital forensic collections, artifact analysis and eDiscovery in support of security incidents, internal investigations and legal/compliance matters within a major financial institution. Requires 3+ years of forensics experience.
View JobDigital Forensic Examiner
CACI International Inc
Forest Park, GA
Cleared Digital Forensic Examiner required to collect, process, analyse and preserve digital evidence using tools including Cellebrite, EnCase, FTK and XRY in support of intelligence operations and investigative requirements, with up to 25% CONUS travel.
View JobDigital Forensics Analyst
Lighthouse
United States
Perform onsite and remote forensic collections of ESI from laptops, mobile devices, servers and cloud sources. Analyse and verify data in support of investigations and litigation, maintaining chain of custody and preparing detailed forensic reports.
View JobSenior Consultant, DFIR, Reactive Services (Unit 42)
Palo Alto Networks
Santa Clara, CA
Unit 42 Senior DFIR Consultant conducting forensic analysis of endpoints, cloud, and networks during active security incidents. Responsibilities include evidence acquisition, malware investigation, client reporting, and remediation support across enterprise environments.
View JobSenior Incident Response Consultant, DFIR
Zurich North America
Missouri
Lead complex incident response and digital forensics engagements for external clients, conducting forensic examinations, malware analysis, and threat attribution while delivering executive briefings, mentoring junior staff, and supporting cyber insurance breach response.
View JobForensic Computer Analyst SR
United States Postal Service
Richmond, CA
Senior forensic computer analyst conducting complex digital and multimedia evidence examinations, producing expert reports, providing court testimony, leading evidence collection, and advising on forensic techniques within a federal postal inspection laboratory.
View JobVP, Digital Forensics Expert Witness – SME (Testifying)
LevelBlue
United States
Senior testifying expert witness role conducting digital forensic investigations across endpoints, cloud and email systems, authoring expert reports and declarations, and providing sworn testimony in depositions, hearings and trials supporting litigation counsel.
View JobSenior DFIR Consultant – Remote (Anywhere in the U.S.)
GuidePoint Security
United States
Lead and execute complex DFIR investigations including host forensics, network traffic analysis, malware triage and log review. Author client deliverables, drive automation, and contribute to practice development across reactive and proactive engagements.
View JobSenior Incident Response Consultant | USA, Remote | $120,000 – $155,000
Maestro Search
United States
Lead end-to-end incident response investigations across host, network, cloud and application environments, delivering containment guidance, forensic analysis and client-facing findings for complex, high-impact cases including ransomware and nation-state threats.
View JobForensic Data Analyst with Security Clearance
Akima Infrastructure Services
Arlington, VA
Supports federal law enforcement by conducting mobile device forensic examinations, physical data extractions, evidence handling, and trial testimony. Requires CCME certification, 3+ years mobile forensics experience, and ability to obtain Public Trust clearance.
View JobPrincipal DFIR Consultant
Tokio Marine HCC
United States
Lead complex digital forensics and incident response investigations for insured organisations, covering triage, containment, forensic analysis, and recovery. Mentor DFIR teams, manage client relationships, and drive strategy for BEC and ransomware incidents.
View JobSr. Cyber Analyst, Digital Forensics Incident Response
At-Bay
United States
Senior DFIR analyst role supporting insured SMBs with forensic evidence collection and analysis, incident investigation, root cause identification, ransomware response, threat hunting, and delivery of detailed incident reports and recovery recommendations.
View JobDigital Forensics Analyst
Gunnison Consulting Group
Alexandria, VA
Performs network and media digital forensic investigations supporting cybersecurity incident response and threat hunting. Analyses malware, compromised systems and cloud environments, prepares detailed forensic reports, and develops SOPs and automation tools.
View JobSenior Director, Digital Forensics & Incident Response
AstraZeneca
Gaithersburg, MD
Senior leadership role owning AstraZeneca's global DFIR capability. Responsibilities span incident command, forensic defensibility, team building, 24x7 coverage, executive reporting, and regulatory compliance across cloud, on-premises and OT/ICS environments.
View JobDigital Forensic Technician
Infotrend
Lorton, VA
Join a digital forensics laboratory supporting evidence seizure, preservation, imaging, and documentation. Responsibilities include chain-of-custody management, forensic reporting, court testimony, tool validation, and accreditation support for government investigations.
View JobCTN – Digital Forensics/Law Enforcement Integration SME
BLUEFORCE INC
Carrollton, VA
Senior SME role supporting a DoD counter-narcotics programme, delivering digital forensics and law enforcement integration training to partner-nation personnel, developing curricula, assessing capability gaps, and mentoring investigators in evidence handling and cybercrime workflows.
View JobDigital Forensics Investigator
City of Vancouver
Vancouver, WA
Conduct forensic examination of digital devices and electronic media to support law enforcement criminal investigations, including violent crimes and ICAC cases. Prepare detailed reports, provide expert court testimony, and assist prosecutors with digital evidence presentation.
View JobMid-Level Digital Forensic Analyst
SkyePoint Decisions
Arlington, VA
Conduct forensic examinations of digital devices and cloud sources, analyse evidence for criminal and civil matters, produce detailed reports, provide expert witness testimony, and support search warrant executions for a federal government client.
View JobDFIR Consultant
Tokio Marine HCC
Remote
Join a specialist incident response firm supporting cyber insurance claims. Perform triage, forensic acquisition, and analysis of endpoint, cloud, and log evidence, delivering clear investigative reports for BEC and ransomware incidents.
View JobIncident Response Senior Consultant (Remote)
CrowdStrike
Remote
Lead incident response engagements and intrusion investigations for major organisations. Conduct host and network-based forensics across Windows, Mac and Linux, perform malware analysis, and deliver findings to senior stakeholders and legal counsel.
View JobCyber Crime Investigator
Sphinx LLC
Quantico, VA
Technical SME supporting federal counterintelligence investigations through full-lifecycle digital forensic examinations, evidence acquisition, forensic analysis and reporting, incident response, and malware analysis, requiring TS/SCI clearance and DCITA certification.
View JobSenior Cyber Crypto & Blockchain Forensic Investigator
HallieMorgan Technologies
Washington, DC
Support a federal law enforcement agency conducting advanced cryptocurrency tracing, blockchain forensic analysis, financial forensics, and OSINT across complex cyber-enabled fraud and financial crime investigations involving multi-chain obfuscation techniques.
View Job(2027 Bachelor’s/Master’s graduates) Cyber & Forensic Technology Consulting Analyst/Associate
Charles River Associates
Dallas, TX
Entry-level consulting role supporting digital forensic investigations, incident response, and eDiscovery. Responsibilities include forensic analysis of computers, networks and mobile devices, evidence handling, malware analysis, and drafting technical reports for legal and corporate clients.
