Senior SOC Analyst
Morrisville, NC · On-site
N-able is redefining cyber resilience through its end-to-end platform that blends AI-powered ... Responsibilities : • Led DFIR (Digital Forensics & Incident Response) investigations, performing ...
Senior SOC Analyst
Morrisville, NC · On-site
N-able is redefining cyber resilience through its end-to-end platform that blends AI-powered ... Responsibilities : • Led DFIR (Digital Forensics & Incident Response) investigations, performing ...
Senior SOC Analyst
Morrisville, NC · On-site
N-able is redefining cyber resilience through its end-to-end platform that blends AI-powered ... Responsibilities : • Led DFIR (Digital Forensics & Incident Response) investigations, performing ...
Senior SOC Analyst
Morrisville, NC · On-site
N-able is redefining cyber resilience through its end-to-end platform that blends AI-powered ... Responsibilities : • Led DFIR (Digital Forensics & Incident Response) investigations, performing ...
Senior Cyber Incident Responder
Durham, NC · Hybrid
$75K/yr
Analyze logs and EDR telemetry from a wide range of systems-medical devices, cloud applications ... forensic tools. ADDITIONAL JOB STANDARDS * Hands-on incident response experience in large ...
Senior Cyber Incident Responder
Durham, NC · Hybrid
$75K/yr
Analyze logs and EDR telemetry from a wide range of systems-medical devices, cloud applications ... forensic tools. ADDITIONAL JOB STANDARDS * Hands-on incident response experience in large ...
Senior SOC Analyst
Morrisville, NC · Hybrid
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Led DFIR (Digital Forensics & Incident Response) investigations, performing rapid triage, evidence ...
Senior SOC Analyst
Morrisville, NC · Hybrid
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Led DFIR (Digital Forensics & Incident Response) investigations, performing rapid triage, evidence ...
Senior SOC Analyst
Morrisville, NC · Hybrid
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Led DFIR (Digital Forensics & Incident Response) investigations, performing rapid triage, evidence ...
Senior SOC Analyst
Morrisville, NC · Hybrid
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Led DFIR (Digital Forensics & Incident Response) investigations, performing rapid triage, evidence ...
Senior SOC Analyst
Morrisville, NC · On-site
$89K - $117K/yr
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Led DFIR (Digital Forensics & Incident Response) investigations, performing rapid triage, evidence ...
Senior SOC Analyst
Morrisville, NC · On-site
$89K - $117K/yr
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Led DFIR (Digital Forensics & Incident Response) investigations, performing rapid triage, evidence ...
Senior SOC Analyst
Morrisville, NC · Hybrid
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Led DFIR (Digital Forensics & Incident Response) investigations, performing rapid triage, evidence ...
Senior SOC Analyst
Morrisville, NC · Hybrid
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Led DFIR (Digital Forensics & Incident Response) investigations, performing rapid triage, evidence ...
Senior SOC Analyst
Morrisville, NC · Hybrid
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Led DFIR (Digital Forensics & Incident Response) investigations, performing rapid triage, evidence ...
Senior SOC Analyst
Morrisville, NC · Hybrid
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Led DFIR (Digital Forensics & Incident Response) investigations, performing rapid triage, evidence ...
Senior SOC Analyst
Morrisville, NC · On-site
$89K - $117K/yr
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Led DFIR (Digital Forensics & Incident Response) investigations, performing rapid triage, evidence ...
Senior SOC Analyst
Morrisville, NC · On-site
$89K - $117K/yr
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Led DFIR (Digital Forensics & Incident Response) investigations, performing rapid triage, evidence ...
Senior SOC Analyst
Morrisville, NC · On-site
$82K - $109K/yr
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Review forensic artifacts from endpoints, networks, and cloud environments. * Correlate indicators ...
Senior SOC Analyst
Morrisville, NC · On-site
$82K - $109K/yr
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Review forensic artifacts from endpoints, networks, and cloud environments. * Correlate indicators ...
