Cyber Forensics Analyst
Portland, OR · On-site
ECS is seeking a Cyber Forensics Analyst to work in our Portland, OR office. Note: This position is contingent upon contract award. The Forensics Analyst Mid performs hands-on forensic analysis and ...
Cyber Forensics Analyst
Portland, OR · On-site
ECS is seeking a Cyber Forensics Analyst to work in our Portland, OR office. Note: This position is contingent upon contract award. The Forensics Analyst Mid performs hands-on forensic analysis and ...
SOC Tier 2 Analyst
Portland, OR · On-site
... forensics, engineering, and business stakeholders. This role involves shift work schedule to ... Stay current with evolving cyber threats, vulnerabilities, detection techniques, and security ...
SOC Tier 2 Analyst
Portland, OR · On-site
... forensics, engineering, and business stakeholders. This role involves shift work schedule to ... Stay current with evolving cyber threats, vulnerabilities, detection techniques, and security ...
Senior Detection Engineer II
OR · On-site +1
$104K - $143K/yr
... cyber forensic investigations across a variety of log sources * Optimize log ingestion pipelines ... Mentor junior security analysts and detection engineers on threat hunting methodologies, detection ...
New
Senior Detection Engineer II
OR · On-site +1
$104K - $143K/yr
... cyber forensic investigations across a variety of log sources * Optimize log ingestion pipelines ... Mentor junior security analysts and detection engineers on threat hunting methodologies, detection ...
New
The Network Security Cyber Engineer will work with a team of Network Security Engineers to design ... Understand key forensics and incident response concepts critical to the Security Intelligence ...
The Network Security Cyber Engineer will work with a team of Network Security Engineers to design ... Understand key forensics and incident response concepts critical to the Security Intelligence ...
SOC Threat Hunter
Portland, OR · On-site
... analysis • Familiarity with MITRE ATT&CK, Cyber Kill Chain, NIST, or other cybersecurity frameworks • Experience supporting SOC operations, incident response, malware analysis, forensics, or ...
SOC Threat Hunter
Portland, OR · On-site
... analysis • Familiarity with MITRE ATT&CK, Cyber Kill Chain, NIST, or other cybersecurity frameworks • Experience supporting SOC operations, incident response, malware analysis, forensics, or ...
SOC Threat Hunter
Portland, OR · On-site
The Threat Hunter proactively identifies, investigates, and helps mitigate advanced cyber threats ... Coordinate with SOC Tier 2 and Tier 3 analysts, forensics personnel, and incident response teams ...
SOC Threat Hunter
Portland, OR · On-site
The Threat Hunter proactively identifies, investigates, and helps mitigate advanced cyber threats ... Coordinate with SOC Tier 2 and Tier 3 analysts, forensics personnel, and incident response teams ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
Cyber Forensics Analyst information
See Oregon salary details
$73.5K - $81.7K
22% of jobs
$82.3K is the 25th percentile. Wages below this are outliers.
$81.7K - $89.8K
36% of jobs
$89.8K - $98K
1% of jobs
$98K - $106.2K
0% of jobs
$106.2K - $114.3K
10% of jobs
$119.9K is the 75th percentile. Wages above this are outliers.
$114.3K - $122.5K
9% of jobs
$122.5K - $130.7K
0% of jobs
$130.7K - $138.8K
1% of jobs
$138.8K - $147K
5% of jobs
$147K - $155.2K
9% of jobs
$155.2K - $163.3K
7% of jobs
$73.5K
$107.4K
$163.3K
How much do cyber forensics analyst jobs pay per year?
As of Aug 26, 2026, the average yearly pay for cyber forensics analyst in Oregon is $107,428.00, according to ZipRecruiter salary data. Most workers in this role earn between $83,000.00 and $139,600.00 per year, depending on experience, location, and employer.
What is a cyber forensics analyst?
Cyber Forensics Analysts are professionals who investigate and analyze digital data to uncover evidence related to cybercrimes. They use specialized tools and techniques to recover, preserve, and examine data from computers, networks, and electronic devices. Their work supports legal investigations, helping law enforcement or organizations understand how a security breach or crime occurred. Cyber Forensics Analysts also prepare detailed reports and may be called to testify in court about their findings.
What are the key skills and qualifications needed to thrive as a cyber forensics analyst?
To thrive as a Cyber Forensics Analyst, you need a thorough understanding of digital forensics, cybersecurity principles, and incident response, usually backed by a degree in computer science or a related field. Familiarity with forensic analysis tools such as EnCase, FTK, and proficiency in handling evidence according to legal standards are crucial, along with certifications like GCFA or CCE. Strong analytical thinking, attention to detail, and effective communication skills help analysts interpret complex data and present findings clearly to stakeholders. These skills and qualifications are vital for accurately investigating cyber incidents, preserving evidence integrity, and supporting legal or organizational actions.
What are the common challenges faced by cyber forensics analysts when collecting digital evidence?
Cyber Forensics Analysts often face challenges such as ensuring the integrity of digital evidence during collection, dealing with encrypted or damaged devices, and working under tight timelines due to the urgency of investigations. Maintaining a clear chain of custody and adhering to legal protocols is critical to ensure evidence is admissible in court. Additionally, analysts must stay updated on rapidly evolving technologies and cyber threats, which can complicate evidence extraction and analysis.
