> Markdown version of [/jobs/ext/644061-engineer-cybersecurity-dfir](https://www.wearedevelopers.com/jobs/ext/644061-engineer-cybersecurity-dfir). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Engineer, Cybersecurity DFIR

- **Company:** Intercontinental Exchange
- **Location:** Provo, UT, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Big Data, Cyber Security, Linux, Digital Forensics, Intrusion Detection and Prevention, Cybercrime
- **Published:** June 25, 2026
- **Apply:** https://www.juju.com/job/00000000gaycvw

## About the Role

+ 3+ years of relevant experience

 + University degree in related discipline

 + Hands on experience with Windows and Linux

 + Deep understanding of networking and its application

## Description

The ICE Cybersecurity Digital Forensics and Incident Response (DFIR) team is responsible for defending critical financial infrastructure from Global Cyber threats. We leverage an evolving arsenal of controls that require technical proficiency as well as tenacity, professionalism, and strong communication skills.

Responsibilities

 + Security Analytics - Efficiently distill actionable information from large data sets for reporting, hunting, and anomaly detection

 + Incident Management - Detect, document, investigate, and resolve security incidents in an efficient manner

 + Endpoint Forensics - Construct meaningful incident timelines from forensic artifact analysis

 + Counter Measures - Ability to design and implement preventative and corrective controls to counteract emerging threats

 + Proactive Threat Hunting - Develop and execute focused plans to discover advanced threats that evade traditional security controls

 + Behavioral Analysis - Develop and implement criteria to identify anomalous user behavior leading indicating insider threat activity

 + Intrusion Detection - Develop and tune network anomaly control capability to produce reliable actionable data

 + Threat Hunting - Proactively search for unknown threats within the environment.


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Alibaba Big Data and Machine Learning Technology](https://www.wearedevelopers.com/videos/37-alibaba-big-data-and-machine-learning-technology)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [PySpark - Combining Machine Learning & Big Data](https://www.wearedevelopers.com/videos/44-pyspark-combining-machine-learning-big-data)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)