BeOne Medicines is a global biotechnology company headquartered in Basel, Switzerland, and founded in 2010. The firm focuses on the discovery, development, and commercialization of innovative molecularly targeted and immuno-oncology drugs for treating various types of cancer. It maintains a significant presence across North America, Europe, and Asia-Pacific, operating large-scale manufacturing facilities and an extensive internal clinical research organization.
HQ: Basel, Switzerland • Clinical Research • Pharmaceuticals • Biotechnology • Drug Discovery • Health Care • Biopharma • 5000+ employees • Est. 2010
$168k – $228k per year • Equity • Executive • United States • Remote (United States) • Bachelor's Degree • Full-Time • Staff
CAPA
Chips/EDA
PoC Library
$58k – $73k per year • Junior • 2+ years exp • Remote (United Kingdom) • Full-Time • Junior
$58k – $73k per year • Senior • 3+ years exp • Remote (France, United Kingdom, Turkey) • Full-Time • Senior
Cyble is an AI-native cybersecurity and digital risk protection platform that delivers real-time threat intelligence and automated risk mitigation across the surface, deep, and dark web. Powered by its proprietary Blaze AI engine - which utilizes a dual-brain architecture combining live structured threat behavior graphs with semantic context embeddings - the platform continuously indexes over 350 billion threat data points from more than 1.4 million underground cybercrime sources, ransomware portals, and encrypted channels.
Bengaluru • Melbourne • Chicago • London • Dubai • Artificial Intelligence • Threat Intelligence • Cybersecurity • 51-200 employees
$150k – $200k per year • Lead • 11+ years exp • Remote (United States) • Full-Time • Architect
YARA
Databases
Apache Kafka
ElasticSearch
OpenSearch
AI/ML
AI Agents
Embeddings
RAG
Semantic Search
GraphRAG
Knowledge Graph
Semantic Search
DevOps
Kubernetes
Vector
Cybersecurity
MITRE ATT&CK
STIX
TAXII
YARA
$18k – $35k per year • Middle • 3+ years exp • Bengaluru • Remote (India) • Bachelor's Degree • Full-Time • Middle
PowerShell
Python
YARA
AI/ML
AI Agents
Prompt Engineering
Cybersecurity
YARA
Recorded Future
Banco Santander is a prominent multinational financial services company that provides retail, commercial, and investment banking products to millions of customers globally. The institution is recognized as one of the largest banking groups in the world, maintaining a dominant market presence throughout Europe and the Americas. Headquartered in Madrid, Spain, the global bank operates an extensive network of branches and subsidiaries to deliver tailored financial solutions to its diverse international client base.
HQ: Madrid, Spain • Events & Ticketing • Corporate Events • Artificial Intelligence • Credit Cards • Financial Services • Banking • 1001-5000 employees
Boadilla del Monte • Remote (Spain) • Full-Time • Spanish: C1
TypeScript
JavaScript
Frontend
Angular
DevOps
Splunk
Vector
Cybersecurity
Crowdstrike
EnCase
IBM QRadar
The drug and diagnostic development businesses of Precision Medicine Group, collectively known as Precision for Medicine, are industry leaders in the design, development, and execution of biomarker-informed clinical studies and complex data manage...
Pune • San Francisco • Washington • San Diego • Bengaluru • Health Care • Personalized Medicine • Clinical Research
≈ $88k – $151k per year (Estimated) • Lead • 8+ years exp • London • Remote (United Kingdom) • Bachelor's Degree • Internship • Principal
AI Agents
Copilot
Cybersecurity
CAPA
Precision Medicine Group is a specialized life sciences services firm that supports pharmaceutical and biotechnology organizations throughout the entire drug development and commercialization lifecycle.
