1

Certified Forensic Computer Examiner Jobs (NOW HIRING)

Be Seen First

CFCE - Certified Forensic Computer Examiner * GCFA - GIAC Certified Forensic Analyst * GCFE - GIAC Certified Forensic Examiner * GNFA - GIAC Network Forensic Analyst * GCTI - GIAC Cyber Threat ...

Industry-specific certifications such as Certified Forensic Computer Examiner (CFCE), EnCase Certified Examiner (EnCE), AccessData Certified Examiner (ACE), GIAC Certified Forensic Examiner (GCFE ...

Be Seen First

CFCE - Certified Forensic Computer Examiner * GCFA - GIAC Certified Forensic Analyst * GCFE - GIAC Certified Forensic Examiner * GNFA - GIAC Network Forensic Analyst * GCTI - GIAC Cyber Threat ...

Be Seen First

Special Agent- Job ID 95161

Saint Paul, MN · On-site

$44.46 - $60.85/hr

EnCase Certified Examiner (EnCE), AccessData Certified Examiner (ACE), Certified Forensic Computer Examiner (CFCE), Global Information Assurance Certification Forensic Examiner (GCFE) * Juris ...

New

Possession of or ability to readily obtain Certified Forensic Computer Examiner (CFCE) from IACIS or GIAC Certified Forensic Examiner (GCFE) from SANS within one year of employment. Possession of or ...

next page

Showing results 1-20

Certified Forensic Computer Examiner information

See salary details

$113.5K

$116.7K

$119K

How much do certified forensic computer examiner jobs pay per year?

As of Jul 3, 2026, the average yearly pay for certified forensic computer examiner in the United States is $116,713.00, according to ZipRecruiter salary data. Most workers in this role earn between $116,500.00 and $116,500.00 per year, depending on experience, location, and employer.

What are some common challenges faced by Certified Forensic Computer Examiners when working on digital investigations?

Certified Forensic Computer Examiners often encounter challenges such as dealing with encrypted or damaged data, maintaining a strict chain of custody, and keeping up with rapidly evolving technology. Additionally, working under tight deadlines and ensuring that all findings are thoroughly documented for potential use in legal proceedings can add pressure. Collaboration with law enforcement, attorneys, and other technical experts is also essential, requiring strong communication and teamwork skills.

What is the difference between Certified Forensic Computer Examiner vs Certified Computer Examiner?

AspectCertified Forensic Computer ExaminerCertified Computer Examiner
CertificationsCFCE certification from IACISVarious certifications, often including CFCE or similar
Work EnvironmentForensic labs, law enforcement, legal casesIT departments, corporate security, law enforcement
Industry UsagePrimarily in criminal investigations and legal proceedingsBroader IT security and troubleshooting roles

The Certified Forensic Computer Examiner specializes in digital forensic investigations, focusing on legal and criminal cases, often requiring CFCE certification. In contrast, the Certified Computer Examiner may work in broader IT security roles, with less emphasis on legal proceedings. Both roles involve examining digital devices, but the CFCE is more specialized in forensic analysis for legal contexts.

What are the key skills and qualifications needed to thrive as a Certified Forensic Computer Examiner, and why are they important?

To thrive as a Certified Forensic Computer Examiner, you need a strong understanding of computer systems, digital evidence handling, and relevant laws, typically supported by certifications such as CFCE or EnCE. Proficiency with forensic analysis tools like EnCase, FTK, and specialized data recovery software is essential. Attention to detail, analytical thinking, and effective written communication are critical soft skills for accurately interpreting findings and presenting clear reports. These skills and qualities ensure the integrity, reliability, and admissibility of digital evidence in legal proceedings.

What is a Certified Forensic Computer Examiner?

A Certified Forensic Computer Examiner (CFCE) is a professional who has been trained and certified to collect, analyze, and preserve digital evidence from computers and other electronic devices. Their role is critical in legal investigations, where they recover deleted files, uncover hidden data, and ensure the integrity of evidence for use in court. CFCEs follow strict protocols to maintain the chain of custody and often testify as expert witnesses. The certification is offered by the International Association of Computer Investigative Specialists (IACIS) and demonstrates a high level of competence in digital forensic methodologies.
More about Certified Forensic Computer Examiner jobs
What cities are hiring for Certified Forensic Computer Examiner jobs? Cities with the most Certified Forensic Computer Examiner job openings:
What states have the most Certified Forensic Computer Examiner jobs? States with the most job openings for Certified Forensic Computer Examiner jobs include:
What job categories do people searching Certified Forensic Computer Examiner jobs look for? The top searched job categories for Certified Forensic Computer Examiner jobs are:
Infographic showing various Certified Forensic Computer Examiner job openings in the United States as of June 2026, with employment types broken down into 8% Full Time, 77% Part Time, and 15% Contract. Highlights an 80% Physical, 1% Hybrid, and 19% Remote job distribution, with an average salary of $116,713 per year, or $56.1 per hour.
Digital Forensic Collection Specialist

