ZipRecruiter

Log In

1

Cyber Forensics Jobs (NOW HIRING)

next page

Showing results 1-20

All JobsCyber Forensics Jobs

Cyber Forensics information

See salary details

$69.5K

$101.6K

$154.5K

How much do cyber forensics jobs pay per year?

As of Jul 24, 2026, the average yearly pay for cyber forensics in the United States is $101,608.00, according to ZipRecruiter salary data. Most workers in this role earn between $78,500.00 and $132,000.00 per year, depending on experience, location, and employer.

Is cyber forensics a good career?

Cyber forensics is a growing field that involves investigating cybercrimes and analyzing digital evidence using tools like EnCase and FTK. It offers opportunities in law enforcement, cybersecurity firms, and private sectors, often requiring certifications such as GCFA or EnCE. The career typically demands strong technical skills, attention to detail, and the ability to work under pressure.

How much do cybersecurity forensics make?

Cyber forensics specialists typically earn between $60,000 and $120,000 annually, depending on experience, certifications, and location. Entry-level roles may start lower, while experienced professionals with certifications like GCFA or CISSP can earn higher salaries, especially in larger organizations or high-demand areas.

What is a Cyber Forensics job?

A Cyber Forensics job involves investigating digital crimes by analyzing electronic devices, networks, and data to uncover evidence of cybercrimes such as hacking, fraud, and data breaches. Cyber forensic professionals use specialized tools and techniques to recover deleted files, trace cybercriminal activities, and ensure the integrity of digital evidence for legal proceedings. They often work with law enforcement, government agencies, or private companies to prevent and mitigate cyber threats. Additionally, they may provide expert testimony in court and help strengthen an organization’s cybersecurity measures.

What are the key skills and qualifications needed to thrive in the Cyber Forensics position, and why are they important?

To thrive in Cyber Forensics, you need expertise in computer science, digital evidence handling, and incident response, typically supported by a degree in a related field and industry-recognized certifications like EnCE or GCFA. Familiarity with tools such as EnCase, FTK, X-Ways, Cellebrite, and knowledge of operating systems and forensic imaging software is essential. Strong analytical thinking, attention to detail, clear communication, and the ability to work under pressure are crucial soft skills. These skills ensure the accurate extraction, analysis, and reporting of digital evidence in criminal investigations and corporate security incidents.

What are some typical daily responsibilities for a professional in Cyber Forensics?

A Cyber Forensics professional usually spends their day collecting, preserving, and analyzing digital evidence from computers, networks, and mobile devices. They may be tasked with investigating security breaches, recovering deleted or encrypted data, preparing detailed forensic reports, and supporting legal proceedings with credible findings. Collaboration with IT security teams, law enforcement, or legal counsel is common, requiring clear documentation and communication. These responsibilities help organizations or law enforcement agencies understand the nature of security incidents and take appropriate actions.

What can you do with a cyber forensics degree?

A cyber forensics degree prepares individuals for roles such as digital forensic analyst, cybersecurity investigator, or incident responder. Graduates can work in law enforcement, private security firms, or corporate security teams, utilizing skills in data recovery, malware analysis, and digital evidence handling, often using tools like EnCase or FTK. Certifications like GCFA or CISSP can enhance job prospects.

Can I make $200,000 a year in cyber security?

Cyber Forensics professionals can potentially earn $200,000 or more annually, especially with advanced skills, certifications like CISSP or GIAC, and experience in high-demand areas such as incident response or threat analysis. Salaries vary based on location, employer, and level of expertise, with senior roles and specialized knowledge commanding higher pay.
More about Cyber Forensics jobs
What cities are hiring for Cyber Forensics jobs? Cities with the most Cyber Forensics job openings:
What are the most commonly searched types of Cyber Forensics jobs? The most popular types of Cyber Forensics jobs are:
What states have the most Cyber Forensics jobs? States with the most job openings for Cyber Forensics jobs include:
What job categories do people searching Cyber Forensics jobs look for? The top searched job categories for Cyber Forensics jobs are:
Cyber Forensics jobs near you
Infographic showing various Cyber Forensics job openings in the United States as of July 2026, with employment types broken down into 94% Full Time, 3% Part Time, and 3% Contract. Highlights an 89% Physical, 4% Hybrid, and 7% Remote job distribution, with an average salary of $101,608 per year, or $48.9 per hour.
Senior Cyber Lead

Senior Cyber Lead

Tyto Athene, LLC

Linthicum Heights, MD

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 22 days ago

Job description

Description

Tyto Athene is seeking a Senior Cyber Lead to support the Department of Defense Cyber Crime Center (DC3) Cyber Forensics Laboratory (CFL) mission supporting digital forensics, cyber investigations, intrusion analysis, malware analysis, cyber defense operations, and mission-critical DFIR activities.

