17 dfir jobs at 13 companies in College Park, MD
1mo
Save
Mark Applied
Hide
Senior Investigator Digital Forensics, Incident Response (DFIR)
Chicago or Milwaukee or Dallas or Columbus or Kirkland or Cincinnati or New York or Cleveland or Oklahoma City or Austin or Albany or St. Petersburg or Hartford or Pittsburgh or St. Louis or Miami or Sacramento or Raleigh or Minneapolis or Mountain View or Scottsdale or San Francisco or Morristown or Denver or Boston or Philadelphia or Des Moines or Overland Park or Los Angeles or Charlotte or Walnut Creek or Carmel or Seattle or Houston or Arlington or Atlanta or Redmond or Bentonville or Beaverton or Nashville or Detroit or San Diego
$54k-$206k/yr HybridFull Time
4+ YOEBachelor's degree or equivalent, minimum 4 years DFIR experience, 3+ years with enterprise incident response and common DFIR toolsets; ability to obtain US security clearances; strong analytic and client-facing skills.
Volatility, X-Ways, FTK, EnCase, Autopsy, EDR, AWS, Azure, GCP, Microsoft Windows, GNU/Linux, MacOS, Active Directory, Python, PowerShell, Bash
1mo
Save
Mark Applied
Hide
Senior Consultant, Digital Forensic and Incident Response (DFIR) (Remote)
Elkridge, Maryland, United States
RemoteFull Time
Experienced DFIR professional with forensic analysis, incident response, malware analysis, client-facing skills, and ability to provide after-hours on-call support.
ELK, Axiom, Encase, FTK
1mo
Save
Mark Applied
Hide
Principal Consultant, Digital Forensic and Incident Response (DFIR) (Remote)
Elkridge or United States
$100k-$160k/yr RemoteFull Time
Experienced DFIR professional with technical forensic analysis, incident response leadership, client-facing skills, team mentoring, and availability for after-hours on-call support.
ELK, Axiom, EnCase, FTK, Microsoft Teams
1w
Save
Mark Applied
Hide
Digital Forensics SME
Rockville, Maryland, United States
$140k-$184k/yr OnsiteFull Time
8+ YOEBachelor's degree in a relevant technology field, 8+ years of specialized incident response experience, advanced DFIR expertise, enterprise forensic toolset experience, and evidentiary documentation experience.
DFIR, SOC, CMMI-DEV, CMMI-SVC, ISO 20000, ISO 27001, ISO 9001, HDI, Agile, DevSecOps, C4ISR, SIGINT, FSA
3mo
Save
Mark Applied
Hide
Senior Associate, Forensic Technology
Los Angeles or Sacramento or San Diego or San Francisco or Washington or Chicago or New York or Dallas or Houston
OnsiteFull Time
3+ YOE3+ years digital forensics/incident response experience, bachelor’s in CS/engineering/forensics, DFIR investigations across iOS/macOS/Windows, scripting/programming (Python,Rust,C++,C#,Java), relevant certifications, authorized to work in the U.S.
DFIR, Artificial Intelligence (AI), Python, Rust, C++, C#, Java, eDiscovery
2mo
Save
Mark Applied
Hide
Director, Cyber Security Incident Response Team (CSIRT)
Gaithersburg, Maryland, United States
$169k-$254k/yr HybridFull Time
5+ YOE5+ MgmtExtensive enterprise SOC/IR leadership, incident command, DFIR, OT/ICS, cloud governance, 24x7 operations, stakeholder management.
SIEM, SOAR, XDR, LLM, AI
3mo
Save
Mark Applied
Hide
Head of Insider Risk - USDS
Washington, District of Columbia, United States
$206k-$397k/yr OnsiteFull Time
5+ YOE2+ Mgmt5+ years in insider risk/DFIR/IR with 2+ years leading teams; expertise in digital forensics, incident response, detection engineering, and cross-functional governance.
SIEM, EDR, DLP, UEBA, AWS CloudTrail, Azure Monitor, GCP Audit Logs, EnCase, FTK, Cellebrite, X-Ways, AXIOM, Python, Bash, PowerShell, CrowdStrike Falcon, Carbon Black, Splunk, QRadar, Sentinel, AWS, Azure, GCP, MITRE ATT&CK, NIST SP 800-53, CISA
3w
Save
Mark Applied
Hide
FedRamp Customer Success Manager
United States or Washington or Maryland or Virginia
$100k-$140k/yr HybridFull Time
Strategic customer success experience with enterprise/public-sector accounts, executive engagement, strong technical aptitude in DFIR, experience with Salesforce and Gainsight, ability to manage FedRAMP requirements and travel ~20%.
Gainsight, Salesforce
4w
Save
Mark Applied
Hide
Host Based Cyber Systems Analyst IV
Arlington, Virginia, United States
$130k-$160k/yr OnsiteFull Time
8+ YOEU.S. citizen with active TS/SCI, DHS suitability, 8+ years DFIR experience, forensic acquisition skills, cloud and hybrid identity knowledge, strong reporting and analysis, and scripting/automation experience.
