Senior Associate, Digital Forensics and Incident Response (DFIR)

Prescient Comply; Chicago (IL); On-site; USD 80,000 - 110,000; Full time

Job summary

A tech-enabled digital intelligence firm is searching for a Senior Associate to enhance its Digital Forensics & Incident Response (DFIR) services. The ideal candidate will have 3-5 years of experience in digital forensics or incident response and possess strong technical skills with digital forensics tools. Responsibilities include leading cybersecurity investigations and analyzing digital evidence. This role requires exceptional communication and analytical skills to support the firm's innovative approach to risk mitigation.

Qualifications

• 3-5 years of experience in digital forensics, incident response, or a related field.
• Exceptional communication, analytical, and interpersonal skills.
• Technical proficiency in digital forensics tools and incident response.

Responsibilities

• Lead and support investigations into cybersecurity incidents.
• Perform incident triage and forensic analysis.
• Conduct forensic imaging and analysis of endpoints and servers.
• Preserve and analyze digital evidence.
• Document methodologies and findings for potential litigation.

Skills

Digital forensics tools

Incident response

Strong communication skills

Analytical skills

Interpersonal skills

Data analysis

Education

Bachelor’s degree in Cybersecurity, Information Technology, or Computer Science

Tools

Magnet Axiom

EnCase

FTK

Cellebrite

XWays

SQL

Python

Tableau

Splunk

Excel

Job description

Job Requisition

POSITION TITLE: Senior Associate

PRACTICE/CORPORATE: Digital Forensics & Incident Response

LOCATION: TBD

REPORTS TO: Managing Director

FLSA: Exempt

DATE COMPLETED/REVISED: 09-2025

WHO IS PRESCIENT?

Prescient is a tech-enabled digital intelligence, investigation, and risk advisory firm. Our team helps multinational corporations, law firms, investors, and private clients mitigate risk and discover actionable intelligence using next generation technology and tradecraft. We operate at the intersection of cybersecurity, corporate security, disputes, and intelligence, and support clients around the world from offices in the United States and Europe.

POSITION SUMMARY

Prescient is seeking a dynamic new team member to help grow our Digital Forensics & Incident Response (DFIR) services. Prescient has built a world class DFIR capability over the past several years and is looking to hire a Senior Associate with experience from the public and/or private sector to build on our success and help us innovate.

Final title decisions will be made based on years of experience and candidate expertise.

ESSENTIAL JOB FUNCTIONS

The team member will generally be responsible for:

• Leading and/or supporting investigations into cybersecurity incidents, including ransomware, data breaches, and insider threats.
• Performing incident triage, forensic analysis, malware examination, and log review to identify the root cause and scope of compromise.
• Conducting forensic imaging and analysis of endpoints, servers, cloud environments, and mobile devices.
• Preserving and analyzing digital evidence in line with legal and regulatory requirements.
• Extracting, correlating, and interpreting data from multiple sources to reconstruct attack timelines.
• Documenting methodologies and findings to support potential litigation, regulatory inquiries, or internal reviews.

MINIMUM QUALIFICATIONS

Experience: Candidates will have approximately three (3) to five (5) years of experience in digital forensics, incident response, or a related field.

Technical Skills

• Strong technical background in digital forensics tools (e.g., Magnet Axiom, EnCase, FTK, Cellebrite, XWays, etc.) and incident response, EDR, and cybersecurity platforms, as well as cloud-based environments (M365, G-Suite, AWS, etc.).
• Proficiency in handling a variety of operating systems (e.g., Linux, Windows, Mac, iOS, virtual machines, etc.) and file systems (e.g., FAT, NTFS, EXT, etc.). Must be familiar with digital evidence collection from a variety of sources.
• Proficiency in data and log file analysis and analytics tools such as SQL, Python, Tableau, Splunk, and Excel.

Leadership Abilities

Candidates must have exceptional communication, analytical, and interpersonal skills.

Certifications (Optional)

• Certified Computer Examiner (CCE)
• Certified Information Systems Security Professional (CISSP)
• Certified Incident Handler (GCIH)
• Certified Forensic Computer Examiner (CFCE)
• Other relevant certifications in DFIR or cybersecurity.

Education (Optional)

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.

Prescient provides equal employment opportunities to all employees and applicants. Please note this job requisition is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change.