CYE's DFIR team is responsible for responding to our clients' cyber incidents and crises. Our group is expanding. If you see yourself in the front line of the cybersecurity domain as a digital ...
Incident Response Lead, DFIR
Manhattan, NY · On-site
$150 - $210/hr
Asymmetric is the world's first AI-native DFIR lab. We build human-AI analyst teams designed from the ground up to redefine the next generation of DFIR. Our AI agents take on the repetitive ...
Incident Response Lead, DFIR
Manhattan, NY · On-site
$150 - $210/hr
Asymmetric is the world's first AI-native DFIR lab. We build human-AI analyst teams designed from the ground up to redefine the next generation of DFIR. Our AI agents take on the repetitive ...
Principal DFIR Consultant Location: Remote, USA Reports to: Director of Consulting, DFIR Employment Type: Full time Job Req ID: 2026 - 456 Req Begin Date: 5/18/2026 About Vector3 Vector3, Inc., is an ...
Principal DFIR Consultant Location: Remote, USA Reports to: Director of Consulting, DFIR Employment Type: Full time Job Req ID: 2026 - 456 Req Begin Date: 5/18/2026 About Vector3 Vector3, Inc., is an ...
Principal DFIR Consultant Location: Remote, USA Reports to:Director of Consulting, DFIR Employment Type: Full time Job Req ID: 2026 - 456 Req Begin Date: 5/18/2026 About Vector3 Vector3, Inc., is an ...
Principal DFIR Consultant Location: Remote, USA Reports to:Director of Consulting, DFIR Employment Type: Full time Job Req ID: 2026 - 456 Req Begin Date: 5/18/2026 About Vector3 Vector3, Inc., is an ...
$90 - $130/hr
In addition to core DFIR responsibilities, this practitioner will possess the experience and judgment to conduct Threat Actor (TA) communications and ransomware/extortion negotiations when required ...
$90 - $130/hr
In addition to core DFIR responsibilities, this practitioner will possess the experience and judgment to conduct Threat Actor (TA) communications and ransomware/extortion negotiations when required ...
DFIR Consultant Location: Remote, USA Reports to: Managing Director Employment Type: Full time Job Req ID: 2026 Req Begin Date: 8/11/2026 About Vector3 Vector3, Inc., is an incident response firm ...
DFIR Consultant Location: Remote, USA Reports to: Managing Director Employment Type: Full time Job Req ID: 2026 Req Begin Date: 8/11/2026 About Vector3 Vector3, Inc., is an incident response firm ...
DFIR Consultant Location: Remote, USA Reports to: Managing Director Employment Type: Full time Job Req ID: 2026 Req Begin Date: 8/11/2026 About Vector3 Vector3, Inc., is an incident response firm ...
DFIR Consultant Location: Remote, USA Reports to: Managing Director Employment Type: Full time Job Req ID: 2026 Req Begin Date: 8/11/2026 About Vector3 Vector3, Inc., is an incident response firm ...
Principal Consultant, Cloud DFIR (Unit 42) - Remote
$60 - $81.75/hr
The Principal Consultant, Cloud DFIR will lead cloud-focused incident response and digital forensics investigations, serving as a technical lead on active incidents and providing actionable ...
Principal Consultant, Cloud DFIR (Unit 42) - Remote
$60 - $81.75/hr
The Principal Consultant, Cloud DFIR will lead cloud-focused incident response and digital forensics investigations, serving as a technical lead on active incidents and providing actionable ...
This position is ideal for a seasoned DFIR practitioner who thrives in fast-paced incident response environments and is passionate about solving complex technical problems while working directly with ...
This position is ideal for a seasoned DFIR practitioner who thrives in fast-paced incident response environments and is passionate about solving complex technical problems while working directly with ...
$151K - $208K/yr
This position is ideal for an experienced DFIR practitioner who thrives in fast-paced incident response environments and enjoys solving complex technical challenges during critical security events.
$151K - $208K/yr
This position is ideal for an experienced DFIR practitioner who thrives in fast-paced incident response environments and enjoys solving complex technical challenges during critical security events.
Qualifications : Required : • Bachelor's degree or equivalent practical experience. • 6-8+ years of experience in DFIR, incident response, security operations, or related cybersecurity ...