View JobAssociate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Dallas, TX
Join a forensic services consulting practice conducting digital forensic investigations, incident response, malware analysis, and expert reporting for clients facing data breaches, fraud, and cybercrime matters. Involves hands-on forensic acquisition, artifact analysis, and IOC development.
View JobComputer Forensic Examiner, Computer Crimes
Virginia Office of the Attorney General
Richmond, VA
Conduct computer forensic examinations and criminal investigations covering child exploitation, fraud, identity theft, and computer crimes. Collaborate with federal, state, and local law enforcement across Virginia, with occasional statewide and interstate travel required.
View JobPrincipal Incident Response Security Consultant, Mandiant
Georgia
Senior IR consultant role managing incident response engagements, performing digital forensics, host-based analysis, network traffic analysis and malware triage across cloud and on-premise environments, with client reporting responsibilities.
View JobIncident Response Principal Consultant (Remote)
CrowdStrike
Remote
Lead incident response engagements for enterprise clients, conducting host and network forensics, malware analysis, and intrusion investigations across Windows, Mac, and Linux platforms. Produce reports and present findings to senior stakeholders and legal counsel.
View JobDigital Forensic Analyst I
Contact Government Services, LLC
Detroit, MI
Performs forensic data collection and analysis of mobile devices, cloud sources, and endpoints using tools such as Cellebrite, EnCase, and FTK Imager. Coordinates with legal teams, manages chain of custody, and supports on-site and remote collection efforts.
View JobDFIR Engineer II – Incident Response
Northwestern Mutual
Milwaukee, WI
Join a Threat Detection & Response team to investigate and contain security incidents, analyse system artifacts and memory, conduct threat hunting, and continuously improve IR procedures and detection capabilities.
View JobSenior Incident Response Security Consultant, Mandiant, Google Cloud
New Mexico
Senior consultant role delivering end-to-end incident response engagements, including host and network forensics, malware triage, threat hunting, and cloud investigations, while leading client-facing projects and mentoring junior consultants.
View JobIT Incident Response and Forensics Specialist III
RoShay Services
Greensboro, NC
Lead complex security investigations and digital forensics across endpoints, networks, and cloud environments. Responsibilities include threat hunting, evidence preservation, root cause analysis, playbook development, and post-incident reporting to strengthen security posture.
View JobSenior Incident Response Security Consultant, Mandiant, Google Cloud
Arizona
Senior IR consultant at Mandiant delivering end-to-end incident response investigations, forensic analysis, threat hunting, and malware triage for clients. Leads engagements, mentors consultants, and communicates findings to technical and executive audiences.
View JobIncident Response Principal Consultant (Remote)
CrowdStrike
United States
Lead incident response engagements and forensic investigations across Windows, Mac, and Linux platforms. Hunt for threat actors, perform network and host forensics, malware analysis, and deliver findings to senior stakeholders including legal counsel.
View JobHost Based Cyber Systems Analyst III
ARGO Cyber Systems
Arlington, VA
Experienced analyst needed to lead host-based forensic investigations for DHS HIRT, conducting evidence acquisition, malware triage, memory analysis, and intrusion reporting across federal civilian networks and critical government systems.
View JobCriminalist I, Digital Forensics (8259) – San Francisco Police Department
City and County of San Francisco
San Francisco, CA
Performs scientific examination and analysis of digital evidence including computers, mobile devices, storage media and cloud environments in support of criminal investigations. Prepares technical reports and maintains chain-of-custody for investigative and judicial purposes.
View JobPrincipal/Digital Forensics, Incident Response & Cybersecurity (Forensic Services practice)
Charles River Associates
Houston, TX
Senior consulting role leading digital forensics, incident response and cyber investigations for corporate clients. Responsibilities include forensic analysis, expert testimony, team leadership, client engagement and cybersecurity framework assessments within a forensic services practice.
View JobPrincipal Incident Response Analyst
Blackbaud
Charleston, SC
Senior analyst role leading incident response, digital forensic investigations, and threat hunting within a large enterprise environment. Requires 8+ years' experience, forensic tooling proficiency, and expertise in SIEM, EDR, and security frameworks.
View JobDigital Forensic Examiner, Mid
Booz Allen Hamilton
Washington, DC
Mid-level DFIR examiner role conducting forensic image analysis, malware investigation, log analysis, and incident response. Identifies IOCs, determines unauthorized access or data exfiltration, and prepares detailed technical reports for client leadership and counsel.
View JobDigital Forensics Lead (CBP)
Agile Defense
Ashburn, VA
Lead digital forensics investigations supporting U.S. Customs and Border Protection, preserving evidence, maintaining chain of custody, reconstructing incidents, and delivering defensible findings for incident response, insider threat, and law enforcement use.
View JobAssociate Principal/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Chicago, IL
Senior forensic consulting role leading cyber intrusion investigations, digital forensics, and incident response engagements. Responsibilities include malware analysis, expert testimony, client management, business development, and team leadership within a forensic services practice.
View JobPrincipal Incident Response Security Consultant, Mandiant
New York
Senior Mandiant consultant managing complex incident response engagements, performing digital forensics, threat hunting, and malware analysis across cloud and on-premise environments, while communicating findings to executive and legal stakeholders.
View JobInformation Technology Specialist 4 (Information Security)
NYS Division of Homeland Security & Emergency Services
Albany, NY
Join a state Cyber Incident Response Team providing digital forensics, root cause analysis, and incident response support for cyber-attacks, malware, and ransomware events, while advising government entities on threat mitigation and security posture.
View JobSenior Security Engineer, Digital Forensics
San Jose, CA
Join a global 24/7 detection and response team to investigate security and privacy incidents, conduct digital forensic analysis, develop forensic tooling, and contribute to large-scale incident response across a major technology organisation.
View JobSenior Consultant, Digital Forensic and Incident Response (DFIR) (Remote)
Surefire Cyber Inc.
United States
Senior DFIR consultant role conducting forensic analysis and leading incident response engagements across ransomware, BEC, and malware cases. Involves client communication, mentoring junior staff, report writing, and on-call support.
View JobCyber Defense Forensics Lead
Gritter Francona
Ashburn, VA
Lead a cyber defense forensics team supporting DHS/CBP, directing digital forensic investigations across Windows, Linux, Mac and cloud systems, managing insider threat operations, DLP monitoring, evidence handling and formal investigation reporting.
View JobCryptologist
The Amatriot Group
Linthicum Heights, MD
Supports DoD cyber investigations by decrypting and recovering data from seized mobile devices, computers, and storage media. Produces technical reports for federal court proceedings and collaborates with digital forensic examiners on law enforcement and counterintelligence operations.
View JobSenior Forensic Technician/Analyst
Strategic Data Systems
Dahlgren, VA
Performs forensic analysis on computer systems, servers, and mobile devices at a naval warfare centre. Collects and preserves digital evidence, investigates cybersecurity incidents, recovers data, and produces forensic examination reports. May supervise junior analysts.
