ZipRecruiter

Log In

1

Cyber Security Forensic Analyst Jobs (NOW HIRING)

Nightwing

Cloud Forensic Analyst IV

Arlington, VA · On-site

They are seeking a Cloud Forensics Analyst to support U.S. Government customers in onsite incident ... Cybersecurity, Computer Engineering or related degree; or HS Diploma 10 years of host or digital ...

Beyond SOF

Forensics Analyst II

San Antonio, TX · On-site

Perform forensic incident handling tasks (such as forensic collections, host analysis, intrusion ... Cybersecurity Service Provider (CSSP) Analyst baseline certification, Information Assurance ...

Solutions³ LLC

Host Forensics Analyst

Arlington, VA · On-site

$131K - $149K/yr

... network-based cybersecurity analysis capabilities. We are seeking experienced Host Forensics ... Supporting forensic analysis and mentoring/providing guidance to others on data collection ...

Solutions3 LLC

Host Forensics Analyst

Arlington, VA · On-site

$131K - $149K/yr

... network-based cybersecurity analysis capabilities. We are seeking experienced Host Forensics ... Supporting forensic analysis and mentoring/providing guidance to others on data collection ...

NewGen

Host Forensics Analyst

Arlington, VA · On-site +1

... based cybersecurity analysis capabilities. Contract personnel provide front line response for ... Support forensic analysis and mentoring/providing guidance to others on data collection, analysis ...

NewGen

Host Forensics Analyst IV

Arlington, VA · On-site

... based cybersecurity analysis capabilities. Contract personnel provide front line response for ... Support forensic analysis and mentor/provide guidance to others on data collection, analysis, and ...

previous page

Showing results 41-60

All JobsCyber Security Forensic Analyst Jobs

Cyber Security Forensic Analyst information

See salary details

$43K

$99.4K

$150K

How much do cyber security forensic analyst jobs pay per year?

As of Aug 7, 2026, the average yearly pay for cyber security forensic analyst in the United States is $99,400.00, according to ZipRecruiter salary data. Most workers in this role earn between $79,500.00 and $115,500.00 per year, depending on experience, location, and employer.

What is a cyber security forensic analyst?

Cyber Security Forensic Analysts are professionals who investigate cybercrimes and security breaches by collecting, analyzing, and preserving digital evidence. They work to identify how an attack happened, what data or systems were compromised, and who may be responsible. Their findings help organizations improve security measures and may be used in legal proceedings. These analysts often collaborate with law enforcement and other IT specialists to ensure a thorough investigation.

What are the key skills and qualifications needed to thrive as a cyber security forensic analyst, and why are they important?

To thrive as a Cyber Security Forensic Analyst, you need a strong understanding of computer networks, digital forensics, and incident response, typically supported by a degree in computer science, cybersecurity, or a related field. Familiarity with forensic tools such as EnCase, FTK, and network analysis platforms, as well as certifications like GCFA or CCFP, is highly valuable. Critical thinking, attention to detail, and effective communication are essential soft skills for collecting evidence and presenting findings clearly. These skills and qualifications are crucial for accurately investigating security breaches and ensuring organizational resilience against cyber threats.

How do you become a cyber security forensic analyst?

To become a cybersecurity forensic analyst, individuals typically need a bachelor's degree in computer science, cybersecurity, or a related field. Gaining experience in digital forensics, developing skills in network security and incident response, and obtaining certifications such as the GIAC Certified Forensic Analyst (GCFA) or Certified Computer Forensics Examiner (CCFE) can enhance job prospects.

What are some common challenges faced by cyber security forensic analysts during investigations?

Cyber Security Forensic Analysts often encounter challenges such as dealing with encrypted data, handling large volumes of digital evidence, and ensuring the integrity of data throughout the investigation process. Time-sensitive incidents may also require quick decision-making while maintaining meticulous documentation for potential legal proceedings. Collaborating with IT, legal, and law enforcement teams is essential to ensure that findings are both technically sound and admissible in court.

How much do cyber security forensic analysts make?

Cyber security forensic analysts typically earn a median annual salary of around $80,000 to $100,000, with higher salaries for those with advanced certifications like CISSP or EnCE and experience in specialized tools. Salaries can vary based on location, industry, and level of expertise.

What is the difference between Cyber Security Forensic Analyst vs Cyber Security Analyst?

