ZipRecruiter

Log In

1

Cyber Forensics Analyst Jobs (NOW HIRING)

Nwis

Cyber Host Forensic Analyst II

Arlington, VA

... forensics findings - Experience with the analysis and characterization of cyber attacks - Experience with proper evidence handing procedures and chain of custody protocols - Skilled in identifying ...

Nightwing

Cyber Host Forensic Analyst III

Sterling, VA · On-site

$99K - $206K/yr

Nightwing is seeking a Host Forensics Analyst to support this critical customer mission ... in cyber forensic investigations using leading edge technologies and industry standard forensic ...

Nightwing

Cyber Host Forensic Analyst II

Arlington, VA · On-site

... forensics findings - Experience with the analysis and characterization of cyber attacks - Experience with proper evidence handing procedures and chain of custody protocols - Skilled in identifying ...

Nwis

Cyber Host Forensic Analyst III

Sterling, VA · On-site

$99K - $206K/yr

Nightwing is seeking a Host Forensics Analyst to support this critical customer mission ... in cyber forensic investigations using leading edge technologies and industry standard forensic ...

Beyond SOF

Forensics Analyst II

San Antonio, TX · On-site

Two years of experience as a Cyber Forensics Analyst. * Two years of demonstrated experience using at least two different forensic tool suites similar to EnCase, Sleuthkit, FTK, X-WAYS, REKALL or ...

Solutions³ LLC

Host Forensics Analyst

Arlington, VA · On-site

Host Based Systems Analyst IV Description: Solutions³ LLC provides remote and onsite advanced ... Able to write cyber investigative reports documenting digital forensics findings * Experience with ...

Solutions3 LLC

Host Forensics Analyst

Arlington, VA · On-site

$131K - $149K/yr

Host Based Systems Analyst IV Description: Solutions³ LLC provides remote and onsite advanced ... Able to write cyber investigative reports documenting digital forensics findings * Experience with ...

NewGen

Host Forensics Analyst

Arlington, VA · On-site +1

Contract personnel provide front line response for digital forensics/incident response (DFIR) and proactively hunt for malicious cyber activity. They are seeking Host Forensics Analysts to support ...

next page

Showing results 1-20

All JobsTechnology JobsNetworking JobsCyber Security Administrator JobsCyber Forensics Analyst Jobs

Cyber Forensics Analyst information

See salary details

$69.5K

$101.6K

$154.5K

How much do cyber forensics analyst jobs pay per year?

As of Aug 29, 2026, the average yearly pay for cyber forensics analyst in the United States is $101,608.00, according to ZipRecruiter salary data. Most workers in this role earn between $78,500.00 and $132,000.00 per year, depending on experience, location, and employer.

What is a cyber forensics analyst?

Cyber Forensics Analysts are professionals who investigate and analyze digital data to uncover evidence related to cybercrimes. They use specialized tools and techniques to recover, preserve, and examine data from computers, networks, and electronic devices. Their work supports legal investigations, helping law enforcement or organizations understand how a security breach or crime occurred. Cyber Forensics Analysts also prepare detailed reports and may be called to testify in court about their findings.

What are the key skills and qualifications needed to thrive as a cyber forensics analyst?

To thrive as a Cyber Forensics Analyst, you need a thorough understanding of digital forensics, cybersecurity principles, and incident response, usually backed by a degree in computer science or a related field. Familiarity with forensic analysis tools such as EnCase, FTK, and proficiency in handling evidence according to legal standards are crucial, along with certifications like GCFA or CCE. Strong analytical thinking, attention to detail, and effective communication skills help analysts interpret complex data and present findings clearly to stakeholders. These skills and qualifications are vital for accurately investigating cyber incidents, preserving evidence integrity, and supporting legal or organizational actions.

What are the common challenges faced by cyber forensics analysts when collecting digital evidence?

Cyber Forensics Analysts often face challenges such as ensuring the integrity of digital evidence during collection, dealing with encrypted or damaged devices, and working under tight timelines due to the urgency of investigations. Maintaining a clear chain of custody and adhering to legal protocols is critical to ensure evidence is admissible in court. Additionally, analysts must stay updated on rapidly evolving technologies and cyber threats, which can complicate evidence extraction and analysis.

What is the difference between Cyber Forensics Analyst vs Cyber Security Analyst?

AspectCyber Forensics AnalystCyber Security Analyst
CertificationsGCFA, GCFE, CISSPCISSP, CompTIA Security+
Work EnvironmentInvestigations, incident response, legal settingsNetwork security, threat monitoring, prevention
Employer & IndustryLaw enforcement, legal firms, cybersecurity firmsBusinesses, government agencies, IT departments

Cyber Forensics Analysts focus on investigating cybercrimes, analyzing digital evidence, and supporting legal cases. Cyber Security Analysts primarily work to protect systems, monitor threats, and prevent attacks. While both roles require cybersecurity knowledge and certifications, their daily tasks and work environments differ significantly.