What is the difference between Cyber Forensics Analyst vs Cyber Security Analyst?
| Aspect | Cyber Forensics Analyst | Cyber Security Analyst |
|---|---|---|
| Certifications | GCFA, GCFE, CISSP | CISSP, CompTIA Security+ |
| Work Environment | Investigations, incident response, legal settings | Network security, threat monitoring, prevention |
| Employer & Industry | Law enforcement, legal firms, cybersecurity firms | Businesses, government agencies, IT departments |
Cyber Forensics Analysts focus on investigating cybercrimes, analyzing digital evidence, and supporting legal cases. Cyber Security Analysts primarily work to protect systems, monitor threats, and prevent attacks. While both roles require cybersecurity knowledge and certifications, their daily tasks and work environments differ significantly.
How much do cyber forensics analysts make?
Cyber forensics analysts typically earn a median annual salary of around $75,000 to $100,000, depending on experience, certifications, and location. Entry-level positions may start lower, while experienced analysts with specialized skills or certifications can earn higher salaries, especially in larger organizations or with advanced tools and techniques.
What are popular job titles related to Cyber Forensics Analyst jobs in Oregon?
For Cyber Forensics Analyst jobs in Oregon, the most frequently searched job titles are:
What job categories do people searching Cyber Forensics Analyst jobs in Oregon look for?
The top searched job categories for Cyber Forensics Analyst jobs in Oregon are:
What cities in Oregon are hiring for Cyber Forensics Analyst jobs?
Cities in Oregon with the most Cyber Forensics Analyst job openings:
What are popular job titles related to Cyber Forensics Analyst jobs in OR?
For Cyber Forensics Analyst jobs in OR, the most frequently searched job titles are:
Job description
ECS is seeking a Cyber Forensics Analyst to work in our Portland, OR office. Note: This position is contingent upon contract award.
The Forensics Analyst Mid performs hands-on forensic analysis and malware investigation activities in support of SOC security investigations, incident response, routine memory checks, and advanced threat hunting. This role uses industry-standard forensic tools and strong investigative skills to collect, analyze, and document technical evidence.
The ideal candidate has solid cybersecurity experience, strong written communication skills, and the ability to operate resourcefully and independently while coordinating with SOC teams, data centers, and senior forensic personnel during investigations.
Key Responsibilities
Digital Forensics and Investigation
Malware Analysis and IOC Development
SOC and Incident Response Support
Reporting and Collaboration
The Forensics Analyst Mid performs hands-on forensic analysis and malware investigation activities in support of SOC security investigations, incident response, routine memory checks, and advanced threat hunting. This role uses industry-standard forensic tools and strong investigative skills to collect, analyze, and document technical evidence.
The ideal candidate has solid cybersecurity experience, strong written communication skills, and the ability to operate resourcefully and independently while coordinating with SOC teams, data centers, and senior forensic personnel during investigations.
Key Responsibilities
Digital Forensics and Investigation
- Perform forensic analysis using industry-standard forensic tools and open-source DFIR utilities.
- Assist with forensic investigations involving endpoints, servers, malware, and cyber incidents.
- Analyze Windows Registry, Windows System Calls, Linux artifacts, file system data, logs, and memory artifacts.
- Create findings and technical notes that support investigative conclusions and remediation actions.
Malware Analysis and IOC Development
- Analyze malware in a lab environment using standard malware analysis techniques.
- Create IOCs based on forensic and malware findings for sharing with SOC and security teams.
- Support Java code de-obfuscation and technical analysis activities within the analyst skill level.
- Escalate complex malware or reverse-engineering requirements to senior analysts or the FMAT Lead.
SOC and Incident Response Support
- Assist the SOC with security investigations and incident response activities.
- Conduct routine memory checks on Linux and Windows servers as directed.
- Support proactive malware analysis, incident response, and advanced threat hunting activities.
- Communicate with different teams and data centers during investigations.
Reporting and Collaboration
- Create clear investigation reports, forensic summaries, and supporting documentation.
- Communicate findings effectively to SOC analysts, incident responders, data center teams, and leadership.
- Apply strong investigative, research, and problem-solving skills to ambiguous technical issues.
- Contribute to repeatable forensic procedures, knowledge sharing, and continuous process improvement.
- U.S. Citizenship with ability to obtain and maintain a DOE "L" clearance after start.
- 5 to 8 years of experience in cybersecurity, digital forensics, incident response, or related cyber investigation work.
- Experience performing forensic analysis using industry-standard forensic tools and open-source tools.
- Familiarity with Windows Registry, Windows System Calls, Linux operating systems, and Java code de-obfuscation.
- Hands-on experience with Volatility or other memory forensics tools, FTK, and Wireshark.
- Ability to create IOCs based on forensic analysis and share them with other security teams.
- Ability to analyze malware in a lab environment using standard malware analysis techniques.
- Experience performing or supporting forensic investigations and incident response activities.
- Excellent written communication, resourcefulness, investigative ability, research skills, and problem-solving skills.