Team personnel provide front line response for digital forensics/incident response (DFIR) and proactively hunting for malicious cyber activity. We are seeking Cyber Network Defense Analysts (CNDA ...
Team personnel provide front line response for digital forensics/incident response (DFIR) and proactively hunting for malicious cyber activity. We are seeking Cyber Network Defense Analysts (CNDA ...
Cyber Crime Investigator
Quantico, VA · Remote
$165K - $180K/yr
Must have at least 3-5 years of experience providing digital forensics and/or cyber support to investigations, preferably counterintelligence investigations. * Description: The Cyber Crime ...
Quick apply
Cyber Crime Investigator
Quantico, VA · Remote
$165K - $180K/yr
Must have at least 3-5 years of experience providing digital forensics and/or cyber support to investigations, preferably counterintelligence investigations. * Description: The Cyber Crime ...
This role works closely with cyber operations, digital forensics, and partner organizations to identify emerging threats, support incident response, and enhance threat detection capabilities.
This role works closely with cyber operations, digital forensics, and partner organizations to identify emerging threats, support incident response, and enhance threat detection capabilities.
Cloud Forensic Analyst IV
Arlington, VA · On-site
Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability ... Nightwing is seeking a Cloud Forensics Analyst to support this critical customer mission. The CFA ...
Cloud Forensic Analyst IV
Arlington, VA · On-site
Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability ... Nightwing is seeking a Cloud Forensics Analyst to support this critical customer mission. The CFA ...
Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability ... Nightwing is seeking a Cloud Forensics Analyst to support this critical customer mission. The CFA ...
Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability ... Nightwing is seeking a Cloud Forensics Analyst to support this critical customer mission. The CFA ...
Host Forensics Analyst
Arlington, VA · On-site
$131K - $149K/yr
Must be able to obtain DHS Suitability prior to starting employment * 8+ years of direct relevant experience in cyber forensic investigations using leading edge technologies and industry ...
Quick apply
Host Forensics Analyst
Arlington, VA · On-site
$131K - $149K/yr
Must be able to obtain DHS Suitability prior to starting employment * 8+ years of direct relevant experience in cyber forensic investigations using leading edge technologies and industry ...
Cyber Threat Hunter
$130K - $140K/yr
Cyber Threat Hunter - SME Location: Sterling, VA and Beltsville, MD Terms: Full-time Requirements ... Conducts forensic, malicious code, and packet-level analyses to develop comprehensive technical ...
Quick apply
Cyber Threat Hunter
$130K - $140K/yr
Cyber Threat Hunter - SME Location: Sterling, VA and Beltsville, MD Terms: Full-time Requirements ... Conducts forensic, malicious code, and packet-level analyses to develop comprehensive technical ...
Host Forensics Analyst
Arlington, VA · On-site
Must be able to obtainDHS Suitabilityprior to starting employment * 8+ years of direct relevant experience in cyber forensic investigations using leading edge technologies and industry standard ...
Host Forensics Analyst
Arlington, VA · On-site
Must be able to obtainDHS Suitabilityprior to starting employment * 8+ years of direct relevant experience in cyber forensic investigations using leading edge technologies and industry standard ...
Cyber Threat Hunter
$130K - $140K/yr
Cyber Threat Hunter - SME Location: Sterling, VA and Beltsville, MD Terms: Full-time Requirements ... Conducts forensic, malicious code, and packet-level analyses to develop comprehensive technical ...
Quick apply
Cyber Threat Hunter
$130K - $140K/yr
Cyber Threat Hunter - SME Location: Sterling, VA and Beltsville, MD Terms: Full-time Requirements ... Conducts forensic, malicious code, and packet-level analyses to develop comprehensive technical ...
Host Forensics Analyst
Arlington, VA · On-site
The role involves leading forensic teams, providing technical assistance, and conducting thorough analyses of cyber incidents to ensure the security of the Nation's cyber infrastructure.
Host Forensics Analyst
Arlington, VA · On-site
The role involves leading forensic teams, providing technical assistance, and conducting thorough analyses of cyber incidents to ensure the security of the Nation's cyber infrastructure.
Cyber Threat Analyst
Linthicum, MD · On-site
This role works closely with cyber operations, digital forensics, and partner organizations to identify emerging threats, support incident response, and enhance threat detection capabilities.
