1

Cyber Forensics Analyst Jobs (NOW HIRING)

Conduct cyber forensics, to include the acquisition, chain of custody, and analysis of electronic evidence from computers, mobile devices, and other digital storage media. * Apply investigation and ...

HIRT provides DHS's front-line response for cyber incidents and proactively hunting for malicious ... BCMC is seeking Host Forensics Analysts to support this critical customer mission. Responsibilities ...

Contract personnel provide front line response for digital forensics/incident response (DFIR) and proactively hunt for malicious cyber activity. They are seeking Host Forensics Analysts to support ...

HIRT provides DHS's front-line response for cyber incidents and proactively hunting for malicious ... BCMC is seeking Host Forensics Analysts to support this critical customer mission. Responsibilities ...

We are looking to hire a mid-level Cyber Defense Forensics Analyst to support a full range of cyber security services on a long-term contract in Washington DC. The position is full time/permanent and ...

GREM, CFR, CySA+, GCFA, GCFE, PenTest+). • Digital forensics, incident response, or cyber investigations experience with at least 3 years performing advanced forensic analysis in enterprise or DoD ...

next page

Showing results 1-20

Cyber Forensics Analyst information

See salary details

$69.5K

$101.6K

$154.5K

How much do cyber forensics analyst jobs pay per year?

As of Jun 28, 2026, the average yearly pay for cyber forensics analyst in the United States is $101,608.00, according to ZipRecruiter salary data. Most workers in this role earn between $78,500.00 and $132,000.00 per year, depending on experience, location, and employer.

Can you make $500,000 a year in cyber security?

Cyber Forensics Analysts typically earn salaries below $200,000 annually, with top earners in senior or specialized roles possibly reaching higher figures. Achieving a $500,000 annual income generally requires advanced positions such as cybersecurity executives, consultants, or those with extensive experience, certifications, and a strong track record in the field.

What is the difference between Cyber Forensics Analyst vs Cyber Security Analyst?

AspectCyber Forensics AnalystCyber Security Analyst
CertificationsGCFA, GCFE, CISSPCISSP, CompTIA Security+
Work EnvironmentInvestigations, incident response, legal settingsNetwork security, threat monitoring, prevention
Employer & IndustryLaw enforcement, legal firms, cybersecurity firmsBusinesses, government agencies, IT departments

Cyber Forensics Analysts focus on investigating cybercrimes, analyzing digital evidence, and supporting legal cases. Cyber Security Analysts primarily work to protect systems, monitor threats, and prevent attacks. While both roles require cybersecurity knowledge and certifications, their daily tasks and work environments differ significantly.

What are the key skills and qualifications needed to thrive as a Cyber Forensics Analyst, and why are they important?

To thrive as a Cyber Forensics Analyst, you need a thorough understanding of digital forensics, cybersecurity principles, and incident response, usually backed by a degree in computer science or a related field. Familiarity with forensic analysis tools such as EnCase, FTK, and proficiency in handling evidence according to legal standards are crucial, along with certifications like GCFA or CCE. Strong analytical thinking, attention to detail, and effective communication skills help analysts interpret complex data and present findings clearly to stakeholders. These skills and qualifications are vital for accurately investigating cyber incidents, preserving evidence integrity, and supporting legal or organizational actions.

What are Cyber Forensics Analysts?

Cyber Forensics Analysts are professionals who investigate and analyze digital data to uncover evidence related to cybercrimes. They use specialized tools and techniques to recover, preserve, and examine data from computers, networks, and electronic devices. Their work supports legal investigations, helping law enforcement or organizations understand how a security breach or crime occurred. Cyber Forensics Analysts also prepare detailed reports and may be called to testify in court about their findings.

Is AI taking over forensics?

Cyber Forensics Analysts use AI tools to assist in analyzing digital evidence more efficiently and accurately. While AI automates certain tasks like data sorting and pattern recognition, human expertise remains essential for interpretation, decision-making, and handling complex cases. AI is a complementary technology rather than a complete replacement in digital forensics work.

What are the common challenges faced by Cyber Forensics Analysts when collecting digital evidence?

Cyber Forensics Analysts often face challenges such as ensuring the integrity of digital evidence during collection, dealing with encrypted or damaged devices, and working under tight timelines due to the urgency of investigations. Maintaining a clear chain of custody and adhering to legal protocols is critical to ensure evidence is admissible in court. Additionally, analysts must stay updated on rapidly evolving technologies and cyber threats, which can complicate evidence extraction and analysis.

What does a cyber forensic analyst do?

A cyber forensic analyst investigates digital crimes by collecting, analyzing, and preserving electronic evidence from computers, networks, and storage devices. They use specialized tools and techniques to uncover data breaches, cyberattacks, or fraud, often working closely with law enforcement or legal teams. The role requires knowledge of cybersecurity, digital forensics tools, and adherence to legal standards for evidence handling.

