Senior Associate, Digital Forensics and Incident Response (DFIR)

Job Description

Job Description

Job Requisition

POSITION TITLE: Senior Associate

PRACTICE/CORPORATE: Digital Forensics & Incident Response

LOCATION: TBD

REPORTS TO: Managing Director

FLSA: Exempt

DATE COMPLETED/REVISED: 06-2026            

WHO IS PRESCIENT?

Prescient is a tech-enabled digital intelligence, investigation, and risk advisory firm. Our team helps multinational corporations, law firms, investors, and private clients mitigate risk and discover actionable intelligence using next generation technology and tradecraft. We operate at the intersection of cybersecurity, corporate security, disputes, and intelligence, and support clients around the world from offices in the United States and Europe.

POSITION SUMMARY

Prescient is seeking a dynamic new team member to help grow our Digital Forensics & Incident Response (DFIR) services. Prescient has built a world class DFIR capability over the past several years and is looking to hire a Senior Associate with experience from the public and/or private sector to build on our success and help us innovate.

Final title decisions will be made based on years of experience and candidate expertise.

ESSENTIAL JOB FUNCTIONS

The team member will generally be responsible for:

• Leading and/or supporting investigations into cybersecurity incidents, including ransomware, data breaches, and insider threats.
• Performing incident triage, forensic analysis, malware examination, and log review to identify the root cause and scope of compromise.
• Conducting forensic imaging and analysis of endpoints, servers, cloud environments, and mobile devices.
• Preserving and analyzing digital evidence in line with legal and regulatory requirements.
• Extracting, correlating, and interpreting data from multiple sources to reconstruct attack timelines.
• Documenting methodologies and findings to support potential litigation, regulatory inquiries, or internal reviews.

MINIMUM QUALIFICATIONS

Experience: Candidates will have approximately three (3) to five (5) years of experience in digital forensics, incident response, or a related field.

Technical Skills:

• Strong technical background in digital forensics tools (e.g., Magnet Axiom, EnCase, FTK, Cellebrite, XWays, etc.) and incident response, EDR, and cybersecurity platforms, as well as cloud-based environments (M365, G-Suite, AWS, etc.).
• Proficiency in handling a variety of operating systems (e.g., Linux, Windows, Mac, iOS, virtual machines, etc.) and file systems (e.g., FAT, NTFS, EXT, etc.). Must be familiar with digital evidence collection from a variety of sources.
• Proficiency in data and log file analysis and analytics tools such as SQL, Python, Tableau, Splunk, and Excel.

Leadership Abilities: Candidates must have exceptional communication, analytical, and interpersonal skills.

Certifications (Optional):

• Certified Computer Examiner (CCE)
• Certified Information Systems Security Professional (CISSP)
• Certified Incident Handler (GCIH)
• Certified Forensic Computer Examiner (CFCE)
• Other relevant certifications in DFIR or cybersecurity.

Education (Optional): Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.

Prescient provides equal employment opportunities to all employees and applicants. Please note this job requisition is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change.