Responsibilities:

  • Lead cyber operations, digital forensics, incident response, intrusion analysis, and malware analysis activities supporting the DC3 Cyber Forensics Laboratory (CFL).
  • Provide technical leadership and oversight for Digital Forensics and Incident Response (DFIR) operations supporting DoD law enforcement, counterintelligence, cyber operations, and Defense Industrial Base (DIB) investigations.
  • Lead forensic investigations involving host-based analysis, network intrusion investigations, malware analysis, memory analysis, and cyber threat activity.
  • Direct advanced cyber investigations and forensic examinations across Windows, Linux/Unix, macOS, mobile, and enterprise environments.
  • Manage forensic workflows, evidence handling procedures, and chain-of-custody compliance in accordance with ISO/IEC 17025 accreditation standards and DC3 operational procedures.
  • Lead technical analysis of advanced persistent threats (APTs), cyber espionage activity, insider threats, and malicious cyber activity impacting DoD and Federal environments.
  • Provide technical oversight of forensic tools, intrusion detection systems, endpoint security solutions, SIEM platforms, and cyber analytics capabilities supporting mission operations.
  • Coordinate with Government stakeholders, forensic examiners, cyber analysts, and operational leadership to support active investigations and mission requirements.
  • Support development and implementation of operational metrics, dashboards, analytics, and process improvements enhancing mission visibility and operational effectiveness.
  • Lead incident response activities including threat containment, forensic acquisition, malware triage, root cause analysis, and operational recovery support.
  • Ensure compliance with DoD cybersecurity requirements including RMF, STIG implementation, classified operational handling procedures, and secure evidence management.
  • Support tool validation, forensic process standardization, SOP development, and quality assurance activities supporting ANAB ISO/IEC 17025 accreditation.
  • Mentor and develop junior cyber analysts, forensic examiners, and technical personnel supporting the DC3 mission.
  • Provide executive-level briefings, technical reporting, and operational updates to Government leadership and mission stakeholders.
  • Support operational modernization initiatives including automation, analytics, AI/ML-enabled cyber operations, and workflow optimization.
  • Occasional travel to Government and operational locations may be required.
Qualifications

Required:

  • Bachelor's Degree in Cybersecurity, Computer Science, Information Systems, Digital Forensics, Engineering, or related field.
  • 10+ years of progressive experience supporting cybersecurity, DFIR, cyber operations, digital forensics, or cyber investigative missions.
  • 3+ years in a senior technical leadership role supporting cyber operations, DFIR, incident response, or classified mission environments.
  • Demonstrated experience conducting host-based forensics, intrusion analysis, malware analysis, memory analysis, and cyber investigations.
  • Strong understanding of DoD cybersecurity architecture, RMF, STIGs, cyber defense operations, and classified operational environments.
  • Experience supporting SIEM, IDS/IPS, endpoint security, cyber analytics, and enterprise cyber defense technologies.
  • Experience managing technical cyber teams, forensic operations, or cyber investigative activities.
  • Strong analytical, leadership, technical writing, briefing, and communication skills.
  • Experience supporting ISO/IEC 17025 accredited environments, digital evidence handling, or forensic quality assurance processes is highly desired.
  • Ability to operate effectively in fast-paced, mission-critical operational environments.

Desired:

  • Master's Degree in Cybersecurity, Digital Forensics, Computer Science, or related technical discipline.
  • Experience supporting DC3, AFCYBER, USCYBERCOM, NSA, CISA, or Intelligence Community cyber missions.
  • Experience supporting malware reverse engineering, threat intelligence, cyber threat hunting, or advanced intrusion investigations.
  • In-depth experience with cybersecurity and forensic toolsets including Splunk, ELK Stack, FTK, EnCase, X-Ways, Velociraptor, Volatility, or Wireshark.
  • Knowledge of Zero Trust Architecture, enterprise cyber modernization, and AI/ML-enabled cyber operations.
  • Experience supporting operational analytics, dashboarding, and cyber workflow automation initiatives.
  • Certified Ethical Hacker (CEH), GIAC certifications, or advanced DFIR certifications are highly desired.
  • ITIL v4 Foundations or operational service management experience is a plus.

Certifications:

  • DoD 8570 / 8140 baseline certifications required (CompTIA Security+ CE)
  • CISSP, CISM, GCFA, GCIH, GCFE, DFE, or equivalent cybersecurity/forensics certifications strongly preferred.

Clearance: 

  • Top Secret/SCI Eligible Clearance Required.
About Tyto Athene

Compensation:

  • Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $175,000 and $225,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.

Benefits:

  • Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.
Tyto Athene is a trusted leader in IT services and solutions, delivering mission-focused digital transformation that drives measurable success. Our expertise spans four core technology domains-Network Modernization, Hybrid Cloud, Cybersecurity, and Enterprise IT-empowering our clients with cutting-edge solutions tailored to their evolving needs. With over 50 years of experience, Tyto Athene proudly support Defense, Intelligence, Space, National Security, Civilian, Health, and Public Safety clients across the United States and worldwide.  At Tyto Athene, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamTyto?  Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.Employment Type: FULL_TIME

Apply