AspectCyber Security Forensic AnalystCyber Security Analyst
CertificationsGCFA, GCFE, CISSPCISSP, CompTIA Security+
Work EnvironmentInvestigations, incident response, forensic labsSecurity monitoring, risk assessment, network defense
Employer & IndustryLaw enforcement, cybersecurity firms, legal casesIT departments, corporations, government agencies

Cyber Security Forensic Analysts focus on investigating cyber incidents, analyzing digital evidence, and supporting legal cases. In contrast, Cyber Security Analysts primarily monitor networks, prevent attacks, and implement security measures. Both roles require cybersecurity knowledge, but forensic analysts specialize in post-incident analysis and evidence handling.

More about Cyber Security Forensic Analyst jobs
What cities are hiring for Cyber Security Forensic Analyst jobs? Cities with the most Cyber Security Forensic Analyst job openings:
What job categories do people searching Cyber Security Forensic Analyst jobs look for? The top searched job categories for Cyber Security Forensic Analyst jobs are:
Cyber Security Forensic Analyst jobs near you

Cloud Forensic Analyst IV

Nightwing

Arlington, VA • On-site

Full-time

Re-posted 26 days ago

Job description

Job Summary:
Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services. They are seeking a Cloud Forensics Analyst to support U.S. Government customers in onsite incident response to cyber-attacks, performing investigations and assisting with service restoration.
Responsibilities:
• Acquire/collect computer artifacts (e.g., malware, user activity, link files) in support of onsite engagements
• Triage electronic devices and assess evidentiary value
• Correlate forensic findings to network events in support of developing an intrusion narrative
• Collect and document system state information (e.g. running processes, network connections) prior to imaging, as required
• Perform forensic triage of an incident to include determining scope, urgency and potential impact
• Track and document forensic analysis from initial participation through resolution
• Collect, process, preserve, analyze and present computer related evidence
• Coordinate with Government staff and customer personnel to validate/investigate alerts or additional preliminary findings
• Conduct analysis of forensic images, and available evidence in support of forensic write-ups for inclusion in reports and written products
• Assist with documenting and publishing Computer Network Defense (CND) guidance and reports pertaining to incident findings
Qualifications:
Required:
• U.S. Citizenship
• Active TS/SCI clearance
• Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability
• 10 years of direct relevant experience in cyber forensic investigations using leading edge technologies and industry standard forensic tools
• In depth understanding of SaaS, PaaS and IaaS in the Cloud Environment
• Ability to create forensically sound duplicates of evidence (forensic images)
• Ability to author cyber investigative reports documenting digital forensics findings
• Proficiency with analysis and characterization of cyber attacks
• Proficiency with proper evidence handing procedures and chain of custody protocols
• Skilled in identifying different classes of attacks and attack stages
• Understanding of system and application security threats and vulnerabilities
• Understanding of proactive analysis of systems and networks, to include creating trust levels of critical resources- Able to work collaboratively across physical locations
• Action-oriented and have a proactive approach to problem solving
• Proficiency with common operating systems (e,g, Linux/Unix, Windows)
• BS Computer Science, Cybersecurity, Computer Engineering or related degree; or HS Diploma 10 years of host or digital forensics experience.
Preferred:
• Ability to provide knowledge of strategies/architectures involved in implementing M365/Azure authentication, how these hook to a federated identity solution and a fundamental understanding of how threat actors would target identity to compromise an environment
• Advanced experience and proficiency across various aspects of IT operations (e.g. networking, virtualization, identity, security, business continuity, disaster recovery, data management, governance)
• Experience and understanding in acquisition, processing and analysis of digital evidence from onsite enterprises and cloud native platforms
• Fundamental understanding of APIs and proficiency with PowerShell/PowerShell modules leveraged to conduct API queries as they relate to Azure/M365
• Proficiency with scripting languages (e.g. Bash, Python, Powershell, JS) for automation of hunt tools used in commercial cloud environments- Ability to develop tools, architecture and configurations in Azure environment to support identifying threat activity.
• Understanding of Azure administration, M365 administration and/or development/DevOps, with advanced level skills in at least one of these domains
• Understand of how Azure/M365 platform protection is implemented and security operations available
Company:
Nightwing provides cyber, data operations, systems integration, and intelligence services for government and commercial customers. Founded in 2024, the company is headquartered in Sterling, USA, with a team of 1001-5000 employees. The company is currently Late Stage.

Apply