View JobLead Digital Investigations Engineer
MITRE
Orlando, FL
Lead digital investigations role supporting law enforcement sponsors, conducting forensic analysis of endpoints, mobile devices, cloud environments and networks, handling evidence, producing investigative reports, and assisting with incident response and containment efforts.
View JobSenior Forensic Developer – HYBRID!
AnaVation LLC
Chantilly, VA
Design and build specialised forensic software supporting federal cybercrime and digital evidence investigations. Responsibilities include file-system parsing, memory analysis, binary reverse engineering, mobile device parsing, and producing court-ready, validated investigative tooling.
View JobIT – Cyber Security Specialist IV
Apex Systems
Linthicum, MD
Seeking a cryptologist to decrypt data from mobile devices, computers and storage media, recover deleted data, perform chip-level extractions, and produce technical reports supporting federal law enforcement and counterintelligence investigations. TS/SCI clearance required.
View JobForensic Data Analyst
Akima Infrastructure Services
Fairfax, VA
Supports federal law enforcement with mobile device forensics including physical extractions, board-level repair, chip-off, vehicle infotainment analysis, evidence handling, chain-of-custody documentation, and expert courtroom testimony. Requires CCME certification and 3+ years' experience.
View JobCFL Intrusions Lead
Nightwing
Lexington Park, MD
Lead technical and management operations of a Cyber Forensics Laboratory supporting intrusion investigations, digital/network forensic examinations, malware analysis, and reverse engineering for the Defense Cyber Crime Center.
View JobSecurity Analyst: Forensic Investigations
PNC
Pittsburgh, PA
Conduct forensic investigations for a major bank, covering employee relations, email, and legal holds. Perform forensic examination, data loss prevention, log analysis, and corrective action recommendations using lab examiner machines.
View JobPrincipal/Digital Forensics, Incident Response & Cybersecurity (Forensic Services practice)
Charles River Associates
Dallas, TX
Senior principal role leading digital forensics and incident response engagements, including cyber breach investigations, malware analysis, forensic evidence handling, expert testimony, and cybersecurity advisory. Requires 10+ years' experience and team leadership capability.
View JobSenior Incident Response Consultant, DFIR
Zurich North America
St. Louis City County, MO
Senior consultant delivering expert incident response and digital forensics services to external clients, leading complex investigations, conducting forensic examinations, providing executive briefings, and supporting ransomware, BEC, and APT incidents with 24/7 on-call availability.
View JobConsulting Director, DFIR, Reactive Services (Unit 42)
Palo Alto Networks
Burbank, CA
Senior DFIR consulting director leading breach response engagements and forensic investigations for Unit 42 clients. Combines hands-on technical leadership with strategic advisory, client management, and team oversight across complex, high-pressure incidents.
View JobSenior Security Consultant, Incident Response, Mandiant
Cambridge, MA
Senior IR consultant at Mandiant/Google Cloud leading complex investigations, performing forensic analysis, threat hunting, and malware triage. Requires 5+ years end-to-end incident response and forensics experience across cloud, network, disk, and memory.
View JobForensic Computer Analyst
United States Postal Service
Dulles, VA
Conducts forensic examinations of digital and multimedia evidence in a federal laboratory setting, supporting criminal and civil investigations. Responsibilities include evidence analysis, expert witness testimony, training, and cybersecurity breach investigations.
View JobHost Based Systems Analyst III
Farfield Systems
Arlington, VA
Senior host forensics analyst supporting DHS's Hunt and Incident Response Team, conducting onsite/remote DFIR investigations, forensic imaging, malware analysis, report writing, and mentoring junior analysts across US federal engagements.
View JobSenior Cyber Lead
Quantum Sky
Linthicum Heights, MD
Lead digital forensics and incident response operations at a DoD cyber forensics laboratory, overseeing forensic examinations, intrusion analysis, malware analysis, evidence handling, and technical teams supporting classified cyber investigations.
View JobAssociate Director, Incident Response and Forensics
CSL Behring
King of Prussia, PA
Lead a global Digital Forensics and eDiscovery team, directing incident response, forensic analysis, threat hunting, and malware analysis. Partner with Security Operations and Legal to defend against cyber threats and manage eDiscovery matters.
View JobHost Based Systems Analyst III
ARSIEM
Arlington, VA
Seeks an experienced host forensics analyst to lead DFIR engagements for a government client, conducting forensic imaging, artifact analysis, malware evaluation, investigative reporting, and mentoring junior staff during onsite incident investigations.
View JobPrincipal Consultant, DFIR
LevelBlue LLC
United States
Seeking an experienced DFIR practitioner to lead cybersecurity incident investigations, conduct digital forensic analysis across diverse platforms, and manage threat actor communications and ransomware negotiations on behalf of clients.
View JobDigital Forensic Examiner
Metadata Forensics, LLC
Richmond, VA
Examines digital evidence across criminal, corporate and civil cases using tools such as Axiom, Cellebrite and FTK. Responsibilities include evidence management, data recovery, expert witness testimony, client reporting and forensic R&D.
View JobDigital Forensic Specialist (NMDOJ #1116)
State of New Mexico
Albuquerque, NM
Digital Forensic Examiner supporting an ICAC Task Force, conducting forensic analysis of computers, mobile devices and cloud storage, preparing court-ready reports, providing expert witness testimony, and training law enforcement partners on digital evidence.
View JobAssociate Principal/Digital Forensics (Forensic Services practice)
Charles River Associates
Oakland, CA
Senior digital forensics role within a forensic consulting practice, leading investigations into trade secret theft, conducting MacOS/iOS/Android artifact analysis, mobile extractions, expert witness testimony, and mentoring forensic teams across client engagements.
View JobDigital Forensics Technician I (Hourly)
City of Chula Vista, CA
Chula Vista, CA
Entry-level, part-time role supporting law enforcement digital forensics. Responsibilities include examining computers, mobile devices and storage media, extracting and preserving digital evidence, preparing forensic reports, and supporting video enhancement and redaction.
View JobDigital Forensic Examiner (Remote 10-99)
Elite Digital Forensics
Remote
Subcontractor role performing digital forensic examinations on computers, mobile devices, cloud data and IoT devices. Responsibilities include evidence extraction, forensic reporting, and expert testimony for individuals, businesses, and law firms nationwide.
View JobSenior Incident Response Consultant, Mandiant, Google Cloud
Chicago, IL
Senior IR consultant role at Mandiant/Google Cloud leading complex incident response engagements, conducting host/network/log forensics, malware triage, threat hunting, and communicating findings to technical and executive stakeholders.
View JobPrincipal Incident Response Consultant, Google Public Sector
Austin, TX
Lead incident response and forensic consulting engagements for US public sector clients, managing breach containment, threat hunting, and remediation while mentoring staff and developing new business opportunities leveraging Google and Mandiant capabilities.