Senior SOC Analyst
Morrisville, NC · Hybrid
$82K - $109K/yr
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Review forensic artifacts from endpoints, networks, and cloud environments. * Correlate indicators ...
Senior SOC Analyst
Morrisville, NC · Hybrid
$82K - $109K/yr
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Review forensic artifacts from endpoints, networks, and cloud environments. * Correlate indicators ...
Senior SOC Analyst
Morrisville, NC · Hybrid
$82K - $109K/yr
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Review forensic artifacts from endpoints, networks, and cloud environments. * Correlate indicators ...
Senior SOC Analyst
Morrisville, NC · Hybrid
$82K - $109K/yr
... cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks ... Review forensic artifacts from endpoints, networks, and cloud environments. * Correlate indicators ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
... cyber operations, network defense, digital forensics, signals analysis, targeting, imagery, language, and mission systems; progressive advancement based on qualifications, performance, and warfare ...
Cyber Forensics Analyst information
See Raleigh, NC salary details
$67.6K - $75.1K
22% of jobs
$75.6K is the 25th percentile. Wages below this are outliers.
$75.1K - $82.6K
36% of jobs
$82.6K - $90.1K
1% of jobs
$90.1K - $97.6K
0% of jobs
$97.6K - $105.1K
10% of jobs
$110.3K is the 75th percentile. Wages above this are outliers.
$105.1K - $112.6K
9% of jobs
$112.6K - $120.1K
0% of jobs
$120.1K - $127.6K
1% of jobs
$127.6K - $135.2K
5% of jobs
$135.2K - $142.7K
9% of jobs
$142.7K - $150.2K
7% of jobs
$67.6K
$98.8K
$150.2K
How much do cyber forensics analyst jobs pay per year?
As of Jun 12, 2026, the average yearly pay for cyber forensics analyst in Raleigh, NC is $98,765.00, according to ZipRecruiter salary data. Most workers in this role earn between $76,300.00 and $128,300.00 per year, depending on experience, location, and employer.
Can you make $500,000 a year in cyber security?
Cyber Forensics Analysts typically earn salaries below $200,000 annually, with top earners in senior or specialized roles possibly reaching higher figures. Achieving a $500,000 annual income generally requires advanced positions such as cybersecurity executives, consultants, or those with extensive experience, certifications, and a strong track record in the field.
What is the difference between Cyber Forensics Analyst vs Cyber Security Analyst?
| Aspect | Cyber Forensics Analyst | Cyber Security Analyst |
|---|---|---|
| Certifications | GCFA, GCFE, CISSP | CISSP, CompTIA Security+ |
| Work Environment | Investigations, incident response, legal settings | Network security, threat monitoring, prevention |
| Employer & Industry | Law enforcement, legal firms, cybersecurity firms | Businesses, government agencies, IT departments |
Cyber Forensics Analysts focus on investigating cybercrimes, analyzing digital evidence, and supporting legal cases. Cyber Security Analysts primarily work to protect systems, monitor threats, and prevent attacks. While both roles require cybersecurity knowledge and certifications, their daily tasks and work environments differ significantly.
What are the key skills and qualifications needed to thrive as a Cyber Forensics Analyst, and why are they important?
To thrive as a Cyber Forensics Analyst, you need a thorough understanding of digital forensics, cybersecurity principles, and incident response, usually backed by a degree in computer science or a related field. Familiarity with forensic analysis tools such as EnCase, FTK, and proficiency in handling evidence according to legal standards are crucial, along with certifications like GCFA or CCE. Strong analytical thinking, attention to detail, and effective communication skills help analysts interpret complex data and present findings clearly to stakeholders. These skills and qualifications are vital for accurately investigating cyber incidents, preserving evidence integrity, and supporting legal or organizational actions.
What are Cyber Forensics Analysts?
