{"id":2290409,"url":"https://alion.io/job/vurke-dfir-engineer","title":"DFIR Engineer","company":{"id":3905891,"name":"Vurke","domain":"vurke.io","url":"https://alion.io/company/vurke","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":true,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Ghidra","optional":false},{"name":"GRR Rapid Response","optional":false},{"name":"IDA Pro","optional":false},{"name":"Linux","optional":false},{"name":"Magnet AXIOM","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Sysmon","optional":false},{"name":"Volatility","optional":false},{"name":"Windows","optional":false},{"name":"X-Ways Forensics","optional":false},{"name":"YARA","optional":false},{"name":"YARA","optional":false},{"name":"Zeek","optional":false}],"status":"live","first_seen_at":"2026-10-11T15:33:05Z","employer_posted_date":null,"last_verified_at":"2026-10-11T15:33:05Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"About the jobDFIR Engineer - UK remote - £65,000 - £95,000 + Benefits + Bonus\nOur client is scaling their DFIR capability and is seeking highly advanced DFIR Engineers to join their elite security team. This role is designed for technical specialists who thrive in complex investigations, advanced threat scenarios, and large scale incident response. You will be at the forefront of digital forensics, reverse engineering, and cyber defence, working across enterprise, cloud, and hybrid environments.\nMain responsibilities\nLead response to advanced intrusions/APTs, insider threats\n\nPerform forensic acquisition & analysis (disk, memory, cloud, mobile)\n\nReverse engineer malware, develop detection rules (YARA, signatures)\n\nHunt threats, build detections in SIEM/EDR (Splunk, Elastic, CrowdStrike, etc.)\n\nDevelop custom tooling/scripts (Python, PowerShell, Go)\n\nMentor team, contribute playbooks/runbooks\n\nSkills & Experience\n5+ years DFIR - Must be strong in BOTH Digital Forensice & Incident Response\n\nDeep OS internals (Windows, Linux, macOS), network protocols, cloud security\n\nVolatility, X-Ways, Magnet AXIOM, GRR, IDA Pro, Ghidra, Zeek, Sysmon\n\nStrong scripting/programming (Python, PowerShell, Bash, Go)\n\nPreferred certs: GCFA, GNFA, GREM, OSCP/OSEE\n\nOriginally posted on Himalayas","description_format":"text","description_chars":1289,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Freelance & Talent Marketplaces"],"lifecycle":[{"event":"open","at":"2026-10-11T17:28:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":26,"reasons":["seen:0","win:early"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/vurke-dfir-engineer","json_url":"https://alion.io/job/vurke-dfir-engineer.json","meta":{"generated_at":"2026-10-12T12:37:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19662,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3905891},"rest":"https://alion.io/mcp/rest/get_company?id=3905891"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvurke-dfir-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvurke-dfir-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvurke-dfir-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/vurke-dfir-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvurke-dfir-engineer"}]}