View JobPrincipal/Digital Forensics, Incident Response & Cybersecurity (Forensic Services practice)
Charles River Associates
Chicago, IL
Senior consulting role leading cyber intrusion investigations, digital forensics, and incident response engagements. Responsibilities include forensic analysis, client management, team leadership, business development, and cybersecurity framework assessments for a global forensic services practice.
View JobConsulting Associate/Recovery Services (Forensic Services practice)
Charles River Associates
New York, NY
Hands-on forensic analyst and incident responder supporting ransomware, BEC, and fraud investigations. Responsibilities include digital forensic collection, endpoint containment, enterprise identity remediation, and producing defensible written findings for clients and counsel.
View JobDigital Forensic Technician
Infotrend Inc
Washington DC-Baltimore
Join a digital forensics laboratory supporting evidence collection, preservation, imaging, and documentation. Responsibilities include chain of custody management, forensic reporting, court testimony, tool validation, and training on emerging forensic techniques.
View JobDigital Forensics Analyst
Pantex Plant
Amarillo, TX
Conducts digital forensic investigations for an ethics and employee concerns department, performing evidence acquisition, forensic imaging, malware and registry analysis, data carving, and producing defensible investigative reports in support of legal and audit teams.
View JobPrincipal/Digital Forensics, Incident Response & Cybersecurity (Forensic Services practice)
Charles River Associates
Washington, DC
Senior consulting role leading digital forensics and incident response investigations, managing cross-functional teams, supporting fraud and cybercrime matters, providing expert testimony, and advising clients on cybersecurity frameworks and controls.
View JobDigital Forensics Lab Technician
TKC Holdings, Inc.
Birmingham, AL
Performs forensic data extractions from contraband mobile devices in correctional facilities, maintains chain-of-custody, prepares extraction summary reports, and uploads digital evidence into case management systems at a rate of ~50 devices per week.
View JobInformation Technology Manager II
Arrow Electronics
Englewood, CO
Senior DFIR lead role managing complex cyber incident investigations, digital forensics, malware analysis, and threat hunting across enterprise and cloud environments, while mentoring teams and driving security detection engineering improvements.
View JobDFIR Consultant
Tokio Marine HCC - Cyber & Professional Lines Group
United States
Join a specialist DFIR team responding to BEC and ransomware incidents. Responsibilities include evidence acquisition, forensic analysis, malware triage, timeline development, client communication, and written reporting across endpoint, server, and cloud environments.
View JobDFIR Consultant
Colossus Technologies Group
United States
DFIR Consultant role involving forensic artifact collection, Windows and memory forensics, IOC analysis, log review, and incident remediation. Requires up to 50% client travel, on-call availability, and 2+ years of DFIR experience.
View JobAssistant Director -Cyber Crimes Unit
St. Joseph County Prosecutor's Office
South Bend-Mishawaka Region
Supervisory role within a county prosecutor's Cyber Crimes Unit, conducting digital forensics investigations, producing evidential reports, managing unit operations, and collaborating with law enforcement, attorneys, and students.
View JobDFIR Cybersecurity Consultant (Remote)
PNG Cyber, LLC
United States
Conduct forensic analysis and incident response investigations covering ransomware, business email compromise and litigation support. Collect and analyse data, produce technical reports, develop modern forensic techniques, and assist with EDR deployment and triage.
View JobPrincipal DFIR Consultant – Remote (Anywhere in the U.S.)
GuidePoint Security
Remote
Serves as the highest individual contributor in a DFIR practice, leading complex ransomware, APT and insider threat investigations, conducting advanced host, network and cloud forensics, mentoring staff, and supporting business development.
View JobDirector, DFIR (Remote)
Surefire Cyber
Remote
Lead a team of 3–5 forensic professionals managing complex client-facing incident response engagements across the full IR lifecycle. Responsibilities include scoping, stakeholder communication, mentorship, and refining DFIR processes and best practices.
View JobPrincipal DFIR Consultant
Tokio Marine HCC
Remote
Lead digital forensics and incident response investigations for insured organisations, managing BEC and ransomware cases. Oversee triage, containment, forensic analysis, and team development while serving as incident commander for cyber events.
View JobPrincipal Consultant, Digital Forensic and Incident Response (DFIR) (Remote)
Surefire Cyber
Remote
Principal-level DFIR consultant leading forensic investigations across ransomware, BEC, and malware incidents. Manages end-to-end IR engagements, mentors junior staff, produces forensic reports, and advises technical and non-technical stakeholders remotely.
View JobEngineer, Cybersecurity DFIR
Intercontinental Exchange Holdings, Inc.
Jacksonville, FL
Join a cybersecurity DFIR team defending critical financial infrastructure. Responsibilities include endpoint forensics, incident management, threat hunting, behavioral analysis, intrusion detection, and implementing preventative controls against emerging global cyber threats.
View JobPrincipal Consultant, DFIR, Reactive Services (Unit 42) – Remote Weekend Shift
Palo Alto Networks
Burbank, CA
Senior DFIR practitioner role within Unit 42 leading incident response and forensic investigations across enterprise environments. Covers host, network and cloud forensics, ransomware response, evidence acquisition, and client remediation guidance on a weekend overnight shift.
View JobSenior Associate, Digital Forensics and Incident Response (DFIR)
Prescient
Chicago, IL
Seeks an experienced DFIR professional to lead and support cybersecurity investigations including ransomware and data breaches, perform forensic analysis of endpoints and cloud environments, and document findings for litigation and regulatory purposes.
View JobCyber Network Defense Analyst (CNDA) – Cloud Forensics
Argo Cyber Systems
Arlington, VA
Seeking an experienced DFIR specialist to lead cloud forensic investigations across Azure, AWS, and GCP environments for a federal mission, conducting evidence acquisition, artifact analysis, threat hunting, and producing executive-level reports.
View JobMedia Malware Analyst, Senior
Leidos
Odenton, MD
Support US Cyber Command by leading forensic analysis of compromised systems and media, static and dynamic malware analysis including reverse engineering, TTP identification, signature development, and delivering actionable threat intelligence reports to leadership.
View JobCyber Network Defense Analyst III
Nightwing Intelligence Solutions, LLC
Sterling, VA
Support DHS's Hunt and Incident Response Team performing Tier 2/3 DFIR investigations, forensic triage, network traffic analysis, threat hunting, and incident reporting to protect critical national cyber infrastructure.
View JobCyber Network Defense Analyst II
Nightwing Intelligence Solutions, LLC
Sterling, VA
Support DHS's Hunt and Incident Response Team performing Tier 2/3 DFIR investigations, proactive threat hunting, forensic triage, network traffic analysis, and incident documentation for critical national cyber infrastructure.