Qualifications : Required : • Bachelor's degree or equivalent practical experience. • 6-8+ years of experience in DFIR, incident response, security operations, or related cybersecurity ...
Prescient has built a world class DFIR capability over the past several years and is looking to hire a Senior Associate with experience from the public and/or private sector to build on our success ...
Prescient has built a world class DFIR capability over the past several years and is looking to hire a Senior Associate with experience from the public and/or private sector to build on our success ...
Prescient has built a world class DFIR capability over the past several years and is looking to hire a Senior Associate with experience from the public and/or private sector to build on our success ...
Quick apply
Prescient has built a world class DFIR capability over the past several years and is looking to hire a Senior Associate with experience from the public and/or private sector to build on our success ...
Prescient has built a world class DFIR capability over the past several years and is looking to hire a Senior Associate with experience from the public and/or private sector to build on our success ...
Prescient has built a world class DFIR capability over the past several years and is looking to hire a Senior Associate with experience from the public and/or private sector to build on our success ...
Senior Engineer, Cybersecurity DFIR
Jacksonville, FL · On-site
$105K - $145K/yr
Overview Job Purpose The ICE Cybersecurity Digital Forensics and Incident Response (DFIR) team is responsible for defending critical financial infrastructure from Global Cyber threats. We leverage an ...
Senior Engineer, Cybersecurity DFIR
Jacksonville, FL · On-site
$105K - $145K/yr
Overview Job Purpose The ICE Cybersecurity Digital Forensics and Incident Response (DFIR) team is responsible for defending critical financial infrastructure from Global Cyber threats. We leverage an ...
Senior Engineer, Cybersecurity DFIR
Jacksonville, FL · Hybrid
$106K - $145K/yr
Overview Job Purpose The ICE Cybersecurity Digital Forensics and Incident Response (DFIR) team is responsible for defending critical financial infrastructure from Global Cyber threats. We leverage an ...
Senior Engineer, Cybersecurity DFIR
Jacksonville, FL · Hybrid
$106K - $145K/yr
Overview Job Purpose The ICE Cybersecurity Digital Forensics and Incident Response (DFIR) team is responsible for defending critical financial infrastructure from Global Cyber threats. We leverage an ...
$151K - $208K/yr
Job Summary Job Summary The Principal Consultant, Cloud DFIR, Reactive Services is a senior individual contributor within Unit 42 responsible for leading cloud-focused incident response and digital ...
$151K - $208K/yr
Job Summary Job Summary The Principal Consultant, Cloud DFIR, Reactive Services is a senior individual contributor within Unit 42 responsible for leading cloud-focused incident response and digital ...
Consulting Director, DFIR, Reactive Services (Unit 42)
Burbank, CA · On-site
$183 - $252/hr
Lead breach response engagements, providing both strategic direction and hands-on DFIR leadership * Deliver expert consulting across incident response, digital forensics, and cyber risk scenarios
Consulting Director, DFIR, Reactive Services (Unit 42)
Burbank, CA · On-site
$183 - $252/hr
Lead breach response engagements, providing both strategic direction and hands-on DFIR leadership * Deliver expert consulting across incident response, digital forensics, and cyber risk scenarios
$65K - $86K/yr
Fundierte Kenntnisse in Forensik, Betriebssystemen, Netzwerkanalyse sowie gängigen DFIR-Tools * Sehr starkes analytisches Denkvermögen, strukturierte Arbeitsweise und hohe Problemlösungskompetenz ...
$65K - $86K/yr
Fundierte Kenntnisse in Forensik, Betriebssystemen, Netzwerkanalyse sowie gängigen DFIR-Tools * Sehr starkes analytisches Denkvermögen, strukturierte Arbeitsweise und hohe Problemlösungskompetenz ...
Building on our success in incident response, we are launching a Managed Detection and Response (MDR) service designed to protect our DFIR clients from future incidents. The MDR program will deliver ...
Building on our success in incident response, we are launching a Managed Detection and Response (MDR) service designed to protect our DFIR clients from future incidents. The MDR program will deliver ...
Dfir information
See salary details
$33.5K - $46.3K
1% of jobs
$46.3K - $59K
0% of jobs
$59K - $71.8K
0% of jobs
$71.8K - $84.6K
0% of jobs
$84.6K - $97.4K
4% of jobs
$109.3K is the 25th percentile. Wages below this are outliers.
