ZipRecruiter

Log In

1

Cyber Forensics Jobs (NOW HIRING)

Nwis

Cyber Host Forensic Analyst II

Arlington, VA · On-site

... forensics findings - Experience with the analysis and characterization of cyber attacks - Experience with proper evidence handing procedures and chain of custody protocols - Skilled in identifying ...

Nwis

Cyber Host Forensic Analyst III

Sterling, VA

Nightwing is seeking a Host Forensics Analyst to support this critical customer mission ... in cyber forensic investigations using leading edge technologies and industry standard forensic ...

Nightwing

Cyber Host Forensic Analyst II

Arlington, VA · On-site

... forensics findings - Experience with the analysis and characterization of cyber attacks - Experience with proper evidence handing procedures and chain of custody protocols - Skilled in identifying ...

Nwis

Cyber Host Forensic Analyst III

Sterling, VA · On-site

Nightwing is seeking a Host Forensics Analyst to support this critical customer mission ... in cyber forensic investigations using leading edge technologies and industry standard forensic ...

Pae

Cyber Forensic Analyst II

Vienna, VA

Conduct cyber forensics, to include the acquisition, chain of custody, and analysis of electronic evidence from computers, mobile devices, and other digital storage media. * Apply investigation and ...

Amentum

Cyber Forensic Analyst II

Vienna, VA · On-site

Conduct cyber forensics, to include the acquisition, chain of custody, and analysis of electronic evidence from computers, mobile devices, and other digital storage media. * Apply investigation and ...

Tyto Athene, LLC

Senior Cyber Lead

Linthicum, MD · On-site

Lead forensic investigations involving host-based analysis, network intrusion investigations, malware analysis, memory analysis, and cyber threat activity. * Direct advanced cyber investigations and ...

ECS

Cyber Defense Forensics Analysts - Mid

Washington, DC · On-site

$102K - $117K/yr

Everforth ECS is seeking a Cyber Defense Forensics Analysts - Mid to work in our Washington, DC office. Position Summary: ECS Federal is a leading information security and information technology ...

next page

Showing results 1-20

All JobsCyber Forensics Jobs

Cyber Forensics information

See salary details

$69.5K

$101.6K

$154.5K

How much do cyber forensics jobs pay per year?

As of Jul 3, 2026, the average yearly pay for cyber forensics in the United States is $101,608.00, according to ZipRecruiter salary data. Most workers in this role earn between $78,500.00 and $132,000.00 per year, depending on experience, location, and employer.

Is cyber forensics a good career?

Cyber forensics is a growing field that involves investigating cybercrimes and analyzing digital evidence using tools like EnCase and FTK. It offers opportunities in law enforcement, cybersecurity firms, and private sectors, often requiring certifications such as GCFA or EnCE. The career typically demands strong technical skills, attention to detail, and the ability to work under pressure.

How much do cybersecurity forensics make?

Cyber forensics specialists typically earn between $60,000 and $120,000 annually, depending on experience, certifications, and location. Entry-level roles may start lower, while experienced professionals with certifications like GCFA or CISSP can earn higher salaries, especially in larger organizations or high-demand areas.

What is a Cyber Forensics job?

A Cyber Forensics job involves investigating digital crimes by analyzing electronic devices, networks, and data to uncover evidence of cybercrimes such as hacking, fraud, and data breaches. Cyber forensic professionals use specialized tools and techniques to recover deleted files, trace cybercriminal activities, and ensure the integrity of digital evidence for legal proceedings. They often work with law enforcement, government agencies, or private companies to prevent and mitigate cyber threats. Additionally, they may provide expert testimony in court and help strengthen an organization’s cybersecurity measures.

What are the key skills and qualifications needed to thrive in the Cyber Forensics position, and why are they important?

To thrive in Cyber Forensics, you need expertise in computer science, digital evidence handling, and incident response, typically supported by a degree in a related field and industry-recognized certifications like EnCE or GCFA. Familiarity with tools such as EnCase, FTK, X-Ways, Cellebrite, and knowledge of operating systems and forensic imaging software is essential. Strong analytical thinking, attention to detail, clear communication, and the ability to work under pressure are crucial soft skills. These skills ensure the accurate extraction, analysis, and reporting of digital evidence in criminal investigations and corporate security incidents.

What are some typical daily responsibilities for a professional in Cyber Forensics?

A Cyber Forensics professional usually spends their day collecting, preserving, and analyzing digital evidence from computers, networks, and mobile devices. They may be tasked with investigating security breaches, recovering deleted or encrypted data, preparing detailed forensic reports, and supporting legal proceedings with credible findings. Collaboration with IT security teams, law enforcement, or legal counsel is common, requiring clear documentation and communication. These responsibilities help organizations or law enforcement agencies understand the nature of security incidents and take appropriate actions.