View JobContract Bench, Incident Responder (DFIR)
MOXFIVE
United States
Contract bench role for experienced DFIR professionals, supporting live incident response investigations across Windows, cloud, and SaaS environments. Flexible, part-time-friendly engagement covering ransomware, nation-state threats, and account takeovers.
View JobSenior Consultant, DFIR (Wed-Sun)
MOXFIVE
United States
Join a specialist IR consulting team responding to ransomware and nation-state threats across enterprise and cloud environments. Conduct forensic investigations on Windows, Mac, Linux, AWS, GCP and Azure, supporting clients through active incidents.
View JobSenior Consultant, DFIR
MOXFIVE
United States
Join a specialist IR consulting team responding to ransomware and nation-state threats across enterprise and cloud environments. Lead forensic investigations on Windows, Mac, Linux, and cloud platforms including AWS, Azure, and GCP.
View JobSenior Incident Response Consultant
Pondurance
Remote
Lead forensic investigations and incident response engagements for clients facing active cyber threats. Responsibilities span host/network forensics, ransomware response, remediation guidance, client communication, and supporting IT teams through recovery and rebuild.
View JobDFIR
Cyesec
United States
Join a DFIR team performing incident response and digital forensics investigations across cloud, Windows, and Linux environments. Responsibilities include threat hunting, TTP analysis, and supporting clients in detecting and mitigating cyber threats.
View JobPrincipal Engagement Lead (Remote)
Surefire Cyber
Remote
Lead multiple active client-facing cybersecurity incident response engagements, coordinating forensic consultants, scoping investigations, liaising with insurers and legal counsel, and guiding clients through the full IR lifecycle from detection to recovery.
View JobIncident Response and Forensics Lead
Accenture Federal Services
Germantown, MD
Lead and manage a DFIR team supporting US federal clients, overseeing incident response operations, forensic analysis of intrusion artifacts, technical mentorship of analysts, and senior stakeholder briefings. Requires TS clearance and 7+ years DFIR experience.
View JobLead Cyber Mission Threat Analyst – Clearance Required
Cydecor, Inc.
Port Hueneme, CA
Senior technical authority for cyber threat hunting, forensic investigations, and incident response supporting U.S. Navy cybersecurity operations. Leads enterprise monitoring, IOC analysis, malware analysis, and remediation strategy for critical DoD mission systems.
View JobDigital Forensics Lead
Agile Defense
Reston, VA
Lead digital forensics and insider-threat investigations within a 24/7 SOC environment, overseeing evidence handling, chain-of-custody, endpoint and network forensic analysis, malware triage, and mentoring junior analysts.
View JobDigital Forensic Examiner Trainee / Trainee-Forensic Scientist 1
State of Minnesota - Public Safety Dept
Minnesota
Trainee digital forensic examiner role within a state forensic science lab, examining digital evidence including computers, mobile devices and storage media for criminal cases, with court testimony training included.
View JobForensic Analyst (VIG-FA-01.080626)
Capital Solutions Group
Fort Meade, MD
Forensic Analyst role at Fort Meade requiring TS/SCI with polygraphs. Responsibilities include examining computers, networks, devices and digital evidence, exploiting captured media, investigating security incidents and deriving actionable intelligence.
View JobDigital Forensics Consultant (PST hours Seattle Area preferred)
Lighthouse Document Technologies Inc
Seattle, WA
Provides forensic analysis and ESI collection from computers, mobile devices, cloud repositories and networks. Prepares detailed forensic reports and declarations, conducts custodian interviews, and offers court testimony in support of investigations and litigation.
View JobICITAP Forensic Digital Evidence Advisor
Amentum
Remote
Subject matter expert advising and mentoring host-nation forensic examiners on digital evidence collection, examination, analysis tools, chain of custody, and report writing under a DOJ ICITAP programme supporting international rule-of-law initiatives.
View JobSenior Forensic Analyst
Revolutional, LLC
Washington, DC
Conduct forensic evaluations of federal enterprise systems suspected of compromise, performing host and network analysis, maintaining chain of custody, producing legally defensible reports, and interfacing with the intelligence community. Requires active Top Secret clearance.
View JobForensic Science, Digital Forensics – Full-Time, Non-Tenure Track Assistant Professor
University of Central Oklahoma
Edmond, OK
Teach undergraduate and graduate digital forensics courses including mobile, network and lab-based modules; mentor student research; develop curriculum; support expert witness and legal standards training within an accredited forensic science programme.
View JobAOUSC – Forensic and Malware Lead
cFocus Software Incorporated
Washington, DC
Lead digital forensics and malware analysis for a federal judiciary SOC, conducting disk, memory and registry analysis, static/dynamic malware analysis, evidence handling, and forensic reporting across Windows, Linux, macOS and cloud environments.
View JobAssociate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Washington, DC
Consulting forensics associate supporting clients through cybersecurity investigations, data breach response, digital evidence acquisition and analysis, malware hunting, incident response, and expert report drafting for legal proceedings.
View JobCriminal Crypto Technical Support Specialist- Expert – 4 Tyler Texas
HallieMorgan Technologies
Tyler, TX
Expert-level crypto forensic investigator supporting federal law enforcement in Tyler, TX. Responsibilities include blockchain tracing, digital evidence analysis, financial forensics, OSINT, and producing findings for criminal prosecutions and judicial forfeiture actions.
View JobComputer Forensics Investigator
XTREME SOLUTIONS INC
Atlanta, GA
Seeking a certified Computer Forensics Investigator to collect, preserve and analyse digital evidence from computers, mobile devices and networks, produce detailed forensic reports, and support legal proceedings and cybersecurity teams.
View JobDigital Forensic Examiner II
City of New York
New York, NY
Bronx District Attorney's Digital Forensics Laboratory seeks an examiner to analyse mobile devices, computers and storage media, perform data recovery, write forensic reports, testify in court proceedings and guide junior staff.
View JobDigital Forensic Analyst I
Contact Government Services, LLC
Washington, DC
Mid-level forensic analyst role focused on preservation and collection of mobile device and cloud-stored data. Involves on-site and remote acquisitions, chain of custody management, and use of industry-standard forensic tools for government clients.
View JobDigital Forensic Examiners 23-E-25
Office of the Illinois Attorney General
Chicago, IL
Conduct forensic examinations of digital evidence for criminal investigations in a lab and on-scene environment, providing technical support to investigators and attorneys within the Illinois Attorney General's Office.
View JobDigital Forensic Examiner (DFE) 24-E-10
Office of the Illinois Attorney General
Springfield, IL
Conduct forensic examinations of digital evidence for criminal investigations in laboratory and on-scene environments, provide technical support to investigators and attorneys, and qualify as an expert witness in Illinois courts.