Cyber Threat Analyst
Linthicum, MD · On-site
This role works closely with cyber operations, digital forensics, and partner organizations to identify emerging threats, support incident response, and enhance threat detection capabilities.
Citizenshipc` - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 5 + years of directly relevant experience in cyber forensic investigations using leading-edge ...
Citizenshipc` - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 5 + years of directly relevant experience in cyber forensic investigations using leading-edge ...
Citizenshipc` - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 5 + years of directly relevant experience in cyber forensic investigations using leading-edge ...
Citizenshipc` - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 5 + years of directly relevant experience in cyber forensic investigations using leading-edge ...
Citizenshipc` - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 5 + years of directly relevant experience in cyber forensic investigations using leading-edge ...
Quick apply
Citizenshipc` - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 5 + years of directly relevant experience in cyber forensic investigations using leading-edge ...
Cyber Forensics Analyst
Portland, OR · On-site
This role uses industry-standard forensic tools and strong investigative skills to collect, analyze ... cyber incidents. * Analyze Windows Registry, Windows System Calls, Linux artifacts, file system ...
Cyber Forensics Analyst
Portland, OR · On-site
This role uses industry-standard forensic tools and strong investigative skills to collect, analyze ... cyber incidents. * Analyze Windows Registry, Windows System Calls, Linux artifacts, file system ...
Cyber Network Defense Analyst (CNDA) - Cloud Forensics
Arlington, VA · On-site
$130K - $160K/yr
Cyber Network Defense Analyst (CNDA) - Cloud Forensics Location: Remote / Onsite (as required ... Conduct end-to-end forensic acquisition and analysis across on-premises, cloud, and hybrid ...
Quick apply
Cyber Network Defense Analyst (CNDA) - Cloud Forensics
Arlington, VA · On-site
$130K - $160K/yr
Cyber Network Defense Analyst (CNDA) - Cloud Forensics Location: Remote / Onsite (as required ... Conduct end-to-end forensic acquisition and analysis across on-premises, cloud, and hybrid ...
Cyber Network Defense Analyst (CNDA) IV - Cloud Forensics
Arlington, VA · On-site
$130K - $160K/yr
Cyber Network Defense Analyst (CNDA) - Cloud Forensics Location: Remote / Onsite (as required ... Conduct end-to-end forensic acquisition and analysis across on-premises, cloud, and hybrid ...
Cyber Network Defense Analyst (CNDA) IV - Cloud Forensics
Arlington, VA · On-site
$130K - $160K/yr
Cyber Network Defense Analyst (CNDA) - Cloud Forensics Location: Remote / Onsite (as required ... Conduct end-to-end forensic acquisition and analysis across on-premises, cloud, and hybrid ...
Host Forensics Analyst
Arlington, VA · On-site
S. Citizenship - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 8+ years of directly relevant experience in cyber forensic investigations using leading edge ...
Quick apply
Host Forensics Analyst
Arlington, VA · On-site
S. Citizenship - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 8+ years of directly relevant experience in cyber forensic investigations using leading edge ...
Host Forensics Analyst IV
Arlington, VA · On-site
Ability to create forensically sound duplicates of evidence (forensic images) * Able to write cyber investigative reports documenting digital forensics findings * Experience with the analysis and ...
Host Forensics Analyst IV
Arlington, VA · On-site
Ability to create forensically sound duplicates of evidence (forensic images) * Able to write cyber investigative reports documenting digital forensics findings * Experience with the analysis and ...
Cyber Network Defense Analyst (CNDA) - Cloud Forensics Location: Remote / Onsite (as required ... Conduct end-to-end forensic acquisition and analysis across on-premises, cloud, and hybrid ...
Cyber Network Defense Analyst (CNDA) - Cloud Forensics Location: Remote / Onsite (as required ... Conduct end-to-end forensic acquisition and analysis across on-premises, cloud, and hybrid ...
Cyber Forensic information
See salary details
$69.5K - $77.2K
22% of jobs
$77.8K is the 25th percentile. Wages below this are outliers.
$77.2K - $85K
36% of jobs
$85K - $92.7K
1% of jobs
$92.7K - $100.4K
0% of jobs
$100.4K - $108.1K
10% of jobs
$113.4K is the 75th percentile. Wages above this are outliers.
