DFIR Analyst: Incident Response & Digital Forensics Pro

Forensic Focus Limited; New Zealand; On-site; NZD 80,000 - 105,000; Full time

Job summary

Forensic Focus Limited is seeking a DFIR Analyst to perform digital forensic investigations and incident response across endpoints, networks, cloud, and SaaS environments. You will handle evidence collection, chain-of-custody, containment support, and contribute to formal reports.

The ideal candidate has 2+ years in DFIR/threat hunting, proficiency with X-Ways Forensics, Axiom, and FTK, and familiarity with EDR/XDR, SIEMs, and scripting. A consulting mindset and on-call rotation are a plus.

Qualifications

• Two+ years of hands-on DFIR or threat-hunting experience.
• Experience with forensic tools (X-Ways Forensics, Axiom, FTK).
• Familiarity with EDR/XDR platforms, SIEMs and network forensics.
• Basic scripting or automation capabilities.

Responsibilities

• Conduct digital forensic investigations and incident response across endpoints, networks, cloud and SaaS.
• Manage evidence acquisition and chain-of-custody.
• Prepare investigative reports and customer-facing status updates.

Skills

DFIR

Threat Hunting

EDR/XDR

SIEM

Windows Artifacts

Scripting

Education

Cybersecurity Degree

Tools

X-Ways Forensics

Axiom

FTK

Job description

Forensic Focus Limited is seeking a DFIR Analyst to perform digital forensic investigations and incident response across endpoints, networks, cloud, and SaaS environments. You will handle evidence collection, chain-of-custody, containment support, and contribute to formal reports.

The ideal candidate has 2+ years in DFIR/threat hunting, proficiency with X-Ways Forensics, Axiom, and FTK, and familiarity with EDR/XDR, SIEMs, and scripting. A consulting mindset and on-call rotation are a plus.