View JobSenior Digital Forensics Examiner
Flashback Data
Washington, DC
Senior examiner role at an ISO 17025-accredited digital forensics lab, conducting device examinations across civil and criminal cases, producing peer-reviewed lab reports, and providing expert testimony in depositions and court proceedings.
View JobDigital Forensic Examiner
City of Goodyear, AZ
Goodyear, AZ
Performs advanced forensic examinations of computers, mobile devices, cloud and network environments for criminal investigations. Collects and preserves digital evidence, conducts cybersecurity analysis, prepares expert reports and provides court testimony.
View JobMinimum qualifications
CyberJobs.Com
San Francisco, CA
Security Engineer role on a global Detection and Response team, performing DFIR investigations, participating in large-scale security incidents, developing forensic tooling, and applying digital forensics expertise across a complex enterprise environment.
View JobDigital Forensics Lead (26-091) with Security Clearance
Strategic Analysis Incorporated
Washington, DC
Lead and conduct digital forensics investigations into agency systems and devices, develop and mature the forensics programme, and deliver analysis reports to senior leadership within a federal health research agency.
View JobIncident Response Expert
Sygnia
United States
Lead complex forensic investigations and incident response engagements involving ransomware, nation-state attacks, and advanced threats. Conduct host, network, and memory forensics, threat hunting, IOC identification, and deliver technical reports to clients.
View JobDigital Forensic Examiner 1
Commonwealth of Pennsylvania
Crawford County, PA
Entry-level forensic examiner role with Pennsylvania State Police, analysing electronic devices, recovering digital evidence, supporting criminal investigations, assisting at crime scenes, and preparing evidence for court proceedings.
View JobDigital Forensics Analyst
Infotree Global Solutions
Santa Clara, CA
Conducts enterprise digital forensics investigations covering insider threat, data exfiltration, and misconduct cases. Requires expertise in endpoint, cloud, and M365 forensics, EDR platforms, forensic tooling, and AI-augmented investigative workflows.
View JobSenior Associate/Digital Forensics (Forensic Services practice)
Charles River Associates
Houston, TX
Senior forensic professional conducting digital evidence collection and analysis across MacOS, iOS, Windows and Linux platforms, including mobile extractions, trade secret investigations, cloud storage analysis and team leadership within a consulting practice.
View JobDigital Forensics Senior Consultant
Crowe
The Woodlands, TX
Lead complex digital forensic investigations across computers, mobile devices, cloud platforms, and email systems. Manage evidence intake, chain of custody, forensic analysis, client reporting, and mentor junior consultants within a consulting practice.
View JobSenior Computer Forensics Analyst
Capsicum Group, LLC
Miami-Fort Lauderdale
Senior forensics analyst conducting full forensic examinations of computers, servers and mobile devices, managing a forensics lab, mentoring staff, producing expert reports and providing court testimony across legal and corporate investigations.
View JobHost Based Systems Analyst II
ARSIEM
Arlington, VA
Government-facing Cyber Network Defense Analyst role combining incident response, network traffic analysis, digital forensics, threat hunting, and malicious activity investigation to protect federal client environments in Arlington, VA.
View JobSenior Investigator Digital Forensics, Incident Response (DFIR)
Accenture
Chicago, IL
Senior DFIR investigator conducting complex forensic analysis, threat hunting, memory forensics, and malware triage across enterprise, cloud, and OT environments. Mentors junior staff, leads large investigation workstreams, and delivers client-facing reports and briefings.
View JobCSIRT Analyst
CTG
Buffalo, NY
CSIRT Analyst role within a managed detection and response team, handling escalated incidents, conducting DFIR investigations, compromise assessments, threat hunting, threat intelligence collection, and contributing to detection engineering and playbook development.
View JobForensics Lead
MANTECH
Chandler, AZ
Lead digital forensics operations for a DHS cybersecurity programme, conducting remote imaging, media analysis, malware reverse engineering, and forensically sound data preservation to counter Advanced Persistent Threats across complex network environments.
View JobThreat Hunt Analyst – High – Digital Forensics
Koniag Government Services
Washington, DC
Senior analyst role supporting a US federal agency, designing and leading threat hunting programmes while conducting advanced digital forensics investigations, malware analysis, and incident response across on-premises, cloud, and hybrid environments.
View JobComputer Specialist * Network and Digital Forensics Examiner (Sa with Security Clearance
Longeviti, LLC
San Diego, CA
Support NCIS as a Digital Forensic Examiner conducting complex forensic examinations of seized digital media, network intrusion analysis, evidence collection, and expert witness testimony. Requires active TS/SCI clearance and DoD/FBI CART certification.
View JobDigital Forensics and Incident Response Advisory – Manager
CohnReznick
Tysons Corner, VA
Lead complex cybersecurity incident response and digital forensics investigations involving APTs, ransomware and data breaches. Perform endpoint, mobile and memory forensics, mentor junior analysts, advise clients and attorneys, and help build the IR practice.
View JobGlobal Director of Autonomous Incident Response and Forensic Analysis
MUFG
Jersey City, NJ
Lead a 24/7 global incident response and digital forensics function for a major financial group, overseeing strategy, AI-assisted workflows, evidence handling, executive reporting, and cross-regional teams and budgets.
View JobDigital Forensics SME
ActioNet, Inc.
Rockville, MD
Senior DFIR role requiring 8+ years' experience performing advanced forensic analysis on endpoints, networks and digital media, malware analysis, evidence handling, IOC production and forensic reporting within a federal agency environment. TS/DOE Q clearance required.
View JobInformation Security Forensic Analyst
Ryder System, Inc.
Coral Gables, FL
Supports 24/7 SOC incident response through host and network forensic analysis, personnel investigations, and security incident remediation. Produces executive and technical reports, manages evidence handling, and collaborates with legal and security teams across a distributed enterprise.
View JobDigital Forensics Analyst
Cyber Management International Corporation
Arlington, VA
Experienced Digital Forensics Analyst needed to conduct forensic examinations of mobile devices, computers, and cloud data for a Diplomatic Security Cyber Mission Program, producing reports and providing expert witness testimony in legal proceedings.
View JobDigital Forensic Analyst I with Security Clearance
CGS Federal (Contact Government Services)
Atlanta, GA
Performs forensic data collection and analysis across mobile devices, cloud, and endpoints in support of government clients. Coordinates with legal teams, manages chain of custody, and travels for on-site collections using industry-standard forensic tools.
View JobConsulting Associate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Houston, TX
Join a forensic services consulting practice to conduct cybersecurity investigations, digital forensic analysis, incident response, and malware analysis. Support counsel with expert reports, affidavits, and testimony across data breach and fraud matters.
View JobDigital Forensics Consultant (PST hours)
Lighthouse Document Technologies Inc
Remote
Provides forensic analysis and ESI collection from computers, mobile devices, cloud repositories and networks. Prepares detailed forensic reports and declarations, assists with client scoping, and occasionally provides court testimony in legal proceedings.