New York • Indianapolis • Bengaluru • Chicago • San Francisco • Health Care • Biotechnology • CRO & CDMO Services • Est. 2012
≈ $88k – $151k per year (Estimated) • Lead • 8+ years exp • London • Remote (United Kingdom) • Bachelor's Degree • Internship • Principal
AI Agents
Copilot
Cybersecurity
CAPA
Your menu just became your best employee.. The Honeycomb Menu answers guest questions, trains your servers, writes your compliance docs, and speaks over 100 languages at every location, without ever calling in sick.
≈ $138k – $230k per year (Estimated) • Senior • Remote (United States) • Senior
Go
JavaScript
Python
Ruby
C#
C#
.NET
DevOps
AWS
Azure
CI/CD
CircleCI
GCP
GitHub Actions
Helm
Honeycomb
Kubernetes
OpenTelemetry
Terraform
GitHub
Cybersecurity
TheHive
Management
Slack
≈ $148k – $246k per year (Estimated) • Senior • Remote (United States) • Internship • Senior
Go
DevOps
Honeycomb
Kubernetes
Cybersecurity
TheHive
Management
Slack
≈ $168k – $279k per year (Estimated) • Staff+ • 9+ years exp • Remote (United States) • Staff
Go
Java
Node JS
Python
TypeScript
C#
JavaScript
C#
.NET
DevOps
Amazon EC2
Amazon EKS
Ansible
AWS
Chef
Helm
Honeycomb
Kubernetes
OpenTelemetry
Platform Engineering
SLI/SLO/SLA
Terraform
Amazon ECS
Amazon S3
IAM
Cybersecurity
TheHive
Management
Slack
Ping Identity is an American software company headquartered in Denver, Colorado, and founded in 2002. The company provides an enterprise-grade identity and access management platform that includes solutions for single sign-on, multi-factor authentication, directory services, and identity orchestration. Following its acquisition by Thoma Bravo and subsequent merger with ForgeRock, the organization serves thousands of global enterprises, including over half of the Fortune 100, across sectors like finance, healthcare, and government.
HQ: Denver, United States • Business Process Automation (BPA) • Software • Cybersecurity AI • Artificial Intelligence • Fraud Detection • Cloud Security • Cybersecurity • Identity Management • Est. 2002
≈ $47k – $121k per year (Estimated) • Middle • Remote (United Kingdom) • Middle
Go
YARA
DevOps
AWS
Docker
GCP
Kubernetes
Cybersecurity
Ping Identity
YARA
≈ $63k – $128k per year (Estimated) • Remote (United Kingdom)
YARA
DevOps
AWS
Docker
GCP
Kubernetes
Cybersecurity
Ping Identity
YARA
Secure your critical infrastructure with Dragos, our industrial cybersecurity solutions provide unmatched visibility and threat detection for OT environments.
Hanover • Houston • Washington • Norfolk • Internet Security Services • Information Security • Cybersecurity
$152k per year • Equity • Senior • 8+ years exp • Remote (United States) • Senior
Lua
Python
Ruby
Rust
YARA
Databases
ElasticSearch
DevOps
Amazon ECS
Splunk
Cybersecurity
Cyber Kill Chain
Scapy
Snort
Suricata
Tcpdump
Wireshark
YARA
Zeek
$200k per year • Equity • Lead • 5+ years exp • Remote (United States) • Principal
C#
Python
YARA
Cybersecurity
Suricata
YARA
Snort
Zeek
$182k per year • Equity • Lead • 5+ years exp • Remote (United States) • Principal
Assembly
Assembly
x64dbg
Cybersecurity
Ghidra
IDA Pro
YARA
Clario is a healthcare technology company headquartered in Philadelphia, Pennsylvania, with a history dating back to 1972. The organization provides clinical trial endpoint technology and services, including electronic clinical outcome assessments, medical imaging, cardiac safety monitoring, and respiratory solutions. It operates on a global scale, supporting pharmaceutical and biotechnology firms through all phases of clinical research to generate high-quality evidence for regulatory submissions.