Can I make $200,000 a year in cyber security?

Cyber Forensics Analysts can potentially earn $200,000 or more annually with extensive experience, advanced certifications, and specialized skills in areas like incident response or threat analysis. High salaries are often associated with senior roles, management positions, or working in high-demand industries, and may require working in certain geographic locations or environments with a high cost of living.
More about Cyber Forensics Analyst jobs
What cities are hiring for Cyber Forensics Analyst jobs? Cities with the most Cyber Forensics Analyst job openings:
Who are the top companies hiring for Cyber Forensics Analyst jobs? The top employers for Cyber Forensics Analyst jobs are:
What states have the most Cyber Forensics Analyst jobs? States with the most job openings for Cyber Forensics Analyst jobs include:
Infographic showing various Cyber Forensics Analyst job openings in the United States as of June 2026, with employment types broken down into 85% Full Time, 1% Part Time, and 14% Contract. Highlights an 98% Physical, 1% Hybrid, and 1% Remote job distribution, with an average salary of $101,608 per year, or $48.9 per hour.

Cyber Forensic Analyst II

Amentum

Vienna, VA • On-site

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 25 days ago


Job description

Amentum is seeking a Cyber Forensic Analyst to support the Research & Analysis Division of the Financial Crimes Enforcement Network (FinCEN). This contract is in support of FinCEN's work to combat financial crimes, including terrorist financing, proliferation financing, and complex money laundering schemes. Specific details of this position's support to the effort are listed below:
  • Conduct financial cyber investigations of complex financial and business records which shall include advanced analytical, technical, and operational support.
  • Conduct complete and accurate research and analysis on Cyber-enabled crime methods and trends, including technical methods and money laundering techniques.
  • Conduct Cyber target development, such as identification of cyber-enabled crime networks that include actors and techniques that may represent a cyber threat to systemically important financial institutions and associated infrastructure.
  • Evaluate and analyze emerging payment technologies, such as virtual currencies for criminal use or terrorist financing.
  • Provide analytical and product evaluative services to analyze cyber evidence. In addition, the Contractor shall provide case support to identify and evaluate effective technological methods and services to investigate cybercrimes.
  • Conduct cyber forensics, to include the acquisition, chain of custody, and analysis of electronic evidence from computers, mobile devices, and other digital storage media.
  • Apply investigation and analysis techniques to gather and preserve evidence from a particular computing device in a way that is suitable for presentation in a court of law.
  • Assist with Cryptocurrency analysis, Blockchain analytics, Open Internet, including social media, Deep and Dark Web intelligence gathering and analysis, data analytics, and electronic evidence analysis related to cybercrime investigations.

Required/Preferred Qualifications:
  • Clearance Required: TS with SCI eligibility
  • Education and Years of Experience: Bachelor's degree and 4-7 years of relevant experience or master's degree and 2-5 years of relevant experience.

Relevant experience includes:
  • Knowledge of procedures and techniques used in crypto currency investigations.
  • Experience conducting cryptocurrency analysis in support of Federal investigations and prosecutions by using criminal investigative tools such as Chainanalysis and TRM Labs.
  • Applied knowledge to the enforcement of Title 18, Title 31, and other applicable statutes of the Federal Criminal Code, and the seizure and forfeiture of illegally derived property
  • Ability to conduct research and analysis using open-source information, national and international databases, and corporate record filings to match investigative findings and summarize data into a finished professional product
  • Foreign language skills in Russian, Romanian, and Arabic have proven helpful in supporting investigative efforts and are preferred but are not required.
  • Ability to apply process improvement and reengineering methodologies and principles to conduct process modernization projects.
  • Ability to demonstrate expertise in industry best practices and specific knowledge and experience in developing and applying reengineering methodologies to support development and implementation of operational policies and strategies.

Preferred Qualifications:
  • Experience in cryptocurrency, including global portfolios of virtual currencies, associated cyber actors and intrusion sets, and ransomware actors and infrastructure.
  • Experience conducting technical/data analysis and tracing of cryptocurrency transactions through crypto/cyber data platforms.
  • Experience with producing all-source, cybersecurity, or threat finance finished intelligence products.
  • Experience in the financial services industry, including compliance, asset and wealth management, securities, or banking operations.

Compensation Details:
$110,000 - $120,000
The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.
Benefits Overview:
Our health and welfare benefits are designed to support you and your priorities. Offerings include:
  • Health, dental, and vision insurance
  • Paid time off and holidays
  • Retirement benefits (including 401(k) matching)
  • Educational reimbursement
  • Parental leave
  • Employee stock purchase plan
  • Tax-saving options
  • Disability and life insurance
  • Pet insurance

Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.
Original Posting:
06/02/2026 - Until Filled
Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.
Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.