ZipRecruiter

Log In

1

Cyber Forensics Jobs (NOW HIRING)

Nwis

Cyber Host Forensic Analyst II

Arlington, VA · On-site

... forensics findings - Experience with the analysis and characterization of cyber attacks - Experience with proper evidence handing procedures and chain of custody protocols - Skilled in identifying ...

Nightwing

Cyber Host Forensic Analyst II

Arlington, VA · On-site

... forensics findings - Experience with the analysis and characterization of cyber attacks - Experience with proper evidence handing procedures and chain of custody protocols - Skilled in identifying ...

Nightwing

Cyber Host Forensic Analyst III

Sterling, VA · On-site

$99K - $206K/yr

Nightwing is seeking a Host Forensics Analyst to support this critical customer mission ... in cyber forensic investigations using leading edge technologies and industry standard forensic ...

Nwis

Cyber Host Forensic Analyst III

Sterling, VA · On-site

$99K - $206K/yr

Nightwing is seeking a Host Forensics Analyst to support this critical customer mission ... in cyber forensic investigations using leading edge technologies and industry standard forensic ...

Quantum Sky

Senior Cyber Lead

Linthicum, MD · On-site

$175K - $225K/yr

Lead forensic investigations involving host-based analysis, network intrusion investigations, malware analysis, memory analysis, and cyber threat activity. * Direct advanced cyber investigations and ...

Quantum Sky

Senior Cyber Lead

Linthicum Heights, MD

Lead forensic investigations involving host-based analysis, network intrusion investigations, malware analysis, memory analysis, and cyber threat activity. * Direct advanced cyber investigations and ...

Quantum Sky

Senior Cyber Lead

Linthicum Heights, MD · On-site

Lead forensic investigations involving host-based analysis, network intrusion investigations, malware analysis, memory analysis, and cyber threat activity. * Direct advanced cyber investigations and ...

Quantum Sky

Senior Cyber Lead

Linthicum Heights, MD · On-site

$175K - $225K/yr

Lead forensic investigations involving host-based analysis, network intrusion investigations, malware analysis, memory analysis, and cyber threat activity. * Direct advanced cyber investigations and ...

next page

Showing results 1-20

All JobsTechnology JobsNetworking JobsCyber Security Administrator JobsCyber Forensics Jobs

Cyber Forensics information

See salary details

$69.5K

$101.6K

$154.5K

How much do cyber forensics jobs pay per year?

As of Sep 3, 2026, the average yearly pay for cyber forensics in the United States is $101,608.00, according to ZipRecruiter salary data. Most workers in this role earn between $78,500.00 and $132,000.00 per year, depending on experience, location, and employer.

What is a cyber forensics?

A Cyber Forensics job involves investigating digital crimes by analyzing electronic devices, networks, and data to uncover evidence of cybercrimes such as hacking, fraud, and data breaches. Cyber forensic professionals use specialized tools and techniques to recover deleted files, trace cybercriminal activities, and ensure the integrity of digital evidence for legal proceedings. They often work with law enforcement, government agencies, or private companies to prevent and mitigate cyber threats. Additionally, they may provide expert testimony in court and help strengthen an organization’s cybersecurity measures.

What are the typical daily responsibilities of a cyber forensics professional?

A Cyber Forensics professional usually spends their day collecting, preserving, and analyzing digital evidence from computers, networks, and mobile devices. They may be tasked with investigating security breaches, recovering deleted or encrypted data, preparing detailed forensic reports, and supporting legal proceedings with credible findings. Collaboration with IT security teams, law enforcement, or legal counsel is common, requiring clear documentation and communication. These responsibilities help organizations or law enforcement agencies understand the nature of security incidents and take appropriate actions.

What are the key skills and qualifications needed to thrive in cyber forensics?

To thrive in Cyber Forensics, you need expertise in computer science, digital evidence handling, and incident response, typically supported by a degree in a related field and industry-recognized certifications like EnCE or GCFA. Familiarity with tools such as EnCase, FTK, X-Ways, Cellebrite, and knowledge of operating systems and forensic imaging software is essential. Strong analytical thinking, attention to detail, clear communication, and the ability to work under pressure are crucial soft skills. These skills ensure the accurate extraction, analysis, and reporting of digital evidence in criminal investigations and corporate security incidents.

How much do cybersecurity forensics make?

Cyber forensics specialists typically earn between $60,000 and $120,000 annually, depending on experience, certifications, and location. Entry-level roles may start lower, while experienced professionals with certifications like GCFA or CISSP can command higher salaries, especially in larger organizations or high-demand areas.

Is cyber forensics a good career?

Cyber forensics is a growing field that involves investigating cybercrimes and analyzing digital evidence using specialized tools and techniques. It offers opportunities in law enforcement, private security, and consulting, often requiring certifications like GCFA or EnCE. The profession typically demands strong technical skills, attention to detail, and the ability to work under pressure.