HQ: Philadelphia, United States • Medical AI • Artificial Intelligence • Biotechnology • Digital Health • Medical Imaging • CRO & CDMO Services • Health Care • Clinical Research • 1001-5000 employees • Est. 1972
≈ $8k – $33k per year (Estimated) • Junior • 1+ year exp • India • Remote (India) • Bachelor's Degree • Full-Time • Junior
≈ $12k – $38k per year (Estimated) • Middle • 3+ years exp • India • Remote (India) • Bachelor's Degree • Full-Time • Middle
Leidos is a defense, intelligence, civil, and health information technology enterprise. Headquartered in Reston, Virginia, the Fortune 500 company (NYSE: LDOS) operates as one of the primary IT, scientific research, and systems integration contractors for the U.S. federal government, allied defense agencies, and commercial infrastructure entities.
HQ: Reston, United States • Government • Cybersecurity • Military • 5000+ employees • Est. 2013
$108k – $195k per year • Senior • 8+ years exp • United States • Remote (United States) • Full-Time • Senior
Perl
Python
YARA
AI/ML
AI Agents
DevOps
AWS
Azure
Splunk
Cybersecurity
Cyber Kill Chain
Diamond Model
MITRE ATT&CK
Snort
YARA
GE Vernova is a global energy equipment and services company that spun off from General Electric as an independent, publicly traded business. Headquartered in Cambridge, Massachusetts, the company operates across three primary business segments - Power, Wind, and Electrification - providing gas, nuclear, hydro, onshore and offshore wind turbines, grid software, and energy storage solutions. GE Vernova partners with utilities, industrial clients, and governments worldwide to drive electrification and accelerate the transition toward sustainable power.
HQ: Cambridge, United States • Wind Energy • Energy & Utilities • Power Grid • 1001-5000 employees
$90k – $150k per year • Staff+ • 10+ years exp • Canada • Remote (Canada) • Relocation • Bachelor's Degree • Full-Time • Staff
Sophos is a global leader in cybersecurity, providing businesses and individuals with a comprehensive range of solutions to protect against a wide range of cyber threats. Our products include endpoint protection, network security, and cloud security. Sophos is committed to providing our customers with the highest level of security and protection, and we are always innovating to stay ahead of the latest threats.
HQ: Oxford, United Kingdom • Internet Security Services • Managed Security • Information Security • Cybersecurity
≈ $27k – $61k per year (Estimated) • Senior • 7+ years exp • Remote (India) • Full-Time • Senior
PowerShell
SQL
Node JS
JavaScript
Node JS
Commander.js
Cybersecurity
MITRE ATT&CK
osquery
Sophos
Velociraptor
≈ $39k – $97k per year (Estimated) • Lead • 5+ years exp • Remote (Japan) • Full-Time • Staff • Japanese • English: C1 (Optional)
SQL
DevOps
AWS
Cybersecurity
Autopsy
EnCase
FTK
MITRE ATT&CK
osquery
Sophos
X-Ways Forensics
Trellix is a global cybersecurity company headquartered in Milpitas, California, and was established in 2022 following the merger of McAfee Enterprise and FireEye. The company provides an open and native extended detection and response (XDR) platform that integrates endpoint, cloud, network, and data security to protect organizations from advanced cyber threats. Operating as a private entity under Symphony Technology Group, it serves thousands of enterprise and government customers worldwide through a comprehensive portfolio of automated security solutions.
HQ: Milpitas, United States • Cybersecurity AI • Network Security • Cloud Security • Endpoint Security • Threat Intelligence • Artificial Intelligence • Cybersecurity • 501-1000 employees • Est. 2022
≈ $112k – $224k per year (Estimated) • Senior • 5+ years exp • United States • Remote (United States) • Full-Time • Senior
JavaScript
Kotlin
SQL
Dart
Mobile
Flutter
Cybersecurity
Burp Suite
Frida
Ghidra
IDA Pro
VirusTotal
YARA
≈ $112k – $224k per year (Estimated) • Senior • 5+ years exp • United States • Remote (United States) • Full-Time • Senior
JavaScript
Kotlin
SQL
Dart
Mobile
Flutter
Cybersecurity
Burp Suite
Frida
Ghidra
IDA Pro
VirusTotal
YARA
Huntress is a cybersecurity software company focused on helping organisations detect and respond to threats that traditional preventative tools can miss. Its products are built around identifying suspicious activity in real environments, investigating what is happening, and supporting remediation, which is particularly important for teams that do not have the time or specialist resources to run a full security operations centre. For job seekers, that means the work is closely tied to real incident patterns, attacker behaviour, and the practical challenges of securing modern business systems.
