ZipRecruiter

Log In

1

Computer Forensics Analyst Jobs (NOW HIRING)

SAIC

Digital Forensics Analyst

Chantilly, VA

$160K - $200K/yr

Conduct forensic acquisition and analysis on computer, mobile, IOT, digital media devices, AWS/cloud instances and any other unidentified or non-standard media. * Ability to capture volatile data ...

Beyond SOF

Forensics Analyst II

San Antonio, TX · On-site

Perform initial analysis of log files,evidenceand other information. * Utilize data decryption tools. * Perform forensic incident handling tasks (such as forensic collections, host analysis ...

SAIC

Digital Forensics Analyst

Chantilly, VA · On-site

$160K - $200K/yr

Conduct forensic acquisition and analysis on computer, mobile, IOT, digital media devices, AWS/cloud instances and any other unidentified or non-standard media. * Ability to capture volatile data ...

SAIC

Digital Forensics Analyst

Chantilly, VA · On-site

$160K - $200K/yr

Conduct forensic acquisition and analysis on computer, mobile, IOT, digital media devices, AWS/cloud instances and any other unidentified or non-standard media. * Ability to capture volatile data ...

next page

Showing results 1-20

All JobsComputer Forensics Analyst Jobs

Computer Forensics Analyst information

See salary details

$65K

$101.7K

$156K

How much do computer forensics analyst jobs pay per year?

As of Jul 9, 2026, the average yearly pay for computer forensics analyst in the United States is $101,672.00, according to ZipRecruiter salary data. Most workers in this role earn between $75,000.00 and $122,000.00 per year, depending on experience, location, and employer.

What do forensic computer analysts do?

Forensic computer analysts investigate digital devices to recover, analyze, and preserve electronic evidence for legal cases. They use specialized tools and techniques to examine data from computers, smartphones, and storage media, often working closely with law enforcement or legal teams to support investigations.

What does a Computer Forensics Analyst do?

A Computer Forensics Analyst is a cybersecurity professional who investigates digital devices and networks to uncover evidence of crimes or security breaches. They collect, analyze, and preserve data from computers, mobile devices, and other digital storage media, ensuring that the evidence remains admissible in court. These analysts often work with law enforcement agencies, legal teams, or private companies to identify how cybercrimes occurred and to help prevent future incidents.

What are the key skills and qualifications needed to thrive as a Computer Forensics Analyst, and why are they important?

To thrive as a Computer Forensics Analyst, you need a solid understanding of cybersecurity principles, computer systems, and digital evidence handling, often supported by a degree in computer science, cybersecurity, or a related field. Proficiency in forensic tools like EnCase, FTK, and familiarity with operating systems, as well as certifications such as GIAC Certified Forensic Analyst (GCFA) or Certified Computer Examiner (CCE), are typically required. Attention to detail, analytical thinking, and strong written communication skills help analysts effectively investigate incidents and present findings. These competencies are crucial for accurately uncovering digital evidence, supporting legal processes, and maintaining the integrity of investigations.

How much do computer forensic analysts make?

Computer forensic analysts typically earn a median annual salary of around $70,000 to $100,000, depending on experience, education, and location. Entry-level positions may start lower, while those with specialized skills or certifications can earn higher salaries, especially in government or private sectors with complex investigations.

What are some common challenges faced by Computer Forensics Analysts during investigations?

Computer Forensics Analysts often encounter challenges such as dealing with encrypted or deleted data, rapidly evolving technology, and maintaining the integrity of digital evidence. They must also ensure that their investigative methods comply with legal and regulatory standards to ensure evidence is admissible in court. Additionally, analysts frequently work under tight deadlines and may need to collaborate closely with law enforcement, legal teams, and IT departments to piece together complex digital trails.

How do you become a computer forensic analyst?

To become a computer forensic analyst, individuals typically need a bachelor's degree in computer science, cybersecurity, or a related field. Gaining experience with digital forensics tools and techniques, obtaining certifications such as Certified Computer Forensics Examiner (CCFE) or EnCase Certified Examiner (EnCE), and developing strong analytical and technical skills are also important steps in entering the profession.

What Does a Computer Forensics Analyst Do?

As a computer forensics analyst, your duties focus on investigating electronic data and digital devices for law enforcement purposes. Your responsibilities include obtaining, accessing, and analyzing data from hard drives, emails, smartphones, and tablets. In this career, you may investigate cyber crimes (which take place on the internet) or gather digital evidence for other types of criminal investigations. In addition to collecting information, you retrieve data that someone destroyed, deleted, or obscured to hide evidence of a crime. Computer forensic analysts work for law enforcement agencies, private contractors, lawyers, or corporations. Some computer experts work on a freelance basis.

Will AI take over digital forensics?

Computer Forensics Analysts use specialized tools and techniques to investigate digital evidence, and AI can assist by automating data analysis and pattern recognition. However, human expertise remains essential for interpreting complex cases, making decisions, and ensuring legal compliance in digital investigations.

What is the difference between Computer Forensics Analyst vs Digital Forensics Specialist?

