Senior DFIR Engineer - Remote UK (Forensics & IR)

OpenTalent; United States; On-site; USD 88,000 - 128,000; Full time

Job summary

OpenTalent seeks an experienced DFIR Engineer to scale its digital forensics and incident response capability. You will lead investigations across enterprise environments, cloud, and hybrid setups, and develop tooling to speed detection and response.

The role requires deep OS internals knowledge and advanced forensics skills, with opportunities to mentor teammates and influence incident response playbooks.

Qualifications

• 5+ years DFIR with strong IR and forensic hands-on experience.
• Deep OS internals knowledge across Windows/Linux/macOS.
• Strong scripting/programming in Python/PowerShell/Bash/Go.

Responsibilities

• Lead response to advanced intrusions, APTs, insider threats.
• Perform forensic acquisition and analysis across disk, memory, cloud and mobile.
• Reverse engineer malware and develop detection rules (YARA, signatures).
• Hunt threats and build detections in SIEM/EDR (Splunk, Elastic, CrowdStrike).
• Develop custom tooling/scripts to automate investigations.
• Mentor team and contribute to playbooks/runbooks.

Skills

DFIR experience

OS internals

Scripting

Threat hunting

Education

GCFA

GNFA

GREM

OSCP/OSEE

Tools

Volatility

X-Ways

Magnet AXIOM

GRR

IDA Pro

Ghidra

Zeek

Sysmon

Python

PowerShell

Go

Job description

OpenTalent seeks an experienced DFIR Engineer to scale its digital forensics and incident response capability. You will lead investigations across enterprise environments, cloud, and hybrid setups, and develop tooling to speed detection and response.

The role requires deep OS internals knowledge and advanced forensics skills, with opportunities to mentor teammates and influence incident response playbooks.