Embedded Systems • Hardware • Threat Intelligence • Endpoint Security • Cybersecurity
≈ $120k – $240k per year (Estimated) • Equity • Lead • Remote (United States) • Full-Time • Principal
C#
C++
PowerShell
Python
Databases
ElasticSearch
DevOps
Kibana
Cybersecurity
YARA
Security Scorecard is a leading provider of cybersecurity risk management solutions. Our platform provides organizations with real-time insights into their cybersecurity posture, helping them to identify and mitigate vulnerabilities. Security Scorecard offers a variety of features, including: Cybersecurity risk assessment Vulnerability management Threat intelligence Compliance monitoring Reporting and analytics Security Scorecard is a popular choice for businesses of all sizes.
New York • Austin • Jersey City • Washington • Atlanta • Financial Services • Cybersecurity • Supply Chain
≈ $123k – $218k per year (Estimated) • Equity • Senior • 5+ years exp • Remote (United States) • Bachelor's Degree • Senior
Go
Python
SQL
TypeScript
YARA
AI/ML
LLM Evaluation
Structured Outputs
DevOps
AWS
CI/CD
Platform Engineering
Splunk
Amazon Kinesis
Cybersecurity
MISP
OpenCTI
STIX
TAXII
YARA
≈ $123k – $218k per year (Estimated) • Equity • Senior • 5+ years exp • Atlanta • Remote (United States) • Bachelor's Degree • Senior
Go
Python
SQL
TypeScript
YARA
AI/ML
LLM Evaluation
Structured Outputs
DevOps
AWS
CI/CD
Platform Engineering
Splunk
Amazon Kinesis
Cybersecurity
MISP
OpenCTI
STIX
TAXII
YARA
Equity • Senior • 5+ years exp • Pittsburgh • Remote (Panama) • Bachelor's Degree • Senior
Go
Python
SQL
TypeScript
YARA
AI/ML
LLM Evaluation
Structured Outputs
DevOps
AWS
CI/CD
Platform Engineering
Splunk
Amazon Kinesis
Cybersecurity
MISP
OpenCTI
STIX
TAXII
YARA
Volexity, the pioneer of memory forensics, delivers next-generation cybersecurity solutions - Volexity Volcano & Volexity Surge - and expert cyber threat intelligence & incident response services.
Incident Response • Information Security • Cybersecurity
≈ $67k – $158k per year (Estimated) • Junior • 2+ years exp • Remote (United States, Australia) • Junior
Python
YARA
Cybersecurity
Microsoft Defender
SentinelOne
Suricata
YARA
Management
Google Workspace
Biomapas is a comprehensive outsourcing solution provider catering to the global life science sector. The company acts as a strategic partner for biopharmaceutical and medical device companies, offering extensive clinical research services worldwide. Biomapas covers the entire product lifecycle from regulatory compliance to pharmacovigilance and medical information.
Tbilisi • Kyiv • Kaunas • Biotechnology • Clinical Research • CRO & CDMO Services
$27k – $29k per year (gross) • Junior • Kaunas • Remote (Lithuania) • Full-Time • Junior • Lithuanian: C1
Torq is a SaaS company focused on security automation. Its product helps security teams connect the tools they already use and automate repeatable work, so incidents can be investigated and handled faster and with less manual effort. In practice, this means turning common security workflows, such as triage, enrichment, alert handling, and response steps, into reliable automated processes that reduce noise and free up analysts to focus on higher judgement tasks.