Digital Forensic Collection Specialist

Consilio LLC

Remote

Other

Posted yesterday


Job description

Overview
The Digital Forensics Collection Specialist is a client-dedicated, on-site role based in Seattle, WA that supports a major technology client's Legal department and eDiscovery team in the forensic preservation, imaging, collection, transfer, and secure storage of electronically stored information (ESI) during the discovery process.
This role requires hands-on expertise in digital forensics hardware and software, including physical imaging of Windows and macOS devices, cloud-based data transfers, and meticulous evidence tracking. The ideal candidate combines deep technical acumen with strong collaboration skills to interface with counsel, global IT teams, custodians, and stakeholders at all levels.
Responsibilities
Key Responsibilities
  • Perform on-site forensic imaging and collection of Windows devices using Logicube physical imaging hardware
  • Perform on-site forensic collection of macOS devices using Digital Collector
  • Maintain strict chain of custody protocols for all physical and digital evidence
  • Transfer collected forensic images and data sets to AWS S3 storage in accordance with security and compliance standards
  • Track and manage all evidence and collection efforts using QuickBase, ensuring accurate and timely record-keeping
  • Coordinate with custodians and IT staff to schedule and facilitate device collections with minimal business disruption
  • Facilitate remote collection of data from enterprise systems, including Exchange servers, file shares, and cloud-based collaboration tools (M365, SharePoint, Slack, etc.)
  • Verify data integrity through hash validation and quality-assurance checks post-collection
  • Effectively communicate with case teams, outside counsel, and corporate stakeholders in support of discovery workflows
  • Analyze and deploy best practices for the forensic handling, preservation, and analysis of electronic evidence
Additional Responsibilities
  • Assist with developing, revising, and maintaining process documentation, SOPs, and forensic workflow playbooks
  • Evaluate and recommend new forensic tools, techniques, and technologies to improve collection efficiency
  • Support team members with training and education on forensic best practices, tool usage, and evidence handling procedures
  • Collaborate cross-functionally with IT Security, Legal Operations, and outside vendors to support investigation and litigation needs
  • Participate in lab equipment maintenance, inventory management, and forensic hardware lifecycle planning

Qualifications
Qualifications
Education
  • Bachelor's degree in Digital Forensics, Computer Science, Information Security, Computer Engineering, or related technical discipline
  • Advanced degree or specialized forensic coursework preferred

Experience
  • 3+ years of hands-on experience with digital forensic imaging and evidence collection
  • Demonstrated experience with physical imaging hardware (Logicube Falcon, Falcon NEO, or similar forensic duplicators)
  • Experience performing forensic collections on macOS using tools such as Digital Collector, MacQuisition, or similar
  • Thorough understanding of the EDRM lifecycle and electronic discovery workflows
  • Experience with cloud storage platforms, specifically AWS S3, for secure data transfer and storage
  • Experience with evidence tracking and case management systems (QuickBase or similar)
  • Familiarity with enterprise IT environments and various forms of ESI, including email systems (M365, Exchange, GSuite), file shares, and collaboration platforms
  • Knowledge of data privacy regulations and cross-border data transfer considerations
  • Prior experience in a legal services, eDiscovery, or client-facing forensic support role preferred

Skills & Certifications
Required Skills:
  • Strong understanding of forensic imaging formats (E01, DD/Raw, AFF) and hash-based integrity verification (MD5, SHA-1, SHA-256)
  • Proficiency with write-blockers, forensic duplicators, and chain-of-custody protocols
  • Ability to troubleshoot hardware and software issues during live collection scenarios
  • Strong communication skills, including the ability to convey complex technical concepts in simple, clear terms to non-technical stakeholders
  • Attention to detail and commitment to accuracy in evidence documentation and handling

Preferred Certifications (one or more):
  • EnCE (EnCase Certified Examiner)
  • CCE (Certified Computer Examiner)
  • CFCE (Certified Forensic Computer Examiner)
  • ACE (AccessData Certified Examiner)
  • GCFE (GIAC Certified Forensic Examiner)
  • AWS Certified Cloud Practitioner or Solutions Architect (a plus)

Additional Preferred Skills:
  • Python scripting for automation of forensic workflows and data processing
  • Experience with Amazon Web Services (S3, IAM, CLI)
  • Familiarity with forensic suites such as EnCase, FTK, X-Ways, or AXIOM
  • Experience with BitLocker, FileVault, and encrypted media handling

Work Environment
  • This is a full-time, on-site position based in Seattle, WA - remote work is not available for this role
  • Must be able to lift and transport forensic equipment (up to 30 lbs) and work in a corporate lab/office environment
  • Occasional travel to other client offices in the region may be required for on-site collections
  • May require flexible scheduling to accommodate urgent legal preservation requests

Consilio's True North Values
Excellence - We strive to make every client our advocate
Passion - We DO because we CARE
Collaboration - We win together through teamwork and communication
Agility - We flex, adapt and embrace change
People - We value, respect and invest in our teammates
Vision - We create clarity of purpose and a clear path forward
Consilio, LLC is an EEO/Affirmative Action Employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other legally protected status.
#LI-RF1
#LI-Hybrid