What are the jobs in cyber forensics?

Jobs in cyber forensics include roles such as digital forensic analyst, cyber security investigator, incident responder, and forensic examiner. These professionals analyze digital evidence, use specialized tools like EnCase or FTK, and often require certifications such as GCFA or EnCE to investigate cybercrimes and security breaches.

What can you do with a cyber forensics degree?

A cyber forensics degree prepares individuals for roles in digital investigation, data recovery, and cybersecurity analysis. Graduates can work as digital forensic analysts, incident responders, or cybersecurity specialists, often using tools like EnCase or FTK and obtaining certifications such as GCFA or CISSP to enhance career prospects.
More about Cyber Forensics jobs

What cities are hiring for Cyber Forensics jobs?

Cities with the most Cyber Forensics job openings:

What are the most commonly searched types of Cyber Forensics jobs?

The most popular types of Cyber Forensics jobs are:

What states have the most Cyber Forensics jobs?

States with the most job openings for Cyber Forensics jobs include:

What job categories do people searching Cyber Forensics jobs look for?

The top searched job categories for Cyber Forensics jobs are:

Cyber Forensics jobs near you
Infographic showing various Cyber Forensics job openings in the United States as of August 2026, with employment types broken down into 96% Full Time, 2% Part Time, and 2% Contract. Highlights an 91% Physical, 3% Hybrid, and 6% Remote job distribution, with an average salary of $101,608 per year, or $48.9 per hour.

Cyber Forensics Analyst - TS/SCI

Beyond SOF

Arlington, VA • On-site

Full-time

Re-posted 18 days ago

Job description

Cyber Forensics Analysts
TS/SCI
Client seeking Cyber Forensics Analysts to support the DHS Hunt and Incident Response Team (HIRT).This team secures the Nation's cyber and communications infrastructure while providing front line response for cyber incidents and hunting for malicious cyber activity. The client, as a prime contractor to DHS, performs HIRT investigations to develop a diagnosis of the severity of breaches. Contract personnel provide front line response for digital forensics/incident response and proactively hunting for malicious cyber activity for this critical customer mission.
Responsibilities:
- Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack
- Assesses network topology and device configurations identifying critical security concerns and providing security best practice recommendations
- Collects network intrusion artifacts (e.g., PCAP, domains, URI's, certificates, etc.) and uses discovered data to enable mitigation of potential incidents
- Collects network device integrity data and analyze for signs of tampering or compromise
- Analyzes identified malicious network and system log activity to determine weaknesses exploited, exploitation methods, effects on system and information
- Tracking and documenting on-site incident response activities and providing updates to leadership through executive summaries and in-depth technical reports
- Planning, coordinating and directing the inventory, examination and comprehensive technical analysis of computer related evidence
- Serving as technical forensics liaison to stakeholders and explaining investigation details
Required Skills:
- U.S. Citizenship
- Must have an active Secret clearance (TS/SCI eligible) and be able to obtain DHS Suitability
- 8+ years of directly relevant experience in cyber forensic and network investigations using leading edge technologies and industry standard forensic tools
- Experience with reconstructing a malicious attack or activity
- Ability to characterize and analyze network traffic, identify anomalous activity / potential threats, analyze anomalies in network traffic using metadata
- Ability to create forensically sound duplicates of evidence (forensic images)
- Able to write cyber investigative reports documenting forensics findings
- In depth knowledge and experience of:
•identifying different classes and characterization of attacks and attack stages
•CND policies, procedures and regulations
•proactive analysis of systems and networks, to include creating trust levels of critical resources
•system and application security threats and vulnerabilities
•of network topologies, Wi-Fi Networking, and TCP/IP protocols
•Splunk (or other SIEMs)
•Vulnerability scanning, assessment and monitoring tools such as Security Center, Nessus, and Endgame
•MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&CK)
- Must be able to work collaboratively across physical locations.
Desired Skills:
- Experience and proficiency with the following tools and techniques:
•EnCase, FTK, SIFT, X-Ways, Volatility, WireShark, Sleuth Kit/Autopsy, and Snort
•EDR Tools: Crowdstrike, Carbon Black, Etc
•Carving and extracting information from PCAP data
•Non-traditional network traffic: Command and Control
•Preserving evidence integrity according to national standards
•Designing cyber security systems and environments in a Linux environment
•Virtualized environments
•Conducting all-source research
Required Education:
8+ years of experience and BS Computer Science, Cybersecurity, Computer Engineering or related degree; or HS Diploma and 10+ years of host or digital forensics or network forensic experience
Desired Certifications:
- GCFA, GCFE, EnCE, CCE, CFCE, CEH, CCNA, CCSP, CCIE, OSCP, GNFA

Apply