Washington • Tel Aviv • Boston • Atlanta • London • Incident Response • Semiconductors • Embedded Systems
Staff+ • 6+ years exp • Remote (Costa Rica) • Architect
Python
YARA
AI/ML
AI Agents
Hallucination
Prompt Engineering
Human-in-the-Loop
LLM Guardrails
Function Calling
RAG
Model Context Protocol
DevOps
Rest API
Splunk
AWS
Azure
GCP
IAM
Cybersecurity
Crowdstrike
SentinelOne
Cortex XSOAR
YARA
Staff+ • 6+ years exp • Remote (Costa Rica) • Bachelor's Degree • Architect
Python
YARA
AI/ML
AI Agents
Hallucination
Prompt Engineering
Human-in-the-Loop
LLM Guardrails
Function Calling
RAG
Model Context Protocol
DevOps
Rest API
Splunk
AWS
Azure
GCP
IAM
Cybersecurity
Crowdstrike
SentinelOne
Cortex XSOAR
YARA
Packetlabs is a Canadian cybersecurity company founded in 2013 and based in Mississauga. It specialises in penetration testing and adversary simulation. The company serves financial and technology clients.
HQ: Mississauga, Canada • Information Security • Penetration Testing • Cybersecurity • Est. 2013
≈ $96k – $236k per year (Estimated) • Remote (Canada) • Full-Time
Python
DevOps
RTOS
Cybersecurity
Ghidra
Chips/EDA
KiCad
CrowdStrike is a global cybersecurity leader specializing in cloud-delivered endpoint protection, threat intelligence, and cyberattack response services. Headquartered in Austin, Texas, and publicly traded on the Nasdaq (CRWD), the company provides real-time security solutions to enterprises worldwide.
HQ: Austin, United States • Cybersecurity AI • LLM & Generative AI • Artificial Intelligence • Professional Services • Application Security • Threat Intelligence • Endpoint Security • Cybersecurity • 5000+ employees
≈ $127k – $235k per year (Estimated) • Equity • Senior • 10+ years exp • United States • Remote (United States) • Full-Time • Senior
C++
Rust
Cybersecurity
Crowdstrike
Ghidra
IDA Pro
STRIDE
Salary range
| Seniority |
Jobs |
25% |
Median |
75% |
| All levels |
17 |
$73K |
$180K |
$200K |
Based only on the listings that state pay. Gross annual amounts, converted to USD so roles in different currencies stay comparable.
The market right now
Alion currently lists 59 open Remote DFIR jobs from 32 companies. 13 of them were posted or refreshed in the last seven days. 29 of the employers have posted something in the last three months, which is the pool worth watching if you are starting a search now. Every listing links straight to the employer, so you apply on their own board rather than through an intermediary.
What these roles pay
17 of these Remote DFIR jobs state pay directly. Across them the middle half of the market sits between $73K and $200K a year, with a median of $180K. Figures are gross annual amounts converted to US dollars, so roles in different currencies stay comparable.
Where the work is
The largest concentrations of these roles are United States (7), India (2), Canada (1), Italy (1), and Malaysia (1). 100% of the listings are fully remote, so a large part of this market is open to you regardless of where you live.
Who is hiring
The employers with the most open Remote DFIR jobs right now are Honeycomb (11), Security Scorecard (7), BeOne Medicines (4), Cyble (2), Ping Identity (2), and Dragos (2). Each company page on Alion carries its size, funding stage, tech stack and every other position it has open, so you can judge the employer before you spend an evening on the application.
What employers ask for
Reading across the current listings, the tools that come up most often are AWS (23), YARA (23), Python (22), YARA (19), Go (15), GCP (14), TheHive (13), and Splunk (13). The counts are how many of these openings name each one, which is a better guide to what is actually being hired for than a generic skills list.
Relocation, visas and equity
Of the current Remote DFIR jobs, 1 states visa sponsorship, 2 offer a relocation package, and 14 include equity. These are filters on the list above, so you can narrow it to the ones that make a move possible for you.
