Digital Forensics and Incident Response (DFIR) Analyst

Forensic Focus; United States; On-site; USD 90,000 - 140,000; Full time

Job summary

Peraton in the United States is seeking an experienced DFIR Analyst to join a corporate security operations center. You will perform large-scale data analytics, lead detection efforts, and conduct advanced threat hunting.

Responsibilities include forensic investigations, documenting findings, and coordinating with IT to strengthen host and network defenses. The role requires experience with Splunk Enterprise Security, EDR tools, and forensic artifacts across disk, memory, network, and cloud

Qualifications

• Experience with Splunk Enterprise Security.
• Experience with EDR tools and forensic analysis of disk, memory, network and cloud artifacts.
• Familiarity with scripting, risk management frameworks, and Windows/Linux/network security controls.

Responsibilities

• Investigate security incidents and document findings in reports.
• Lead detection efforts and perform large-scale data analytics.
• Collaborate with IT teams to strengthen host and network defenses.
• Participate in on-call rotations within a corporate SOC environment.

Skills

Threat hunting

Forensic analysis

Incident response

Tools

Splunk Enterprise Security

EDR tools

Job description

# Digital Forensics and Incident Response (DFIR) Analyst*Peraton***United States**Mid · Full-time### The RoleThis position supports a corporate cybersecurity operations center, performing large-scale data analytics, leading detection efforts, and conducting advanced threat hunting. Duties include forensic investigation of security incidents, documenting findings in reports, and collaborating with IT teams to strengthen host and network defenses.### Skills & ExperienceCandidates need experience with Splunk Enterprise Security, EDR tools, and forensic analysis of disk, memory, network and cloud artifacts. Familiarity with scripting languages, risk management frameworks, and Windows/Linux/network security controls is expected, along with relevant certifications and a cybersecurity background.### Who It SuitsIdeal for an experienced security analyst comfortable balancing forensic investigation with operational incident response, who is detail-oriented, deadline-driven, and willing to participate in on-call rotations within a structured corporate SOC environment.