ZipRecruiter

Log In

1

Dfir Manager Jobs (NOW HIRING)

Bechtle

$65K - $86K/yr

Fundierte Kenntnisse in Forensik, Betriebssystemen, Netzwerkanalyse sowie gängigen DFIR-Tools ... Managed Services. Bechtle Austria ist mit Standorten in Wien, St. Pölten, Wiener Neudorf, Graz ...

Tyto Athene, LLC

Program Manager

Linthicum Heights, MD · On-site

Manage scope, schedule, cost, technical execution, staffing performance, and operational activities ... Experience supporting DFIR, malware analysis, cyber threat intelligence, or digital evidence ...

Tyto Athene, LLC

Program Manager

Linthicum, MD · On-site

Manage scope, schedule, cost, technical execution, staffing performance, and operational activities ... Experience supporting DFIR, malware analysis, cyber threat intelligence, or digital evidence ...

Tyto Athene, LLC

Senior Cyber Lead

Linthicum, MD · On-site

Certified Ethical Hacker (CEH), GIAC certifications, or advanced DFIR certifications are highly desired. * ITIL v4 Foundations or operational service management experience is a plus. Certifications:

Computer Task Group, Inc

CSIRT Analyst

Buffalo, NY · On-site

$111K - $125K/yr

Overview Do you have a passion for Cyber Security, especially advanced Managed Detection & Response ... You conduct DFIR assignments, including DFIR readiness assessments * You participate in the weekly ...

Computer Task Group, Inc

CSIRT Analyst

Buffalo, NY · On-site

Overview Do you have a passion for Cyber Security, especially advanced Managed Detection & Response ... You conduct DFIR assignments, including DFIR readiness assessments * You participate in the weekly ...

Computer Task Group, Inc

CSIRT Analyst

Anchorage, AK · On-site

$125K - $140K/yr

Overview Do you have a passion for Cyber Security, especially advanced Managed Detection & Response ... You conduct DFIR assignments, including DFIR readiness assessments * You participate in the weekly ...

Computer Task Group, Inc

CSIRT Analyst

Anchorage, AK

$125K - $140K/yr

Overview Do you have a passion for Cyber Security, especially advanced Managed Detection & Response ... You conduct DFIR assignments, including DFIR readiness assessments * You participate in the weekly ...

Computer Task Group, Inc

CSIRT Analyst

Buffalo, NY · On-site

Overview Do you have a passion for Cyber Security, especially advanced Managed Detection & Response ... You conduct DFIR assignments, including DFIR readiness assessments * You participate in the weekly ...

next page

Showing results 1-20

All JobsDfir Manager Jobs

Dfir Manager information

What is a DFIR Manager?

A DFIR Manager is a cybersecurity professional responsible for leading Digital Forensics and Incident Response (DFIR) teams. They oversee investigations into security incidents, manage response efforts, and ensure that digital evidence is collected and preserved correctly. DFIR Managers also develop and implement incident response plans, coordinate communication between stakeholders, and provide guidance to technical staff to minimize the impact of cyber threats. Their role is crucial in helping organizations recover from security breaches and in preventing future incidents.

What are the key skills and qualifications needed to thrive as a DFIR (Digital Forensics and Incident Response) Manager, and why are they important?

To thrive as a DFIR Manager, you need a solid background in cybersecurity, digital forensics, and incident response, often supported by a degree in computer science or related fields and industry certifications like GCFA or CISSP. Familiarity with forensic analysis tools (e.g., EnCase, FTK), SIEM systems, and threat intelligence platforms is crucial. Strong leadership, communication, and problem-solving skills help you coordinate teams and effectively manage crisis situations. These skills are vital for leading complex investigations, ensuring rapid and accurate incident response, and protecting organizational assets from cyber threats.

What is the difference between Dfir Manager vs Cybersecurity Analyst?

AspectDfir ManagerCybersecurity Analyst
Required CredentialsCertifications like GIAC, CISSP, or CISA; experience in digital forensics and incident responseCertifications such as CompTIA Security+, CISSP, or GIAC; focus on security monitoring and analysis
Work EnvironmentIncident response teams, forensic labs, corporate security departmentsSecurity operations centers, threat analysis teams, IT departments
Employer & Industry UsageUsed in cybersecurity firms, law enforcement, large corporationsCommon across industries with IT infrastructure, government agencies, private sector

The Dfir Manager primarily oversees digital forensics and incident response processes, focusing on investigating cyber incidents. In contrast, a Cybersecurity Analyst monitors security systems, analyzes threats, and supports prevention efforts. While both roles require cybersecurity certifications and work in security-focused environments, their core responsibilities differ: one manages forensic investigations, the other focuses on threat detection and prevention.

How does a DFIR Manager typically coordinate incident response efforts with other departments during a cybersecurity event?

A DFIR Manager plays a crucial role in orchestrating incident response by collaborating closely with IT, legal, compliance, and executive teams. During a cybersecurity event, they facilitate communication between technical responders and stakeholders, ensuring everyone is informed of the incident's status and required actions. The manager assigns roles, oversees evidence collection, and ensures that response steps align with company policies and regulatory requirements. This cross-functional coordination is essential for timely containment, mitigation, and post-incident review.
More about Dfir Manager jobs
What cities are hiring for Dfir Manager jobs? Cities with the most Dfir Manager job openings:
What are the most commonly searched types of Dfir jobs? The most popular types of Dfir jobs are:
What states have the most Dfir Manager jobs? States with the most job openings for Dfir Manager jobs include:
What job categories do people searching Dfir Manager jobs look for? The top searched job categories for Dfir Manager jobs are:
Dfir Manager jobs near you
Infographic showing various Dfir Manager job openings in the United States as of June 2026, with employment types broken down into 18% As Needed, 18% Temporary, 55% Contract, and 9% Nights. Highlights an 92% Physical, 2% Hybrid, and 6% Remote job distribution.
Senior Associate, Digital Forensics and Incident Response (DFIR)

Senior Associate, Digital Forensics and Incident Response (DFIR)

Prescient

Chicago, IL

Full-time

Posted 23 days ago

Job description

Job Requisition


POSITION TITLE: Senior Associate

PRACTICE/CORPORATE: Digital Forensics & Incident Response

LOCATION: TBD

REPORTS TO: Managing Director

FLSA: Exempt

DATE COMPLETED/REVISED: 06-2026


WHO IS PRESCIENT?

Prescient is a tech-enabled digital intelligence, investigation, and risk advisory firm. Our team helps multinational corporations, law firms, investors, and private clients mitigate risk and discover actionable intelligence using next generation technology and tradecraft. We operate at the intersection of cybersecurity, corporate security, disputes, and intelligence, and support clients around the world from offices in the United States and Europe.


POSITION SUMMARY

Prescient is seeking a dynamic new team member to help grow our Digital Forensics & Incident Response (DFIR) services. Prescient has built a world class DFIR capability over the past several years and is looking to hire a Senior Associate with experience from the public and/or private sector to build on our success and help us innovate.


Final title decisions will be made based on years of experience and candidate expertise.


ESSENTIAL JOB FUNCTIONS

The team member will generally be responsible for:

  • Leading and/or supporting investigations into cybersecurity incidents, including ransomware, data breaches, and insider threats.
  • Performing incident triage, forensic analysis, malware examination, and log review to identify the root cause and scope of compromise.
  • Conducting forensic imaging and analysis of endpoints, servers, cloud environments, and mobile devices.
  • Preserving and analyzing digital evidence in line with legal and regulatory requirements.
  • Extracting, correlating, and interpreting data from multiple sources to reconstruct attack timelines.
  • Documenting methodologies and findings to support potential litigation, regulatory inquiries, or internal reviews.

MINIMUM QUALIFICATIONS

Experience: Candidates will have approximately three (3) to five (5) years of experience in digital forensics, incident response, or a related field.

Technical Skills:

  • Strong technical background in digital forensics tools (e.g., Magnet Axiom, EnCase, FTK, Cellebrite, XWays, etc.) and incident response, EDR, and cybersecurity platforms, as well as cloud-based environments (M365, G-Suite, AWS, etc.).
  • Proficiency in handling a variety of operating systems (e.g., Linux, Windows, Mac, iOS, virtual machines, etc.) and file systems (e.g., FAT, NTFS, EXT, etc.). Must be familiar with digital evidence collection from a variety of sources.
  • Proficiency in data and log file analysis and analytics tools such as SQL, Python, Tableau, Splunk, and Excel.

Leadership Abilities: Candidates must have exceptional communication, analytical, and interpersonal skills.

Certifications (Optional):

  • Certified Computer Examiner (CCE)
  • Certified Information Systems Security Professional (CISSP)
  • Certified Incident Handler (GCIH)
  • Certified Forensic Computer Examiner (CFCE)
  • Other relevant certifications in DFIR or cybersecurity.

Education (Optional): Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.

Prescientprovides equal employment opportunities to all employees and applicants. Please note this job requisition is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change.

Apply