Cyber Forensics Analysts are professionals who investigate and analyze digital data to uncover evidence related to cybercrimes. They use specialized tools and techniques to recover, preserve, and examine data from computers, networks, and electronic devices. Their work supports legal investigations, helping law enforcement or organizations understand how a security breach or crime occurred. Cyber Forensics Analysts also prepare detailed reports and may be called to testify in court about their findings.
Is AI taking over forensics?
Cyber Forensics Analysts use AI tools to assist in analyzing digital evidence more efficiently and accurately. While AI automates certain tasks like data sorting and pattern recognition, human expertise remains essential for interpretation, decision-making, and handling complex cases. AI is a complementary technology rather than a complete replacement in digital forensics work.
What are the common challenges faced by Cyber Forensics Analysts when collecting digital evidence?
Cyber Forensics Analysts often face challenges such as ensuring the integrity of digital evidence during collection, dealing with encrypted or damaged devices, and working under tight timelines due to the urgency of investigations. Maintaining a clear chain of custody and adhering to legal protocols is critical to ensure evidence is admissible in court. Additionally, analysts must stay updated on rapidly evolving technologies and cyber threats, which can complicate evidence extraction and analysis.
What does a cyber forensic analyst do?
A cyber forensic analyst investigates digital crimes by collecting, analyzing, and preserving electronic evidence from computers, networks, and storage devices. They use specialized tools and techniques to uncover data breaches, cyberattacks, or fraud, often working closely with law enforcement or legal teams. The role requires knowledge of cybersecurity, digital forensics tools, and adherence to legal standards for evidence handling.
Can I make $200,000 a year in cyber security?
Cyber Forensics Analysts can potentially earn $200,000 or more annually with extensive experience, advanced certifications, and specialized skills in areas like incident response or threat analysis. High salaries are often associated with senior roles, management positions, or working in high-demand industries, and may require working in certain geographic locations or environments with a high cost of living.
What are popular job titles related to Cyber Forensics Analyst jobs in Raleigh, NC? For Cyber Forensics Analyst jobs in Raleigh, NC, the most frequently searched job titles are:
What job categories do people searching Cyber Forensics Analyst jobs in Raleigh, NC look for? The top searched job categories for Cyber Forensics Analyst jobs in Raleigh, NC are:
Full-time
Posted 18 days ago
Job description
Job Summary:
N-able is redefining cyber resilience through its end-to-end platform that blends AI-powered capabilities and flexible tech stacks. The Senior SOC Analyst is responsible for managing complex security inquiries and incidents, providing technical expertise, and mentoring junior analysts while ensuring swift resolutions and guiding technical topics.
Responsibilities:
• Led DFIR (Digital Forensics & Incident Response) investigations, performing rapid triage, evidence preservation, root‑cause analysis, and incident containment across endpoint, identity, and cloud environments.
• Directed end‑to‑end incident response (IR) for high‑severity security events, including scoping impact, coordinating containment and eradication, and delivering clear technical and executive‑level incident reporting.
• Developed and tuned threat detections using SIEM/XDR telemetry (process, network, file, and identity signals), aligning detections to MITRE ATT&CK and reducing false positives while improving time‑to‑detect.
• Lead IH engagements from containment through eradication and recovery planning.
• Provide technical and procedural guidance to customers during active incidents.
• Conduct root-cause analysis and determine long-term remediation steps.
• Perform deep-dive analysis of attacker TTPs, persistence mechanisms, and lateral movement.
• Review forensic artifacts from endpoints, networks, and cloud environments.
• Correlate indicators of compromise to broader attack campaigns and threat actors.
• Act as a primary point of contact for customers during incident engagements.
• Deliver technical findings and recommendations to both technical and executive stakeholders.
• Provide remediation roadmaps tailored to customer environments.
• Partner with operational MDR team analysts to transition containment into IH workflows.
• Collaborate with operational MDR Teams for intelligence gathering and validation.
• Contribute to IH playbook development and improvement.
• Provide mentorship and peer review for junior analysts.
• Share lessons learned with SOC leadership to improve service delivery.