$108.1K - $115.9K
9% of jobs
$115.9K - $123.6K
0% of jobs
$123.6K - $131.3K
1% of jobs
$131.3K - $139K
5% of jobs
$139K - $146.8K
9% of jobs
$146.8K - $154.5K
7% of jobs
$69.5K
$101.6K
$154.5K
How much do cyber forensic jobs pay per year?
What is a cyber forensic specialist?
How much does cyber forensics pay?
Is cyber forensics in demand?
What is the difference between Cyber Forensic vs Cyber Security Analyst?
| Aspect | Cyber Forensic | Cyber Security Analyst |
|---|---|---|
| Certifications | GCFA, GCFE, CISSP | CISSP, CEH, Security+ |
| Work Environment | Investigations, labs, legal settings | Network monitoring, threat analysis |
| Employer & Industry | Law enforcement, legal firms, cybersecurity firms | Businesses, government agencies, IT firms |
Cyber Forensic specialists focus on investigating cyber crimes, analyzing digital evidence, and working within legal contexts. Cyber Security Analysts primarily protect systems by monitoring networks, identifying threats, and implementing security measures. While both roles require cybersecurity knowledge and certifications, their work environments and objectives differ significantly.
What do you do in cyber forensics?
Will AI replace digital forensics?
What are some common challenges faced by professionals in a cyber forensic role, and how can they be addressed?
What are the key skills and qualifications needed to thrive as a Cyber Forensic specialist, and why are they important?

Full-time
Posted 5 days ago
Job description
Argo Cyber Systems provides remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based, network-based and cloud-based cybersecurity analysis capabilities. Team personnel provide front line response for digital forensics/incident response (DFIR) and proactively hunting for malicious cyber activity. We are seeking Cyber Network Defense Analysts (CNDA) with Cloud Forensics experience to support this critical customer mission.
Responsibilities:
- Conduct forensic acquisition and analysis from on-premises and cloud platforms (Entra ID/Azure AD, M365, AWS, GCP, SaaS) to identify compromise activity, persistence mechanisms, and data exfiltration.
- Investigate and respond to incidents and attacks targeting cloud and hybrid identity.
- Correlate cloud control-plane events and network telemetry (e.g., Azure Activity Logs, AWS CloudTrail, VPC Flow Logs) to reconstruct attacker timelines, validate IOCs, and identify post-compromise privilege escalation.
- Develop and operationalize detection logic and automation using cloud-native tools (Microsoft Defender, Sentinel, AWS GuardDuty, GCP Chronicle) and scripting (PowerShell, Python, Bash), integrating threat intelligence feeds and indicators.
- Produce technical reports, incident documentation, and containment recommendations integrating cloud, identity, and endpoint findings; support development of incident response playbooks and procedures for cloud and hybrid environments.
- Support cloud development and automation projects to enhance threat emulation, investigative, and hunting capabilities.
- Coordinate with internal teams, government staff, and external stakeholders to validate alerts and investigate preliminary findings.
Required Skills:
- U.S. Citizenship
- Active TS/SCI clearance
- Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability
- 8+ years of experience in cyber forensic investigations with leading tools and techniques.
- Strong understanding of SaaS, PaaS, and IaaS in cloud environments, and hybrid identity security.
- Expertise in acquiring forensically sound evidence, analyzing attacks, and reporting findings.
- Knowledge of M365/Azure, hybrid identity, and threats targeting these solutions.
- Knowledge of AWS, IAM, and best practices for cloud identity security.
Desired Skills:
- Strong API and scripting skills (PowerShell, Python, Bash, JavaScript) for automation and threat detection.
- Knowledge of common and advanced cloud attacks and techniques, and how to detect and mitigate these threats.
- Proficiency with cloud automation and orchestration tools (Terraform, Kubernetes, CloudFormation, Azure Resource Manager, Docker).
This position requires a minimum of a USG Top Secret Security Clearance!
Argo Cyber is an Equal Opportunity Employer.
About ARGO Cyber Systems
Sourced by ZipRecruiter
Industry
Network security
Company size
11 - 50 Employees
Headquarters location
Pensacola, FL, US
Year founded
2018