AspectComputer Forensics AnalystDigital Forensics Specialist
CertificationsEnCE, GCFAEnCE, GCFA
Work EnvironmentLaw enforcement, corporate security, consulting firmsLaw enforcement, government agencies, private sector
Industry UsageCommonly used in investigations and legal casesUsed in incident response and cybersecurity investigations

Both roles involve analyzing digital evidence, often requiring similar certifications like EnCE and GCFA. The main difference lies in their focus: Computer Forensics Analysts typically work on legal cases and investigations, while Digital Forensics Specialists often focus on incident response and cybersecurity threats. Both roles are vital in digital security and forensics fields, with overlapping skills and work environments.

More about Computer Forensics Analyst jobs
What cities are hiring for Computer Forensics Analyst jobs? Cities with the most Computer Forensics Analyst job openings:
What are the most commonly searched types of Computer Forensics Analyst jobs? The most popular types of Computer Forensics Analyst jobs are:
Who are the top companies hiring for Computer Forensics Analyst jobs? The top employers for Computer Forensics Analyst jobs are:
What states have the most Computer Forensics Analyst jobs? States with the most job openings for Computer Forensics Analyst jobs include:
What job categories do people searching Computer Forensics Analyst jobs look for? The top searched job categories for Computer Forensics Analyst jobs are:
What are popular job titles related to Computer Forensics Analyst jobs? For Computer Forensics Analyst jobs, the most frequently searched job titles are:
Computer Forensics Analyst jobs near you
Infographic showing various Computer Forensics Analyst job openings in the United States as of July 2026, with employment types broken down into 1% Locum Tenens, 1% Internship, 86% Full Time, 6% Part Time, 1% Temporary, and 5% Contract. Highlights an 82% Physical, 5% Hybrid, and 13% Remote job distribution, with an average salary of $101,672 per year, or $48.9 per hour.
Cyber Forensics Analyst - TS/SCI

Cyber Forensics Analyst - TS/SCI

Beyond SOF

Arlington, VA • On-site

Other

This job post has expired 1 day ago. Applications are no longer accepted.

Job description

Cyber Forensics Analysts
TS/SCI
Client seeking Cyber Forensics Analysts to support the DHS Hunt and Incident Response Team (HIRT). This team secures the Nation's cyber and communications infrastructure while providing front line response for cyber incidents and hunting for malicious cyber activity. The client, as a prime contractor to DHS, performs HIRT investigations to develop a diagnosis of the severity of breaches. Contract personnel provide front line response for digital forensics/incident response and proactively hunting for malicious cyber activity for this critical customer mission.
Responsibilities:
- Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack
- Assesses network topology and device configurations identifying critical security concerns and providing security best practice recommendations
- Collects network intrusion artifacts (e.g., PCAP, domains, URI's, certificates, etc.) and uses discovered data to enable mitigation of potential incidents
- Collects network device integrity data and analyze for signs of tampering or compromise
- Analyzes identified malicious network and system log activity to determine weaknesses exploited, exploitation methods, effects on system and information
- Tracking and documenting on-site incident response activities and providing updates to leadership through executive summaries and in-depth technical reports
- Planning, coordinating and directing the inventory, examination and comprehensive technical analysis of computer related evidence
- Serving as technical forensics liaison to stakeholders and explaining investigation details
Required Skills:
- U.S. Citizenship
- Must have an active Secret clearance (TS/SCI eligible) and be able to obtain DHS Suitability
- 8+ years of directly relevant experience in cyber forensic and network investigations using leading edge technologies and industry standard forensic tools
- Experience with reconstructing a malicious attack or activity
- Ability to characterize and analyze network traffic, identify anomalous activity / potential threats, analyze anomalies in network traffic using metadata
- Ability to create forensically sound duplicates of evidence (forensic images)
- Able to write cyber investigative reports documenting forensics findings
- In depth knowledge and experience of:
identifying different classes and characterization of attacks and attack stages
CND policies, procedures and regulations
proactive analysis of systems and networks, to include creating trust levels of critical resources
system and application security threats and vulnerabilities
of network topologies, Wi-Fi Networking, and TCP/IP protocols
Splunk (or other SIEMs)
Vulnerability scanning, assessment and monitoring tools such as Security Center, Nessus, and Endgame
MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&CK)
- Must be able to work collaboratively across physical locations.
Desired Skills:
- Experience and proficiency with the following tools and techniques:
EnCase, FTK, SIFT, X-Ways, Volatility, WireShark, Sleuth Kit/Autopsy, and Snort
EDR Tools: Crowdstrike, Carbon Black, Etc
Carving and extracting information from PCAP data
Non-traditional network traffic: Command and Control
Preserving evidence integrity according to national standards
Designing cyber security systems and environments in a Linux environment
Virtualized environments
Conducting all-source research
Required Education:
8+ years of experience and BS Computer Science, Cybersecurity, Computer Engineering or related degree; or HS Diploma and 10+ years of host or digital forensics or network forensic experience
Desired Certifications:
- GCFA, GCFE, EnCE, CCE, CFCE, CEH, CCNA, CCSP, CCIE, OSCP, GNFA

Apply