> Markdown version of [/jobs/ext/3973901-digital-forensics-and-incident-response-dfir-analyst](https://www.wearedevelopers.com/jobs/ext/3973901-digital-forensics-and-incident-response-dfir-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Digital Forensics and Incident Response (DFIR) Analyst

- **Company:** Peraton Inc
- **Location:** Reston, VA, United States
- **Salary:** $80,000 - $128,000
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Cyber Security, Linux, Digital Forensics, Information Technology Operations, Networking Hardware, Network Security, Data Analytics, Splunk
- **Published:** October 27, 2026
- **Apply:** https://diversityjobs.com/career/18755385/Digital-Forensics-Incident-Response-Dfir-Analyst-Virginia-Reston

## About the Role

* Bachelor's Degree or 4 additional years of experience in a cybersecurity-related field in lieu of degree, or equivalent Security Operations work experience.
 * Experience with Splunk Enterprise Security or Splunk Certified Power User. Advanced Splunk certification is a plus.
 * DFIR experience using Endpoint Detection and Response (EDR) technologies.
 * Experience performing forensic analysis on various evidence types including disk, memory, network, and cloud artifacts.
 * Proficient with common scripting and programming languages.
 * Experience with Risk Management Frameworks.
 * In-depth understanding of common security controls for Windows, Linux, and network equipment.
 * Strong attention to detail, timemanagement skills, and a professional demeanor.
 * US Citizenship.

## Description

Peraton is seeking a Digital Forensics and Incident Response (DFIR) Analyst to support our Corporate Cybersecurity Operations Center (CSOC). In this role, you will conduct large-scale cyber data analytics, lead the use of detection technologies, perform advanced threat hunting, and provide technical review of team member work. The ideal candidate is decisive, deadlineoriented, and produces highquality analytic output. The DFIR Analyst works closely with the CSOC Manager to deliver detailed security event analysis, support business units, and foster collaboration across IT teams., Protect the organization's IT assets as a member of the Cybersecurity Operations Center (CSOC).

 * Implement DFIR strategies to identify risks and reduce gaps in host and network security controls.
 * Collaborate with IT Operations and end users to proactively prevent intrusions and support incident response efforts.
 * Prepare CSOC reports documenting security incidents from discovery through remediation.
 * Support vulnerability and cyber risk management by continuously monitoring threats and exposures.
 * Test and evaluate technology solutions in preparation for both small and large-scale deployments.
 * Participate in periodic on-call rotations supporting 24/7 cybersecurity operations.