ZipRecruiter

Log In

1

Dfir Jobs (NOW HIRING)

Tyto Athene, LLC

Program Manager

Linthicum, MD · On-site

Provide operational oversight supporting forensic examination workflows, cyber investigative support, DFIR operations, and mission analytics activities. * Coordinate with Government and contractor ...

Computer Task Group, Inc

CSIRT Analyst

Buffalo, NY

You conduct DFIR assignments, including DFIR readiness assessments * You participate in the weekly Threat Hunting duty to proactively chase threats through novel Tools, Techniques & Procedures (TTPs)

Computer Task Group, Inc

CSIRT Analyst

Buffalo, NY · On-site

You conduct DFIR assignments, including DFIR readiness assessments * You participate in the weekly Threat Hunting duty to proactively chase threats through novel Tools, Techniques & Procedures (TTPs)

Computer Task Group, Inc

CSIRT Analyst

Buffalo, NY · On-site

You conduct DFIR assignments, including DFIR readiness assessments * You participate in the weekly Threat Hunting duty to proactively chase threats through novel Tools, Techniques & Procedures (TTPs)

Flock Safety

Senior Adversary Pursuit Engineer

$140K - $175K/yr

Experience with performing DFIR on Android IoT devices. * Deep experience utilizing enterprise security tooling (SIEM, EDR, etc.) as well as developing proprietary tools/scripts to scale the team ...

next page

Showing results 1-20

All JobsDfir Jobs

Dfir information

See salary details

$33.5K

$137.7K

$174K

How much do dfir jobs pay per year?

As of Jul 15, 2026, the average yearly pay for dfir in the United States is $137,745.00, according to ZipRecruiter salary data. Most workers in this role earn between $111,000.00 and $173,000.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive in the Dfir position, and why are they important?

To thrive as a DFIR (Digital Forensics and Incident Response) professional, you need expertise in computer forensics, incident response methodologies, and network security, typically supported by a related degree or cybersecurity certifications like GCFA, GCFE, or CEH. Familiarity with forensic imaging tools (e.g., EnCase, FTK, X-Ways), SIEM platforms, and scripting languages is crucial for investigating and addressing security incidents. Analytical thinking, problem-solving, and strong communication skills set individuals apart in this position. These capabilities are essential for accurately identifying, analyzing, and mitigating digital threats in high-pressure environments.

What are some common challenges faced by DFIR professionals in their daily work?

DFIR professionals often handle cases involving complex cyberattacks, requiring them to quickly analyze large volumes of digital evidence and determine the scope of incidents. Challenges can include working under tight time constraints, managing sensitive information, and staying updated with rapidly evolving attack techniques and security technologies. Teamwork and collaboration with other IT and security personnel are frequent, as incident response is rarely a solo effort. Success in this field typically relies on a balance of technical expertise, methodical investigation, and the ability to adapt to new threats and technologies on a daily basis.

What is a DFIR job?

A DFIR (Digital Forensics and Incident Response) job involves investigating cybersecurity incidents, analyzing digital evidence, and responding to security breaches. Professionals in this field use forensic tools to recover data, trace attack origins, and mitigate cyber threats. DFIR experts work in law enforcement, private security firms, and corporate cybersecurity teams. Their responsibilities include malware analysis, log analysis, and ensuring systems are secured against future attacks. Strong technical skills in digital forensics, networking, and security best practices are essential for success in this field.

More about Dfir jobs
What cities are hiring for Dfir jobs? Cities with the most Dfir job openings:
What are the most commonly searched types of Dfir jobs? The most popular types of Dfir jobs are:
What states have the most Dfir jobs? States with the most job openings for Dfir jobs include:
What job categories do people searching Dfir jobs look for? The top searched job categories for Dfir jobs are:
Dfir jobs near you
Infographic showing various Dfir job openings in the United States as of July 2026, with employment types broken down into 67% Full Time, and 33% Part Time. Highlights an 67% In-person, and 33% Remote job distribution, with an average salary of $137,745 per year, or $66.2 per hour.
Cyber Analyst, Digital Forensics Incident Response

Cyber Analyst, Digital Forensics Incident Response

At-Bay

Remote

$80K - $115K/yr

Full-time

Re-posted 14 days ago

Job description

Why you should join our At-Bay Security team:
At-Bay is a fast-growth InsurSec company (Insurance x Cybersecurity) on a mission to bring innovative products to the market that help protect small businesses from digital risks. As an InsurSec provider, we uniquely combine insurance with mission-critical security technologies, threat intelligence, and human expertise, to bridge the critical security capability gap that exists among SMBs in the community. We believe InsurSec is an $80B market opportunity and we are excited to expand our DFIR team in order to help expand our reach and influence in the business and security community, of which we serve 35,000 customers.
The Role:
  • Cybersecurity Analysts focused on Digital Forensics and Incident Response (DFIR) deliver incident investigation and response services to At-Bay insureds via:
    • Forensically sound collection, transmission, and storage of digital evidence
    • Analysis of digital evidence to identify indicators of compromise and adversary activity
    • Development of incident timelines and theories of compromise
    • Identification of incident root causes
    • Participation in threat actor negotiations as necessary (e.g., ransom negotiations, etc.)
    • Participation in incident recovery (e.g., restoration of data from backups, reimaging workstations and servers, rebuilding network infrastructure, etc.) activities as necessary
    • Development and delivery of incident reports to document key incident details for engagement stakeholders including executive leaders for insureds, breach coach attorneys, and At-Bay claims management staff as necessary
    • Development and delivery of recommendations to mitigate the risk of future incidents for impacted insureds
    • Development and delivery of incident response training and simulations for targeted insureds

Key skills:
  • Previous digital forensics and incident response experience
  • Strong oral and written communication skills
  • Previous hands-on experience performing digital forensics and incident response, including several of the following:
    • Business Email Compromise
    • Ransomware
    • Digital evidence collection and analysis
    • Development and analysis of cyber threat intelligence
    • Leadership of or participation in investigations involving digital evidence
    • Intrusion detection / cyber threat hunting
    • Malware analysis
    • Incident recovery activities such as restoration of data from backups, operation of decryptor tools, etc.
  • Previous hands-on experience working in information technology operations (e.g., Network Operations Center, Security Operations Center, Incident Response Team, etc.)

Minimum requirements:
  • Bachelor's degree or equivalent
  • Minimum of 2 years of experience in cybersecurity operations, incident response, incident recovery, or another security discipline
  • Willingness to travel as needed to perform job functions
Preferred requirements:
  • Significant undergraduate or graduate coursework in computer science, computer engineering, information systems, or cybersecurity
  • Previous background in law enforcement or government/military with experience leading complex technical investigations
  • Knowledge of cloud environments, including knowledge of cloud security products and services offered by major cloud service providers (e.g., AWS, Azure, Google)
  • Experience in a top-10 cyber consulting firm or leading DFIR provider preferred
  • One or more industry cybersecurity certifications (e.g., GCIH, Security+, CISSP, etc.)
Work location:
  • USA, Nationwide
  • Fully Remote

Our estimated base pay range for this role is $80,000-$115,000 per year. Base salary is determined by a variety of factors including but not limited to market data, location, internal equitability, domain knowledge, experiences and skills. In general, if the position sparks your interest we encourage you to apply - our team prioritizes talent.
#LI-CK1

Apply