Assist customers with the collection, preservation, processing, examination, and analysis of electronically stored information (ESI) in a full-service digital forensics laboratory.
Compensation
The proposed salary range for this position is: $94,400 - $198,200
Responsibilities
Conduct digital forensic examinations through all phases, including data acquisition, examination, presentation, and disposition.
Provide electronic evidence identification and seizure support while maintaining forensic integrity and proper evidence-handling procedures.
Perform forensic data acquisition, imaging, collection, and capture of ESI from various electronic devices and storage systems.
Process allocated storage space, recover deleted files using forensic scripts, and analyze Internet browsing history to identify relevant evidence.
Conduct medium-scale digital forensic examinations, including collecting file shares within live client-server environments using validated forensic software.
Requirements
Bachelor's degree in Digital Forensic Science, Computer Science, Computer Engineering, Computer Information Systems, Mathematics, Criminal Justice, or a related field.
Nice to have: Advanced degree in Digital Forensics
Nice to have: Mobile device forensic examinations
Nice to have: Advanced digital forensic certifications
Digital Forensic Analyst specializing in drone forensics, supporting law enforcement and national security investigations involving unmanned aerial systems.
Compensation
The projected compensation range for this position is $86,800.00 to $198,000.00 (annualized USD).
Responsibilities
Uncover, preserve, and interpret digital evidence from drones and associated technologies
Develop new forensic capabilities and reverse-engineer electronic systems
Prepare written documents including reports, test plans, and design specifications
Brief and present findings to clients and external partners
Requirements
Associate’s degree in Electronics, Cyber Security, or Computer Technology
Bachelor’s degree in Computer Engineering, Electrical Engineering, or Cyber Security
Nice to have: static reverse engineering of software binaries
Lead enterprise incident response and cyber crisis engagements from detection through recovery, directing investigations across host, network, cloud, identity, and SaaS environments, and driving AI-assisted workflows to improve investigation speed and reporting quality.
Compensation
$126,710.00 - $188,840.00 Annual
Responsibilities
Lead enterprise incident response and cyber crisis engagements from detection through recovery
Direct host, network, cloud, identity, and SaaS investigations across Windows, Linux, macOS, Microsoft 365, AWS, Azure, and hybrid environments
Perform advanced threat hunting and compromise assessments using SIEM, EDR, forensic, and threat intelligence platforms
Develop containment, eradication, and remediation strategies aligned to business risk
Produce executive briefings, technical reports, board‑ready updates, and post‑incident reviews
Requirements
Master’s degree in Arts/Sciences (MA/MS) or equivalent experience
Lead enterprise incident response and cyber crisis engagements, directing investigations across multiple platforms and driving AI-assisted workflows to improve operational efficiency.
Responsibilities
Lead enterprise incident response and cyber crisis engagements from detection through recovery
Direct host, network, cloud, identity, and SaaS investigations across Windows, Linux, macOS, Microsoft 365, AWS, Azure, and hybrid environments
Perform advanced threat hunting and compromise assessments using SIEM, EDR, forensic, and threat intelligence platforms
Develop containment, eradication, and remediation strategies aligned to business risk
Produce executive briefings, technical reports, board-ready updates, and post-incident reviews
Requirements
Bachelor's degree in Cybersecurity, Computer Science, Information Security, Engineering, Intelligence Studies, or a related discipline
Consultant, Reactive Services is an individual contributor role within Unit 42, responsible for supporting digital forensics and incident response (DFIR) engagements across a wide range of client environments throughout Latin America.
Responsibilities
Support and execute digital forensics and incident response investigations across enterprise environments.
Conduct forensic analysis of endpoints, systems, logs, and cloud environments to identify attacker activity and scope of compromise.
Assist with host, network, and cloud investigations during active security incidents.
Perform forensic acquisition and preservation of evidence following industry best practices and chain-of-custody procedures.
Utilize industry-standard DFIR tools and methodologies to investigate malicious activity and support containment efforts.
Requirements
Bachelor's degree in Computer Science, Information Security, or related field, or equivalent practical experience.
A senior individual contributor role within Unit 42 responsible for delivering expert-level incident response and digital forensics services to clients. This role requires a dedicated weekend overnight schedule.
Compensation
$157,600.00 - $216,700.00/yr
Responsibilities
Lead digital forensics and incident response investigations across enterprise environments.
Serve as a technical lead on incident response engagements.
Conduct host, network, and cloud investigations to identify root cause, attacker activity, and scope of compromise.
Perform forensic acquisition and analysis of systems, memory, logs, and endpoint telemetry.
Utilize industry-standard DFIR tools and methodologies to support incident containment and recovery.
Requirements
Bachelor's degree or equivalent practical experience
Nice to have: Large-scale enterprise security incident response
The Principal serves as a tactical arm of eSentire’s Incident Response team, driving deep expertise and experience in incident response and digital forensics engagements, handling volatile and complex casework.
Compensation
The expected base salary range for this role is $180,000-$190,000K USD.
Responsibilities
Manage all CSI Team tools, physical devices and infrastructure components.
Renew relevant software licenses.
Renew infrastructure subscriptions.
Oversee the implementation of new technologies that support the CSI team mission.
Identify, research, and make written recommendations regarding new technologies that would drive efficiency or otherwise enhance the eSentire IR Program.
Requirements
four-year degree in a relevant discipline
military or law enforcement background with ten or more years of relevant work experience
Senior - Digital Forensics & Incident Response (DFIR)NewB&W Deloitte GmbH · Madrid, Spain+4 more
Forensic Analyst IINewCaci · Washington, US
Principal Incident Response EngineerNewReinsurance Group of America · Remote, US
Principal Digital Forensics InvestigatoreSentire · Remote, US