Senior Associate, Digital Forensics and Incident Response (DFIR)

Prescient

$90K — $120K *
Technical Services
Less than 5 years of experience
Job Overview by Ladders

Qualifications

  • 3-5 years of experience in digital forensics or incident response
  • Strong technical proficiency with digital forensics tools like Magnet Axiom and EnCase
  • Experience in handling various operating systems including Linux, Windows, and iOS
  • Proficient with analytics tools such as SQL, Python, and Splunk
  • Exceptional communication and interpersonal skills

Responsibilities

  • Lead investigations into cybersecurity incidents such as ransomware and data breaches
  • Perform incident triage and forensic analysis to identify root causes
  • Conduct forensic imaging and analyze endpoints, servers, and cloud environments
  • Preserve and analyze digital evidence following legal requirements
  • Extract and interpret data from various sources to reconstruct attack timelines
  • Document methodologies and findings to support litigation or regulatory inquiries

Benefits

  • Work with a world-class team in a rapidly growing field
  • Opportunity for professional development and innovation
  • Exposure to diverse cybersecurity incidents and challenges
  • Potential for leadership roles based on performance
  • Support for pursuing relevant certifications and education
Full Job Description
Job Requisition

POSITION TITLE: Senior Associate

PRACTICE/CORPORATE: Digital Forensics & Incident Response

LOCATION: TBD

REPORTS TO: Managing Director

FLSA: Exempt

DATE COMPLETED/REVISED: 06-2026

POSITION SUMMARY

Prescient is seeking a dynamic new team member to help grow our Digital Forensics & Incident Response (DFIR) services. Prescient has built a world class DFIR capability over the past several years and is looking to hire a Senior Associate with experience from the public and/or private sector to build on our success and help us innovate.

Final title decisions will be made based on years of experience and candidate expertise.

ESSENTIAL JOB FUNCTIONS

The team member will generally be responsible for:
  • Leading and/or supporting investigations into cybersecurity incidents, including ransomware, data breaches, and insider threats.
  • Performing incident triage, forensic analysis, malware examination, and log review to identify the root cause and scope of compromise.
  • Conducting forensic imaging and analysis of endpoints, servers, cloud environments, and mobile devices.
  • Preserving and analyzing digital evidence in line with legal and regulatory requirements.
  • Extracting, correlating, and interpreting data from multiple sources to reconstruct attack timelines.
  • Documenting methodologies and findings to support potential litigation, regulatory inquiries, or internal reviews.


MINIMUM QUALIFICATIONS

Experience: Candidates will have approximately three (3) to five (5) years of experience in digital forensics, incident response, or a related field.

Technical Skills:
  • Strong technical background in digital forensics tools (e.g., Magnet Axiom, EnCase, FTK, Cellebrite, XWays, etc.) and incident response, EDR, and cybersecurity platforms, as well as cloud-based environments (M365, G-Suite, AWS, etc.).
  • Proficiency in handling a variety of operating systems (e.g., Linux, Windows, Mac, iOS, virtual machines, etc.) and file systems (e.g., FAT, NTFS, EXT, etc.). Must be familiar with digital evidence collection from a variety of sources.
  • Proficiency in data and log file analysis and analytics tools such as SQL, Python, Tableau, Splunk, and Excel.


Leadership Abilities: Candidates must have exceptional communication, analytical, and interpersonal skills.

Certifications (Optional):

  • Certified Computer Examiner (CCE)
  • Certified Information Systems Security Professional (CISSP)
  • Certified Incident Handler (GCIH)
  • Certified Forensic Computer Examiner (CFCE)
  • Other relevant certifications in DFIR or cybersecurity.


Education (Optional): Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.

Please note this job requisition is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change.

Similar Jobs

More Jobs at Prescient

More Technical Services Jobs

Find similar Senior Associate, Digital Forensics and Incident Response (DFIR) jobs: