Senior DFIR Engineer: Threat Hunting, Forensics & IR Tools

OpenTalent; United States; On-site; USD 120,000 - 190,000; Full time

Job summary

OpenTalent is seeking a Senior DFIR Engineer to lead responses to advanced intrusions, perform forensic acquisition and analysis across disk, memory, cloud and mobile environments. You will reverse engineer malware, develop detections (YARA, signatures), hunt threats in SIEM/EDR (Splunk, Elastic, CrowdStrike), and build custom tooling in Python, PowerShell, Go.

The role requires 5+ years in DFIR with strong incident response and digital forensics, deep OS knowledge, and mentoring teammates while

Qualifications

• 5+ years DFIR experience with strong incident response and digital forensics.
• Deep OS internals knowledge across Windows, Linux and macOS.
• Experience in malware reverse engineering and building detection rules.
• Mentorship or team-lead responsibilities in security teams.

Responsibilities

• Lead responses to advanced intrusions/APTs and insider threats.
• Perform forensic acquisition & analysis across disk, memory, cloud and mobile.
• Reverse engineer malware and develop detections (YARA, signatures).
• Hunt threats and build detections in SIEM/EDR (Splunk, Elastic, CrowdStrike, etc.).
• Develop custom tooling/scripts (Python, PowerShell, Go).
• Mentor team and contribute to playbooks/runbooks.

Skills

DFIR expert

Windows OS internals

Linux OS internals

macOS OS internals

Mentorship

Python

PowerShell

Bash

Go

Tools

Volatility

X-Ways

Magnet AXIOM

GRR

IDA Pro

Ghidra

Zeek

Sysmon

Job description

OpenTalent is seeking a Senior DFIR Engineer to lead responses to advanced intrusions, perform forensic acquisition and analysis across disk, memory, cloud and mobile environments. You will reverse engineer malware, develop detections (YARA, signatures), hunt threats in SIEM/EDR (Splunk, Elastic, CrowdStrike), and build custom tooling in Python, PowerShell, Go.

The role requires 5+ years in DFIR with strong incident response and digital forensics, deep OS knowledge, and mentoring teammates while