How much do cyber forensics analysts make?

Cyber forensics analysts typically earn a median annual salary of around $75,000 to $100,000, depending on experience, certifications, and location. Entry-level positions may start lower, while experienced analysts with specialized skills or certifications can earn higher salaries, especially in larger organizations or with advanced tools and techniques.
More about Cyber Forensics Analyst jobs

What cities are hiring for Cyber Forensics Analyst jobs?

Cities with the most Cyber Forensics Analyst job openings:

Who are the top companies hiring for Cyber Forensics Analyst jobs?

The top employers for Cyber Forensics Analyst jobs are:

What states have the most Cyber Forensics Analyst jobs?

States with the most job openings for Cyber Forensics Analyst jobs include:

What job categories do people searching Cyber Forensics Analyst jobs look for?

The top searched job categories for Cyber Forensics Analyst jobs are:

What are popular job titles related to Cyber Forensics Analyst jobs?

For Cyber Forensics Analyst jobs, the most frequently searched job titles are:

Cyber Forensics Analyst jobs near you
Infographic showing various Cyber Forensics Analyst job openings in the United States as of August 2026, with employment types broken down into 90% Full Time, 5% Part Time, and 5% Contract. Highlights an 80% Physical, 8% Hybrid, and 12% Remote job distribution, with an average salary of $101,608 per year, or $48.9 per hour.

Cyber Forensics Analyst - TS/SCI

Arlington, VA • On-site

Beyond SOF
Professional, Scientific, and Technical Services • 11 - 50 employees
Learn more about Beyond SOFexternal

Full-time

Re-posted 13 days ago

Job description

Cyber Forensics Analysts
TS/SCI
Client seeking Cyber Forensics Analysts to support the DHS Hunt and Incident Response Team (HIRT).This team secures the Nation's cyber and communications infrastructure while providing front line response for cyber incidents and hunting for malicious cyber activity. The client, as a prime contractor to DHS, performs HIRT investigations to develop a diagnosis of the severity of breaches. Contract personnel provide front line response for digital forensics/incident response and proactively hunting for malicious cyber activity for this critical customer mission.
Responsibilities:
- Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack
- Assesses network topology and device configurations identifying critical security concerns and providing security best practice recommendations
- Collects network intrusion artifacts (e.g., PCAP, domains, URI's, certificates, etc.) and uses discovered data to enable mitigation of potential incidents
- Collects network device integrity data and analyze for signs of tampering or compromise
- Analyzes identified malicious network and system log activity to determine weaknesses exploited, exploitation methods, effects on system and information
- Tracking and documenting on-site incident response activities and providing updates to leadership through executive summaries and in-depth technical reports
- Planning, coordinating and directing the inventory, examination and comprehensive technical analysis of computer related evidence
- Serving as technical forensics liaison to stakeholders and explaining investigation details
Required Skills:
- U.S. Citizenship
- Must have an active Secret clearance (TS/SCI eligible) and be able to obtain DHS Suitability
- 8+ years of directly relevant experience in cyber forensic and network investigations using leading edge technologies and industry standard forensic tools
- Experience with reconstructing a malicious attack or activity
- Ability to characterize and analyze network traffic, identify anomalous activity / potential threats, analyze anomalies in network traffic using metadata
- Ability to create forensically sound duplicates of evidence (forensic images)
- Able to write cyber investigative reports documenting forensics findings
- In depth knowledge and experience of:
•identifying different classes and characterization of attacks and attack stages
•CND policies, procedures and regulations
•proactive analysis of systems and networks, to include creating trust levels of critical resources
•system and application security threats and vulnerabilities
•of network topologies, Wi-Fi Networking, and TCP/IP protocols
•Splunk (or other SIEMs)
•Vulnerability scanning, assessment and monitoring tools such as Security Center, Nessus, and Endgame
•MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&CK)
- Must be able to work collaboratively across physical locations.
Desired Skills:
- Experience and proficiency with the following tools and techniques:
•EnCase, FTK, SIFT, X-Ways, Volatility, WireShark, Sleuth Kit/Autopsy, and Snort
•EDR Tools: Crowdstrike, Carbon Black, Etc
•Carving and extracting information from PCAP data
•Non-traditional network traffic: Command and Control
•Preserving evidence integrity according to national standards
•Designing cyber security systems and environments in a Linux environment
•Virtualized environments
•Conducting all-source research
Required Education:
8+ years of experience and BS Computer Science, Cybersecurity, Computer Engineering or related degree; or HS Diploma and 10+ years of host or digital forensics or network forensic experience
Desired Certifications:
- GCFA, GCFE, EnCE, CCE, CFCE, CEH, CCNA, CCSP, CCIE, OSCP, GNFA

Apply