Qualifications:
Required:
• 4–6 years of experience in SOC, Managed Detection Response, or equivalent cybersecurity role.
• Proven experience handling escalations and complex investigations.
• Bachelor’s degree in Cybersecurity, IT, or related field (or equivalent experience).
• Advanced knowledge of SOC operations, incident support, and analysis techniques.
• Ability to mentor and support less experienced analysts.
• Excellent communication skills for both technical and non-technical audiences.
• High proficiency with SIEM, IDS/IPS, EDR, and related tools.
• Analytical and detail-oriented with a passion for solving problems.
• Strong mentor and team player.
• Calm and dependable under high-pressure situations.
• Ethical, professional, and dedicated to customer security.
• Ability to work on a 24/7 shifting model. The standard shift is 3pm-11pm EST, either Tuesday-Saturday or Sunday-Thursday.
Company:
N-able’s mission is to protect businesses against evolving cyberthreats with a unified cyber resiliency platform to manage, secure, and recover. Founded in 2000, the company is headquartered in Ottawa, CAN, with a team of 1001-5000 employees. The company is currently Late Stage.
N-able is redefining cyber resilience through its end-to-end platform that blends AI-powered capabilities and flexible tech stacks. The Senior SOC Analyst is responsible for managing complex security inquiries and incidents, providing technical expertise, and mentoring junior analysts while ensuring swift resolutions and guiding technical topics.
Responsibilities:
• Led DFIR (Digital Forensics & Incident Response) investigations, performing rapid triage, evidence preservation, root‑cause analysis, and incident containment across endpoint, identity, and cloud environments.
• Directed end‑to‑end incident response (IR) for high‑severity security events, including scoping impact, coordinating containment and eradication, and delivering clear technical and executive‑level incident reporting.
• Developed and tuned threat detections using SIEM/XDR telemetry (process, network, file, and identity signals), aligning detections to MITRE ATT&CK and reducing false positives while improving time‑to‑detect.
• Lead IH engagements from containment through eradication and recovery planning.
• Provide technical and procedural guidance to customers during active incidents.
• Conduct root-cause analysis and determine long-term remediation steps.
• Perform deep-dive analysis of attacker TTPs, persistence mechanisms, and lateral movement.
• Review forensic artifacts from endpoints, networks, and cloud environments.
• Correlate indicators of compromise to broader attack campaigns and threat actors.
• Act as a primary point of contact for customers during incident engagements.
• Deliver technical findings and recommendations to both technical and executive stakeholders.
• Provide remediation roadmaps tailored to customer environments.
• Partner with operational MDR team analysts to transition containment into IH workflows.
• Collaborate with operational MDR Teams for intelligence gathering and validation.
• Contribute to IH playbook development and improvement.
• Provide mentorship and peer review for junior analysts.
• Share lessons learned with SOC leadership to improve service delivery.
Qualifications:
Required:
• 4–6 years of experience in SOC, Managed Detection Response, or equivalent cybersecurity role.
• Proven experience handling escalations and complex investigations.
• Bachelor’s degree in Cybersecurity, IT, or related field (or equivalent experience).
• Advanced knowledge of SOC operations, incident support, and analysis techniques.
• Ability to mentor and support less experienced analysts.
• Excellent communication skills for both technical and non-technical audiences.
• High proficiency with SIEM, IDS/IPS, EDR, and related tools.
• Analytical and detail-oriented with a passion for solving problems.
• Strong mentor and team player.
• Calm and dependable under high-pressure situations.
• Ethical, professional, and dedicated to customer security.
• Ability to work on a 24/7 shifting model. The standard shift is 3pm-11pm EST, either Tuesday-Saturday or Sunday-Thursday.
Company:
N-able’s mission is to protect businesses against evolving cyberthreats with a unified cyber resiliency platform to manage, secure, and recover. Founded in 2000, the company is headquartered in Ottawa, CAN, with a team of 1001-5000 employees. The company is currently Late Stage.