$97.4K - $110.1K
21% of jobs
$110.1K - $122.9K
15% of jobs
The median wage is $132.8K / yr.
$122.9K - $135.7K
12% of jobs
$135.7K - $148.5K
14% of jobs
$148.5K - $161.2K
7% of jobs
$161.9K is the 75th percentile. Wages above this are outliers.
$161.2K - $174K
26% of jobs
$33.5K
$137.7K
$174K
How much do dfir jobs pay per year?
What is a DFIR?
A DFIR (Digital Forensics and Incident Response) job involves investigating cybersecurity incidents, analyzing digital evidence, and responding to security breaches. Professionals in this field use forensic tools to recover data, trace attack origins, and mitigate cyber threats. DFIR experts work in law enforcement, private security firms, and corporate cybersecurity teams. Their responsibilities include malware analysis, log analysis, and ensuring systems are secured against future attacks. Strong technical skills in digital forensics, networking, and security best practices are essential for success in this field.
What are the key skills and qualifications needed to thrive in the DFIR position?
To thrive as a DFIR (Digital Forensics and Incident Response) professional, you need expertise in computer forensics, incident response methodologies, and network security, typically supported by a related degree or cybersecurity certifications like GCFA, GCFE, or CEH. Familiarity with forensic imaging tools (e.g., EnCase, FTK, X-Ways), SIEM platforms, and scripting languages is crucial for investigating and addressing security incidents. Analytical thinking, problem-solving, and strong communication skills set individuals apart in this position. These capabilities are essential for accurately identifying, analyzing, and mitigating digital threats in high-pressure environments.
What are some common challenges faced by DFIR professionals in their daily work?
DFIR professionals often handle cases involving complex cyberattacks, requiring them to quickly analyze large volumes of digital evidence and determine the scope of incidents. Challenges can include working under tight time constraints, managing sensitive information, and staying updated with rapidly evolving attack techniques and security technologies. Teamwork and collaboration with other IT and security personnel are frequent, as incident response is rarely a solo effort. Success in this field typically relies on a balance of technical expertise, methodical investigation, and the ability to adapt to new threats and technologies on a daily basis.
What cities are hiring for Dfir jobs?
Cities with the most Dfir job openings:
What are the most commonly searched types of Dfir jobs?
The most popular types of Dfir jobs are:
What states have the most Dfir jobs?
States with the most job openings for Dfir jobs include:
What job categories do people searching Dfir jobs look for?
The top searched job categories for Dfir jobs are:

Job description
Our group is expanding. If you see yourself in the front line of the cybersecurity domain as a digital forensic and incident response (DFIR) talent, your place is with us. As a DFIR team member, you will participate in hands-on security research and investigations, helping our customers understand and mitigate cyber threats and attacks.
Responsibilities
- Perform incident response lifecycle and real-time activities, including detection and analysis, containment and eradication, and recovery
- Perform incident response in a cloud environment (Azure, AWS etc.).
- Perform digital forensics investigations
- Research and analyze tactics, techniques, and procedures (TTPs) used by malicious actors
- Perform hunt-evil and find-evil activities for proactively detecting attacks
- Work closely with our in-house red team, CTI, and cyber architect teams
- Work closely with worldwide companies, CISOs, and technology experts
Qualifications
- Must be based in the Central or Eastern regions of the US
- 1-2 years of experience as a DFIR team member
- Experience with performing digital forensics in a cloud environment
- Experience with performing digital forensics of Windows-based and/or Linux-based platforms, network forensics, and analysis
- Thorough understanding of threat hunting models, as well as cyber threat intelligence, including TTP and IoCs extraction and mapping
- Experience with research and data analysis of large DBs via Splunk, Elasticsearch, SQL, or VQL
- Strong understanding of targeted attacks; able to create customized tactical remediation plans
- Good written and verbal English communication skills
About us
Cye helps security and risk leaders gain a clear, defensible view of their cyber exposure, grounded in financial impact and real-world attack paths. By continuously quantifying exposure and validating it in context, organizations can establish a strong baseline, prioritize decisions with confidence, and track measurable reduction over time.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.