What can you do with a cyber forensics degree?

A cyber forensics degree prepares individuals for roles such as digital forensic analyst, cybersecurity investigator, or incident responder. Graduates can work in law enforcement, private security firms, or corporate security teams, utilizing skills in data recovery, malware analysis, and digital evidence handling, often using tools like EnCase or FTK. Certifications like GCFA or CISSP can enhance job prospects.

Can I make $200,000 a year in cyber security?

Cyber Forensics professionals can potentially earn $200,000 or more annually, especially with advanced skills, certifications like CISSP or GIAC, and experience in high-demand areas such as incident response or threat analysis. Salaries vary based on location, employer, and level of expertise, with senior roles and specialized knowledge commanding higher pay.
More about Cyber Forensics jobs
What cities are hiring for Cyber Forensics jobs? Cities with the most Cyber Forensics job openings:
What are the most commonly searched types of Cyber Forensics jobs? The most popular types of Cyber Forensics jobs are:
What states have the most Cyber Forensics jobs? States with the most job openings for Cyber Forensics jobs include:
What job categories do people searching Cyber Forensics jobs look for? The top searched job categories for Cyber Forensics jobs are:
Cyber Forensics jobs near you
Cyber Forensics Analyst - TS/SCI

Cyber Forensics Analyst - TS/SCI

Beyond SOF

Arlington, VA • On-site

Full-time

This job post has expired today. Applications are no longer accepted.

Job description

Cyber Forensics Analysts
TS/SCI
Client seeking Cyber Forensics Analysts to support the DHS Hunt and Incident Response Team (HIRT). This team secures the Nation's cyber and communications infrastructure while providing front line response for cyber incidents and hunting for malicious cyber activity. The client, as a prime contractor to DHS, performs HIRT investigations to develop a diagnosis of the severity of breaches. Contract personnel provide front line response for digital forensics/incident response and proactively hunting for malicious cyber activity for this critical customer mission.
Responsibilities:
- Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack
- Assesses network topology and device configurations identifying critical security concerns and providing security best practice recommendations
- Collects network intrusion artifacts (e.g., PCAP, domains, URI's, certificates, etc.) and uses discovered data to enable mitigation of potential incidents
- Collects network device integrity data and analyze for signs of tampering or compromise
- Analyzes identified malicious network and system log activity to determine weaknesses exploited, exploitation methods, effects on system and information
- Tracking and documenting on-site incident response activities and providing updates to leadership through executive summaries and in-depth technical reports
- Planning, coordinating and directing the inventory, examination and comprehensive technical analysis of computer related evidence
- Serving as technical forensics liaison to stakeholders and explaining investigation details
Required Skills:
- U.S. Citizenship
- Must have an active Secret clearance (TS/SCI eligible) and be able to obtain DHS Suitability
- 8+ years of directly relevant experience in cyber forensic and network investigations using leading edge technologies and industry standard forensic tools
- Experience with reconstructing a malicious attack or activity
- Ability to characterize and analyze network traffic, identify anomalous activity / potential threats, analyze anomalies in network traffic using metadata
- Ability to create forensically sound duplicates of evidence (forensic images)
- Able to write cyber investigative reports documenting forensics findings
- In depth knowledge and experience of:
• identifying different classes and characterization of attacks and attack stages
• CND policies, procedures and regulations
• proactive analysis of systems and networks, to include creating trust levels of critical resources
• system and application security threats and vulnerabilities
• of network topologies, Wi-Fi Networking, and TCP/IP protocols
• Splunk (or other SIEMs)
• Vulnerability scanning, assessment and monitoring tools such as Security Center, Nessus, and Endgame
• MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&CK)
- Must be able to work collaboratively across physical locations.
Desired Skills:
- Experience and proficiency with the following tools and techniques:
• EnCase, FTK, SIFT, X-Ways, Volatility, WireShark, Sleuth Kit/Autopsy, and Snort
• EDR Tools: Crowdstrike, Carbon Black, Etc
• Carving and extracting information from PCAP data
• Non-traditional network traffic: Command and Control
• Preserving evidence integrity according to national standards
• Designing cyber security systems and environments in a Linux environment
• Virtualized environments
• Conducting all-source research
Required Education:
8+ years of experience and BS Computer Science, Cybersecurity, Computer Engineering or related degree; or HS Diploma and 10+ years of host or digital forensics or network forensic experience
Desired Certifications:
- GCFA, GCFE, EnCE, CCE, CFCE, CEH, CCNA, CCSP, CCIE, OSCP, GNFA

Apply