As a DFIR team member, you will analyze and respond to cyber incidents, perform digital forensics investigations, and help clients mitigate cyber threats in cloud environments.
Cye's DFIR team is responsible for responding to our clients' cyber incidents and crises.
Our group is expanding. If you see yourself in the front line of the cybersecurity domain as a digital forensic and incident response (DFIR) talent, your place is with us. As a DFIR team member, you will participate in hands-on security research and investigations, helping our customers understand and mitigate cyber threats and attacks.
Responsibilities
- Perform incident response lifecycle and real-time activities, including detection and analysis, containment and eradication, and recovery
- Perform incident response in a cloud environment (Azure, AWS etc.).
- Perform digital forensics investigations
- Research and analyze tactics, techniques, and procedures (TTPs) used by malicious actors
- Perform hunt-evil and find-evil activities for proactively detecting attacks
- Work closely with our in-house red team, CTI, and cyber architect teams
- Work closely with worldwide companies, CISOs, and technology experts
Qualifications
- Must be based in the Central or Eastern regions of the US
- 1-2 years of experience as a DFIR team member
- Experience with performing digital forensics in a cloud environment
- Experience with performing digital forensics of Windows-based and/or Linux-based platforms, network forensics, and analysis
- Thorough understanding of threat hunting models, as well as cyber threat intelligence, including TTP and IoCs extraction and mapping
- Experience with research and data analysis of large DBs via Splunk, Elasticsearch, SQL, or VQL
- Strong understanding of targeted attacks; able to create customized tactical remediation plans
- Good written and verbal English communication skills
Cye helps security and risk leaders gain a clear, defensible view of their cyber exposure, grounded in financial impact and real-world attack paths. By continuously quantifying exposure and validating it in context, organizations can establish a strong baseline, prioritize decisions with confidence, and track measurable reduction over time.
Similar Jobs
Artificial Intelligence • Software • Cybersecurity
Leads 7AI’s digital forensics and incident response partner ecosystem, owning partner-sourced ARR, alliance strategy, co-selling, and executive relationships across DFIR firms, MDR providers, cyber insurers, and breach counsel. Builds joint solutions connecting incident response to ongoing SOC protection, establishes partner enablement and certification programs, secures preferred-vendor status, and aligns Sales, Marketing, Product, and Alliances teams to drive scalable ecosystem-led growth.
Top Skills:
AIB2B SaasCybersecurityDfirMdrSoc
Security
Leads digital forensics and incident response investigations, including breach analysis, evidence preservation, cloud and identity investigations, reporting, and incident coordination. Conducts ransomware and cyber-extortion threat actor communications and negotiations, assesses credibility and claims, develops negotiation strategies, and briefs clients, counsel, insurers, and executives. Requires on-call availability, strong documentation, crisis communication, and collaboration across technical and legal stakeholders.
Top Skills:
AWSAzureAzure AdGCPIamMicrosoft Entra IdNistOauthOracle CloudPowershellPythonSansX-Ways
Security
Lead client-facing digital forensics and incident response engagements, including breach investigation, evidence collection, incident containment, root-cause analysis, and recovery. Analyze servers, workstations, networks, SaaS platforms, and logs; produce detailed reports for technical and non-technical audiences; and coordinate with clients, legal, compliance, vendors, and internal security teams. Participate in on-call coverage, occasional travel, and work outside standard business hours as needed.
Top Skills:
AWSAzureGwpNistOraclePowershellPythonSansX-Ways
What you need to know about the Chicago Tech Scene
With vibrant neighborhoods, great food and more affordable housing than either coast, Chicago might be the most liveable major tech hub. It is the birthplace of modern commodities and futures trading, a national hub for logistics and commerce, and home to the American Medical Association and the American Bar Association. This diverse blend of industry influences has helped Chicago emerge as a major player in verticals like fintech, biotechnology, legal tech, e-commerce and logistics technology. It’s also a major hiring center for tech companies on both coasts.
Key Facts About Chicago Tech
- Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
- Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
- Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
- Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory
