ZipRecruiter

Log In

1

Cyber Investigation Jobs (NOW HIRING)

ECS

Cyber Forensics Analyst

Portland, OR · On-site

The Forensics Analyst Mid performs hands-on forensic analysis and malware investigation activities ... cyber incidents. * Analyze Windows Registry, Windows System Calls, Linux artifacts, file system ...

Quantum Sky

Senior Cyber Lead

Linthicum Heights, MD

$175K - $225K/yr

Lead forensic investigations involving host-based analysis, network intrusion investigations, malware analysis, memory analysis, and cyber threat activity. * Direct advanced cyber investigations and ...

Tyto Athene, LLC

Senior Cyber Lead

Linthicum, MD · On-site

$175K - $225K/yr

Lead forensic investigations involving host-based analysis, network intrusion investigations, malware analysis, memory analysis, and cyber threat activity. * Direct advanced cyber investigations and ...

Quantum Sky

Senior Cyber Lead

Linthicum Heights, MD · On-site

Lead forensic investigations involving host-based analysis, network intrusion investigations, malware analysis, memory analysis, and cyber threat activity. * Direct advanced cyber investigations and ...

Peraton

NOSC Cyber Analyst

Washington, DC

$80K - $128K/yr

Lead investigations and mentor junior analysts. * Develop training pipeline and brown bag sessions ... Ability to lead cyber investigation and brief updates to customer and team lead * Requires current ...

Peraton

NOSC Cyber Analyst

Washington, DC

$80K - $128K/yr

Lead investigations and mentor junior analysts. * Develop training pipeline and brown bag sessions ... Ability to lead cyber investigation and brief updates to customer and team lead * Requires current ...

Peraton

NOSC Cyber Analyst

Washington, DC · On-site

$80K - $128K/yr

Lead investigations and mentor junior analysts. * Develop training pipeline and brown bag sessions ... Ability to lead cyber investigation and brief updates to customer and team lead * Requires current ...

KBR

NOSC Cyber Analyst

Washington, DC

$149K - $224K/yr

NOSC Cyber Analyst Belong. Connect. Grow. with KBR! KBR's National Security Solutions team provides ... Lead investigations and mentor junior analysts * Develop training pipeline and brown bag sessions ...

next page

Showing results 1-20

All JobsCyber Investigation Jobs

Cyber Investigation information

See salary details

$68.5K

$128.9K

$162K

How much do cyber investigation jobs pay per year?

As of Aug 16, 2026, the average yearly pay for cyber investigation in the United States is $128,882.00, according to ZipRecruiter salary data. Most workers in this role earn between $113,000.00 and $146,500.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a cyber investigator, and why are they important?

To thrive as a Cyber Investigator, you need a solid understanding of digital forensics, cybersecurity principles, and investigative techniques, often supported by a degree in computer science or a related field. Familiarity with forensic tools such as EnCase, FTK, and SIEM systems, as well as relevant certifications like CISSP or GCFA, is typically required. Strong analytical thinking, attention to detail, and effective communication skills help you interpret complex data and present findings clearly. These skills are essential for uncovering digital evidence, ensuring legal compliance, and successfully resolving cybercrime cases.

What does a cyber investigation do?

A cyber investigation involves analyzing digital evidence to identify, prevent, and respond to cyber threats, cybercrimes, or security breaches. Cyber investigators use tools like forensic software and network analysis techniques to uncover malicious activities and support legal or security actions.

What are some common challenges faced by professionals in cyber investigation roles, and how can they be addressed?

Cyber investigators often encounter challenges such as rapidly evolving cyber threats, handling large volumes of digital evidence, and maintaining data integrity throughout the investigation process. Staying updated with the latest cybercrime tactics and using advanced forensic tools can help address these challenges. Effective communication and collaboration with other departments, such as IT and legal teams, are also crucial for a successful investigation. Continuous training and certification in digital forensics and cybersecurity best practices can further enhance effectiveness in this role.

What is the difference between Cyber Investigation vs Cyber Security Analyst?

AspectCyber InvestigationCyber Security Analyst
Required CredentialsCertifications like GCFA, GCIH, CISSP often preferredCertifications like Security+, CISSP, CEH common
Work EnvironmentInvestigative settings, law enforcement agencies, cybersecurity firmsCorporate IT departments, security teams, consulting firms
Employer & Industry UsageUsed in law enforcement, cybersecurity incident responseUsed in private sector, government agencies, and enterprises

While both roles focus on cybersecurity, Cyber Investigation primarily involves analyzing cybercrimes, conducting forensic analysis, and working with law enforcement. Cyber Security Analysts focus on protecting systems proactively, monitoring networks, and preventing attacks. Both roles require technical skills and certifications but differ in their primary objectives and work environments.

How do you become a cyber investigation?

To become a cyber investigator, individuals typically pursue a degree in cybersecurity, computer science, or a related field, and gain experience with digital forensics, network security, and investigative tools. Certifications such as Certified Cyber Forensics Professional (CCFP) or GIAC certifications can enhance qualifications, and strong analytical skills are essential for success in this role.

What is cyber investigation?

Cyber investigation is the process of identifying, analyzing, and resolving cybercrimes, security breaches, or incidents that involve digital devices and networks. Professionals in this field use specialized tools and techniques to collect digital evidence, track unauthorized activities, and attribute cyberattacks to their sources. They often work with law enforcement, private organizations, or government agencies to uncover cyber threats and support legal proceedings. The role requires knowledge of computer systems, networks, forensic analysis, and current cyber threats.
More about Cyber Investigation jobs

What cities are hiring for Cyber Investigation jobs?

Cities with the most Cyber Investigation job openings:

What states have the most Cyber Investigation jobs?

States with the most job openings for Cyber Investigation jobs include:

What job categories do people searching Cyber Investigation jobs look for?

The top searched job categories for Cyber Investigation jobs are:

Cyber Investigation jobs near you
Infographic showing various Cyber Investigation job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 83% Full Time, 14% Part Time, and 2% Contract. Highlights an 87% Physical, 2% Hybrid, and 11% Remote job distribution, with an average salary of $128,882 per year, or $62 per hour.

Cyber Forensics Analyst

ECS

Portland, OR • On-site

Full-time

Re-posted 19 days ago

Job description

ECS is seeking a Cyber Forensics Analyst to work in our Portland, OR office. Note: This position is contingent upon contract award.
The Forensics Analyst Mid performs hands-on forensic analysis and malware investigation activities in support of SOC security investigations, incident response, routine memory checks, and advanced threat hunting. This role uses industry-standard forensic tools and strong investigative skills to collect, analyze, and document technical evidence.
The ideal candidate has solid cybersecurity experience, strong written communication skills, and the ability to operate resourcefully and independently while coordinating with SOC teams, data centers, and senior forensic personnel during investigations.
Key Responsibilities
Digital Forensics and Investigation
  • Perform forensic analysis using industry-standard forensic tools and open-source DFIR utilities.
  • Assist with forensic investigations involving endpoints, servers, malware, and cyber incidents.
  • Analyze Windows Registry, Windows System Calls, Linux artifacts, file system data, logs, and memory artifacts.
  • Create findings and technical notes that support investigative conclusions and remediation actions.

Malware Analysis and IOC Development
  • Analyze malware in a lab environment using standard malware analysis techniques.
  • Create IOCs based on forensic and malware findings for sharing with SOC and security teams.
  • Support Java code de-obfuscation and technical analysis activities within the analyst skill level.
  • Escalate complex malware or reverse-engineering requirements to senior analysts or the FMAT Lead.

SOC and Incident Response Support
  • Assist the SOC with security investigations and incident response activities.
  • Conduct routine memory checks on Linux and Windows servers as directed.
  • Support proactive malware analysis, incident response, and advanced threat hunting activities.
  • Communicate with different teams and data centers during investigations.

Reporting and Collaboration
  • Create clear investigation reports, forensic summaries, and supporting documentation.
  • Communicate findings effectively to SOC analysts, incident responders, data center teams, and leadership.
  • Apply strong investigative, research, and problem-solving skills to ambiguous technical issues.
  • Contribute to repeatable forensic procedures, knowledge sharing, and continuous process improvement.

  • U.S. Citizenship with ability to obtain and maintain a DOE "L" clearance after start.
  • 5 to 8 years of experience in cybersecurity, digital forensics, incident response, or related cyber investigation work.
  • Experience performing forensic analysis using industry-standard forensic tools and open-source tools.
  • Familiarity with Windows Registry, Windows System Calls, Linux operating systems, and Java code de-obfuscation.
  • Hands-on experience with Volatility or other memory forensics tools, FTK, and Wireshark.
  • Ability to create IOCs based on forensic analysis and share them with other security teams.
  • Ability to analyze malware in a lab environment using standard malware analysis techniques.
  • Experience performing or supporting forensic investigations and incident response activities.
  • Excellent written communication, resourcefulness, investigative ability, research skills, and problem-solving skills.

Apply