DFIR Jobs Update – 12/29/25

Happy Monday, everyone! We hope you enjoyed the holidays with your families. Welcome to another DFIR Jobs Update, where you’ll find this week’s roundup of the newest roles added to the DFIR Jobs Board. As a reminder, you can find the weekly DFIR Jobs updates here!

The following expired jobs have been removed from the DFIR Jobs Board:

  • Experian: Director of Cyber Defense Security Operations (Remote)
  • Google: Senior Incident Response Consultant, Google Public Sector
  • Google: Manager, Incident Response, Security Consulting, Mandiant (Weekend Team)
  • Morgan Stanley: Digital Forensic Investigator
  • Pluralsight: Sr. Detection Engineer
  • Vultr: Senior Manager, Incident Response

The following jobs have been added to the DFIR Jobs Board:

  • 1Password: Senior Security Engineer, Detection and Response (Link)
  • 1Password: Manager, Security Incident Response (Link)
  • Amtrak: Lead IT Threat Hunt Analyst – 90397468 – Remote (Link)
  • B&H Photo Video: Incident Response Analyst Lead (Link)
  • CrowdStrike: Platform Threat Hunter (Remote) (Link)
  • EY: Cyber Triage and Forensic Senior Analyst (Link)
  • Google: Senior Incident Response Security Consultant, Google Cloud, Mandiant (Link)
  • Google: Senior Incident Response Security Consultant, Mandiant, Google Cloud (Link)
  • Microsoft: Senior Security Incident Response Engineer (Link)
  • Microsoft: Senior Security Incident Response Engineer CIRT (Link)
  • Microsoft: Senior Security Engineer – Security Incident Response – CTJ – Secret (Link)
  • Palo Alto Networks: Principal Consultant, DFIR, Reactive Services (Unit 42) – Weekend Shift (Link)
  • RTX: Global Command Center – Incident Analyst (Remote) (Link)
  • Salesforce: Principal or Lead Incident Responder (Link)
  • Sherwin-Williams: CSOC Incident Response Lead (Link)
  • Workday: Incident Coordinator/Cyber Incident Commander – US Federal (Link)

If you or someone you know wants to submit a job to the DFIR Jobs Board, you can submit a job here!

SHARE