View JobSenior Security Engineer, Digital Forensics
New York, NY
Senior DFIR engineer joining a global on-call security response team, investigating security and privacy incidents, developing forensic tooling, and applying broad digital forensics and incident response expertise across a large-scale enterprise environment.
View JobDigital Forensics Analyst
DELAWARE RESOURCE GROUP OF OKLAHOMA LLC
Fayetteville, NC
Supports DoD operations conducting digital forensic investigations, malware analysis, incident response, and vulnerability assessments in classified environments. Requires TS/SCI clearance, reverse engineering skills, and 6+ years of DFIR experience.
View JobDigital Forensic Examiner 1
Commonwealth of PA
Meadville, PA
Entry-level forensic examiner role with a state police agency, analysing electronic devices, recovering digital evidence, assisting at crime scenes, and preparing evidence for criminal court cases under expert supervision.
View JobDigital Forensics / Malware Analyst
Digital Global Connectors
McLean, VA
Experienced forensics and malware analyst sought to support a federal information security program. Responsibilities include forensic acquisition, evidence preservation, malware reverse engineering, IOC development, and incident response support using tools such as EnCase, Ghidra, and Volatility.
View JobSenior Digital Forensics Automation SME
Peraton
Linthicum, MD
Senior SME role optimising and automating digital forensics workflows for a federal government customer. Responsibilities include designing automated evidence pipelines, standardising ICAC investigative processes, ensuring lab accreditation compliance, and supporting criminal trial proceedings.
View JobDigital Forensics Consultant (Onsite in San Francisco Lab)
Lighthouse Document Technologies Inc
San Francisco, CA
Performs forensic analysis and ESI collections from computers, mobile devices, cloud repositories and networks in support of investigations and litigation. Prepares detailed reports, provides court testimony, and liaises with clients on scoping and project planning.
View JobDigital Forensics Analyst (Cyber Analyst III) TS/SCI
Akima, LLC
Fort Bragg, NC
Conduct forensically sound acquisition, examination, and reporting of digital evidence supporting US Special Operations Command missions. Responsibilities include mobile/computer forensics, malware triage, chain-of-custody management, and producing intelligence-linked forensic reports. TS/SCI clearance required.
View JobAssociate Principal/Digital Forensics (Forensic Services practice)
Charles River Associates
Washington, DC
Leads digital forensic investigations primarily involving trade secret theft, performing device collections, artifact analysis across macOS/iOS/Android/Windows/Linux, expert witness testimony, and team/business development within a forensic consulting practice.
View JobTier II-III Incident Response Analyst-Senior
Boston Government Services, LLC (BGS)
Knoxville
Senior analyst leading advanced incident response investigations, forensic analysis, malware analysis, threat hunting, and APT hunting for government clients. Involves evidence handling, chain-of-custody, IOC development, and SOC engineering support across complex secure environments.
View JobSenior Forensic Analyst
Revolutional
Kansas City
Conduct end-to-end forensic evaluations of federal enterprise systems suspected of compromise, including host and network analysis, chain of custody management, legally defensible reporting, and intelligence community liaison. Active Top Secret clearance required.
View JobDigital Forensic Examiner 1
Commonwealth of Pennsylvania
Indiana County, PA
Hands-on digital forensic examiner role supporting criminal investigations by analysing electronic devices, recovering data, preserving evidence, maintaining chain of custody, and providing court testimony for law enforcement.
View JobForensic Computer Analyst
United States Postal Service
Anaheim, CA
Conducts forensic examinations of digital and multimedia evidence for criminal and civil investigations, produces expert reports and court testimony, advises on evidence handling, delivers training, and supports cybersecurity breach investigations.
View JobSenior Forensic Developer
AnaVation LLC
Washington, DC
Design and develop advanced forensic software for federal cybercrime and digital evidence investigations, including file system parsing, memory analysis, mobile device forensics, and automated investigative workflows meeting strict evidentiary standards.
View JobDigital Forensics and Incident Response, Senior Manager
Booz Allen Hamilton
Washington, DC
Senior manager role leading multiple DFIR teams, overseeing complex forensic investigations and high-severity incident response engagements, managing client relationships with insurers and legal counsel, and driving practice growth and team development.
View JobLead Cyber Defense Forensics Analyst
Revolutional, LLC
Washington, DC
Senior forensic practitioner leading complex digital forensic investigations within a classified federal facility. Responsibilities include host and network forensics, evidence acquisition, malware triage, chain of custody, incident response support, and threat hunt contribution.
View JobDigital Forensics SME
AnaVation
Washington, DC
Senior digital forensics expert supporting federal law enforcement investigations, conducting mobile, disk and memory forensics, developing advanced forensic capabilities, mentoring investigators, and preparing court-admissible reports for cybercrime and national security missions.
View JobDigital Forensics Analyst
SOLUTION ONE INDUSTRIES
Fayetteville, NC
Seeking an experienced examiner to conduct forensic triage, acquisition, and exploitation of digital media including mobile devices, computers, and removable media, supporting USSOCOM intelligence requirements with deployed and OCONUS potential.
View JobPolice Digital Forensic Analyst
The City of Orem
Orem, UT
Performs digital forensic examination and analysis of electronic evidence to support criminal investigations, assists with suspect identification, prepares evidentiary materials for judicial proceedings, and delivers expert courtroom testimony.
View JobDigital Forensics & eDiscovery Manager
KLA
Milpitas, CA
Lead a global digital forensics and eDiscovery team within a legal compliance function, overseeing forensic investigations, ESI preservation, legal holds, evidence collection and analysis, insider risk support, and information governance across a multinational organisation.
View JobDigital Forensic Examiner
City of Fort Myers, FL
Fort Myers, FL
Conducts forensic examinations of computers, mobile devices, and storage media for criminal investigations. Recovers and analyses digital evidence, prepares detailed reports, and provides expert court testimony in support of law enforcement.
View JobSenior Consultant, Digital Forensic and Incident Response (DFIR) (Remote)
Surefire Cyber
Remote
Senior DFIR consultant role conducting forensic investigations and incident response engagements across ransomware, BEC and malware cases. Leads small-to-medium investigations, mentors junior staff, and delivers client-facing analysis and written reports.
View JobHost Forensic Analyst/Host Based Systems Analyst
Node.Digital LLC
Arlington, VA
Supports federal forensic investigations by leading evidence collection, conducting host-based digital forensic analysis, writing technical reports, mentoring junior staff, and liaising with stakeholders on forensic methodologies. Requires TS/SCI clearance and 5+ years' experience.
View JobAOUSC – Digital Forensics Analyst
cFocus Software Incorporated
Washington, DC
Support the Administrative Office of the US Courts as a Digital Forensics Analyst, performing disk, memory and registry analysis using tools such as Axiom, EnCase, FTK and Volatility, adhering to federal evidence and chain of custody requirements.
