DFIR Jobs Update – 09/29/25

Happy Monday everyone and welcome to another DFIR Jobs Update today! Here you will find weekly blog updates that will showcase the new batch of jobs that have been added to the DFIR Jobs Board.

The following expired jobs have been removed from the DFIR Jobs Board:

  • Amtrak: Sr Mgr Cyber Incident Response – 90397440 – Remote
  • Autodesk: Senior Security Analyst, Triage
  • AWS: Security Engineer, Incident Response, CorpSec
  • Centene Corporation: Senior Incident Response Analyst
  • Citi: SOC Digital Forensic and Incident Response (SVP)
  • CrowdStrike: Cloud Threat Hunting Senior Consultant (Remote)
  • CVS Health: Staff Cyber Incident Responder
  • Google: Incident Response Consultant, Mandiant, Google Cloud
  • Kroll: Senior Manager, Incident Response
  • Peraton: Sr. Digital Forensics and Incident Response Analyst
  • Tyto Athene, LLC: Part-Time Tier 2 Incident Response Analyst

The following jobs have been added to the DFIR Jobs Board:

  • Airbnb: Senior Insider Threat Investigations (Link)
  • Asana: Security Incident Manager (Link)
  • Citi: M365 Incident Responder, VP (Link)
  • CoreWeave: Senior Manager, Security Engineering, Incident Response (Link)
  • CVS Health: Cyber Incident Response Technical Writer (Link)
  • Discord: Senior Director, Threat Operations (Link)
  • Google: Incident Response Security Consultant, Mandiant, Google Cloud (Link)
  • Google: Manager, Incident Response, Security Consulting, Mandiant (Weekend Team) (Link)
  • Hyundai Capital America: Security Operations and Incident Response Manager (Link)
  • JPMorganChase: Digital Forensics and Incident Response Vice President (Link)
  • Kellanova: Senior Manager, Global Threat Response (Link)
  • Microsoft: Director of Security Research and Incident Response (Link)
  • Microsoft: Incident Response Program Manager (Link)
  • Microsoft: Incident Response Engineer – CIRT (Link)
  • Microsoft: Senior Incident Response Engineer – CIRT (Link)
  • Microsoft: Senior Incident Response and Operations Lead (Link)
  • MOXFIVE: Contract Bench, Incident Responder (DFIR) (Link)
  • MOXFIVE: Incident Engagement Manager (Link)
  • MOXFIVE: Senior Technical Engagement Manager (Link)
  • MOXFIVE: Technical Advisor (Link)
  • Peraton: Senior Cyber Security Deception Engineer/Threat Hunter (Link)
  • The Campbell’s Company: Lead Security Analyst – Incident Response (Link)
  • Yahoo: Paranoids Forensic and Incident Response Operations (FIRE) Analyst (Weekend Shift) (Link)

If you or someone you know wants to submit a job to the DFIR Jobs Board, you can submit a job here!

SHARE