Entra ID/Azure AD, M365, AWS, GCP, SaaS, Azure Activity Logs, AWS CloudTrail, VPC Flow Logs, Microsoft Defender, Sentinel, AWS GuardDuty, GCP Chronicle, PowerShell, Python, Bash, JavaScript, Terraform, Kubernetes, CloudFormation, Azure Resource Manager, Docker, EnCase, FTK, SIFT, X-Ways, Volatility, WireShark, Sleuth Kit/Autopsy, Splunk, Snort, Crowdstrike, Carbon Black
4w
Save
Mark Applied
Hide
Cyber Network Defense Analyst (CNDA) IV – Cloud Forensics
Arlington, Virginia, United States
$130k-$160k/yr HybridFull Time
8+ YOEU.S. citizen with active TS/SCI, 8+ years DFIR experience, cloud forensics and identity security expertise, proficiency with M365/Azure AD, AWS IAM, cloud telemetry, evidence acquisition, and technical reporting.
Azure AD, Entra ID, M365, AWS IAM, GCP, Azure Activity Logs, AWS CloudTrail, GCP Logs, VPC Flow Logs, Microsoft Sentinel, Defender, AWS GuardDuty, GCP Chronicle, PowerShell, Python, Bash, JavaScript, Terraform, Kubernetes, Docker, CloudFormation, Azure Resource Manager, MITRE ATT&CK
2mo
Save
Mark Applied
Hide
Senior Cyber Lead
Linthicum Heights, Maryland, United States
$175k-$225k/yr OnsiteFull Time
10+ YOE3+ MgmtBachelor's degree, 10+ years cybersecurity/DFIR experience, 3+ years technical leadership, DoD 8570/8140 baseline (Security+), Top Secret/SCI eligibility, experience with host/network/memory/malware forensics and SIEM/IDS/endpoint tools.
Splunk, ELK Stack, FTK, EnCase, X-Ways, Velociraptor, Volatility, Wireshark, SIEM, IDS/IPS
3mo
Save
Mark Applied
Hide
Senior Associate, Forensic Technology
Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Washington or Chicago or New York or Dallas or Houston
OnsiteFull Time
3+ YOE3+ years digital forensics/IR experience, Bachelor\u0002s in CS/engineering/forensics or equivalent, DFIR investigations on iOS/macOS/Windows, scripting/programming (Python,Rust,C++,C#,Java), travel as needed, US work authorization required.
Digital Forensics and Incident Response (DFIR), Python, Rust, C++, C#, Java, Magnet, Cellebrite, Artificial Intelligence (AI)
2mo
Save
Mark Applied
Hide
Cybersecurity Program Manager
Washington, District of Columbia, United States
$175k-$250k/yr HybridFull Time
8+ YOE3+ MgmtBachelor's or equivalent, PMP required,8+ years managing large federal cyber/DFIR/cybersecurity programs,3+ years recent DoD cyber/classified experience,TS/SCI mission support experience,EMR not applicable,Microsoft Office and Project proficiency.
Microsoft Office, Microsoft Project
3w
Save
Mark Applied
Hide
Security Operations Center (SOC) Tier 3 Analyst / Incident Responder
Baltimore, Maryland, United States
OnsiteFull Time
8+ YOE8+ years cybersecurity experience with 6+ years SOC experience; bachelor\u0002s degree or equivalent; 2+ DFIR/forensics years; requires multiple certifications (e.g., GCFA, GCIH, CISSP); deep expertise in enterprise incident response, detection engineering, and threat hunting.
Elastic Security, KQL, ES|QL/EQL, SQL, PowerShell, Python, Bash, CrowdStrike Falcon, Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud, Defender for Cloud Apps, Elastic, EDR/XDR, NDR, SIEM, SOAR, IDS/IPS, WAF, firewalls, VPN, DNS, DHCP, proxy, CASB, DLP, IAM, PAM, Kubernetes, Azure, AWS, Microsoft 365, Microsoft Entra ID, VMware, Hyper-V
1mo
Save
Mark Applied
Hide
Host Based Systems Analyst IV
Arlington, Virginia, United States
FieldFull Time
8+ YOEUS citizen with active TS/SCI clearance, able to obtain DHS suitability before start, 8+ years DFIR/host forensics experience, BS in CS/Cybersecurity/CE or HS + 10+ years, strong forensic imaging, analysis, reporting, and team leadership skills.
EnCase, FTK, SIFT, X-Ways, Volatility, Wireshark, Sleuth Kit, Autopsy, Snort, Splunk, CrowdStrike, Carbon Black
3mo
Save
Mark Applied
Hide
CYBERMAXX, LLC - Sales Engineer
Linthicum Heights, Maryland, United States
RemoteFull Time
5+ YOE5+ years in network or information security; 5+ years in customer-facing roles; strong communication; ability to travel up to 20%.
NDR, SIEM, EDR, VRM, DFIR
1mo
Save
Mark Applied
Hide
Security Analyst II
Alexandria, Virginia, United States
$155k-$165k/yr HybridFull Time
5+ YOE5+ years cybersecurity experience with security analysis, incident response, threat hunting, system configuration, and cloud/on-prem defensive operations; relevant GIAC/ISC2/EC-Council/etc. certifications and a related bachelor’s degree preferred.
DFIR, IAM, PAM, DLP, NGFW, EDR, SIEM, IDS/IPS, MITRE ATT&CK, SOAR, CASB, DNS, Linux, Windows, PowerShell, Python, JavaScript, MacOS, WAF, CIS Benchmarks, Artificial Intelligence (AI)