View JobDigital Forensics Analyst
City of Hickory
Hickory, NC
Join a police department forensics unit supporting criminal investigations through digital evidence acquisition, preservation, analysis, and reporting. Covers mobile, computer, video, and call data record forensics with court testimony support.
View JobDigital Forensics Investigator – Vice President
Morgan Stanley
Alpharetta, GA
Lead end-to-end digital forensic investigations and eDiscovery activities supporting insider risk, incident response, litigation, and compliance matters within a global financial services firm's Cyber, Data, Risk & Resilience function.
View JobCyber Crime Investigator
Pop-Up Talent
Fredericksburg, VA
Technical SME role supporting counterintelligence and counterterrorism investigations, conducting digital forensic examinations, network intrusion analysis, malware analysis, and evidence acquisition in accordance with legal and evidentiary standards. TS/SCI clearance required.
View JobDigital Forensic Specialist
County of Davidson
Lexington, NC
Civilian law enforcement role responsible for processing digital evidence, maintaining forensic lab equipment, assisting crime scene investigators, preparing reports, and providing expert court testimony across a wide range of criminal investigations.
View JobSenior Director of Digital Forensics & Incident Response
Otis
Farmington, CT
Strategic senior leader overseeing a global 24x7 SOC, enterprise incident response, digital forensic investigations, insider risk, DLP, and eDiscovery programmes, advising executives during major cyber incidents.
View JobDigital Forensic Examiner
CACI
Fort Bragg, NC
Support Special Operations as a Digital Forensic Examiner at Fort Bragg, conducting triage and technical exploitation of computers, mobile devices and multimedia. Generate intelligence reports and manage forensic operations using industry-standard tools. TS/SCI clearance required.
View JobSenior Digital Forensics Analyst
SkyePoint Decisions
Arlington, VA
Senior forensic analyst supporting a federal cybersecurity mission, performing in-depth examination of mobile devices, storage media, cloud and computer systems, providing expert witness testimony and on-scene search warrant support for criminal and civil proceedings.
View JobSenior Director, Digital Forensics and Incident Response
BlueVoyant
Remote
Senior leadership role managing complex DFIR engagements end-to-end, acting as incident commander for ransomware, BEC and cloud compromise investigations while advising executives, legal counsel and technical teams across multiple concurrent incidents.
View JobDigital Forensics and Incident Response (DFIR) Consultant
Cypfer
Houston, TX
DFIR consultant role focused on ransomware and cyber-attack response, performing forensic acquisitions, artifact analysis, log review, timeline correlation, and threat remediation for insurance carriers, law firms, and enterprise clients.
View JobDigital Media Forensics Analyst Expert
General Dynamics Information Technology
Fort Meade, MD
Senior digital forensics expert providing forensic examination and cyber analytical support to US Army counterintelligence and counterterrorism investigations, including evidence acquisition, artifact analysis, mobile forensics, reporting, and emerging technology evaluation.
View JobSenior Digital Forensic Analyst
Peraton
Arlington, VA
Conduct forensic examinations of digital devices, mobile platforms, and cloud sources in support of federal investigations. Produce expert reports, provide witness testimony, support search warrant executions, and mentor junior analysts using industry-standard forensic tools.
View JobPrincipal Consultant, Cloud DFIR (Unit 42) – Remote
Palo Alto Networks
Harrisburg, PA
Lead cloud-focused DFIR investigations across AWS, Azure, and GCP environments. Conduct forensic analysis, investigate breaches and ransomware, guide containment and recovery, and deliver executive-level reporting and remediation recommendations.
View JobDigital Forensics Analyst
SAIC
Chantilly, VA
Perform forensic acquisition and analysis on computers, mobile, IoT, cloud and digital media devices. Review evidentiary data to identify threats and data spills, produce analytical reports, and maintain forensic tools per SWGDE/NIST guidelines. Requires TS/SCI with Poly.
View JobCyber Forensic Specialist
Accenture Federal Services
Arlington, VA
Join a DFIR team supporting a federal cyber incident response function. Conduct digital forensic analysis, internal investigations, litigation holds, eDiscovery collections, and evidence management using tools such as EnCase, FTK, and Magnet Axiom.
View JobDigital Forensics Examiner
Peraton
Linthicum, MD
Senior digital forensics examiner supporting federal criminal investigations, analysing computers, mobile devices and storage media using tools such as EnCase, FTK and Cellebrite. Prepares court-ready reports and may testify as an expert witness. Requires active Secret clearance.
View JobIBM CISO – Cybersecurity Forensic Analyst
IBM
Austin, TX
Join IBM's CSIRT as a Forensic Analyst supporting incident response and digital forensics investigations across the Americas. Conduct endpoint, network, and cloud forensics, preserve evidence, reconstruct attack timelines, and produce defensible reports for technical and executive stakeholders.
View JobSenior Investigations Analyst – Digital Forensics
Corebridge Financial
Houston, TX
Lead digital forensics investigations for a financial services firm, conducting forensically sound evidence acquisition, artifact analysis, email/cloud forensics, and expert reporting for legal, HR, and executive stakeholders using tools like Nuix and Axiom.
View JobJunior Digital Forensic Analyst
Peraton
Arlington, VA
Support a federal forensics lab conducting examinations of digital media including mobile devices, computers and cloud sources. Produce court-admissible reports, provide expert witness testimony, and assist during search warrant executions for criminal and cyber investigations.
View JobSenior Investigations Analyst – Digital Forensics
Corebridge Financial
Jersey City, NJ
Lead digital forensics investigator responsible for forensic acquisition, artifact analysis, data recovery, and expert reporting on security breaches, policy violations, and litigation matters using tools including Nuix, Axiom, Cellebrite, and EnCase.
View JobDigital Forensics Cybersecurity Advisor
Booz Allen Hamilton
Washington, DC
Serve as a strategic digital forensics advisor supporting a US government health research agency. Conduct forensic investigations across Windows, MacOS, and iOS, manage evidence collection, and assess cybersecurity risks using tools including CrowdStrike and Microsoft Defender.
View JobCyber Forensics Analyst
ECS
Portland, OR
Hands-on forensic analyst role supporting SOC investigations, incident response, malware analysis, and threat hunting. Responsibilities include endpoint/memory forensics, IOC development, reporting, and cross-team collaboration using industry-standard DFIR tools.
View JobDigital Forensics Analyst ( Python, Splunk, Arcsight)
BAE Systems, Inc.
Falls Church, VA
Conduct digital media acquisition, evidence analysis, and incident response in an enterprise environment. Responsibilities include deleted file recovery, USB/data carving, malware analysis, insider threat investigations, and Python automation development.
View JobGet new DFIR jobs in your inbox
A weekly round-up of every new listing on the board — no noise, unsubscribe anytime.