Perform on-site forensic imaging and collection of Windows devices using Logicube physical imaging hardware * Perform on-site forensic collection of macOS devices using Digital Collector * Maintain ...
Perform on-site forensic imaging and collection of Windows devices using Logicube physical imaging hardware * Perform on-site forensic collection of macOS devices using Digital Collector * Maintain ...
Perform on-site forensic imaging and collection of Windows devices using Logicube physical imaging hardware * Perform on-site forensic collection of macOS devices using Digital Collector * Maintain ...
Perform on-site forensic imaging and collection of Windows devices using Logicube physical imaging hardware * Perform on-site forensic collection of macOS devices using Digital Collector * Maintain ...
Cyber Forensic Specialist
Arlington, VA · On-site
Experience with digital forensic imaging (FTK, Cellebrite, Paladin, etc.) and analysis tools (EnCase, Autopsy, Nuix, etc.) * Experience with evidence preservation and chain of custody. * Experience ...
Cyber Forensic Specialist
Arlington, VA · On-site
Experience with digital forensic imaging (FTK, Cellebrite, Paladin, etc.) and analysis tools (EnCase, Autopsy, Nuix, etc.) * Experience with evidence preservation and chain of custody. * Experience ...
Display proficiency with forensic imaging processes and handle various imaging formats and tools. * Understand technical fundamentals of digital forensics, including mobile file systems ...
Quick apply
Display proficiency with forensic imaging processes and handle various imaging formats and tools. * Understand technical fundamentals of digital forensics, including mobile file systems ...
Cyber Forensic Specialist
Arlington, VA · On-site
... imaging (FTK, Cellebrite, Paladin, etc.) and analysis tools (EnCase, Autopsy, Nuix, etc.) • ... forensic tasks. • Experience with eDiscovery toolsets such as: Microsoft Purview eDiscovery ...
Cyber Forensic Specialist
Arlington, VA · On-site
... imaging (FTK, Cellebrite, Paladin, etc.) and analysis tools (EnCase, Autopsy, Nuix, etc.) • ... forensic tasks. • Experience with eDiscovery toolsets such as: Microsoft Purview eDiscovery ...
Senior Advisor, Incident Response
Dallas, TX · On-site +1
$150K - $250K/yr
Document processes and procedures related to digital media lifecycle management, forensic imaging, and data pre-processing to improve operational efficiency. * Serve as the primary Emergency Incident ...
Senior Advisor, Incident Response
Dallas, TX · On-site +1
$150K - $250K/yr
Document processes and procedures related to digital media lifecycle management, forensic imaging, and data pre-processing to improve operational efficiency. * Serve as the primary Emergency Incident ...
... forensic imaging, and digital media lifecycle management. • Support the physical and virtual infrastructure used for customer engagement, responding to consultants' and customers' requests related ...
... forensic imaging, and digital media lifecycle management. • Support the physical and virtual infrastructure used for customer engagement, responding to consultants' and customers' requests related ...
Cyber Security Project Engineer & Knowledge Manager Washington Metro Area, VA SV-CSPE-WMA-001 Responsibilities include: - Cybersecurity tools for forensic imaging and media analysis - Vulnerability ...
Cyber Security Project Engineer & Knowledge Manager Washington Metro Area, VA SV-CSPE-WMA-001 Responsibilities include: - Cybersecurity tools for forensic imaging and media analysis - Vulnerability ...
Senior Advisor, Incident Response
Dallas, TX · On-site
$150K - $250K/yr
Document processes and procedures related to digital media lifecycle management, forensic imaging, and data pre-processing to improve operational efficiency. * Serve as the primary Emergency Incident ...
Senior Advisor, Incident Response
Dallas, TX · On-site
$150K - $250K/yr
Document processes and procedures related to digital media lifecycle management, forensic imaging, and data pre-processing to improve operational efficiency. * Serve as the primary Emergency Incident ...
Digital Media Forensics Analyst Expert
$164K - $195K/yr
Experience conducting evidence acquisition, forensic imaging, and analysis in compliance with legal and evidentiary standards. * Strong analytical and technical problem-solving skills. * Ability to ...
New
Digital Media Forensics Analyst Expert
$164K - $195K/yr
Experience conducting evidence acquisition, forensic imaging, and analysis in compliance with legal and evidentiary standards. * Strong analytical and technical problem-solving skills. * Ability to ...
New
Digital Media Forensics Analyst Expert
Fort George G Meade, MD · On-site
$164K - $195K/yr
Experience conducting evidence acquisition, forensic imaging, and analysis in compliance with legal and evidentiary standards. * Strong analytical and technical problem-solving skills. * Ability to ...
New
Digital Media Forensics Analyst Expert
Fort George G Meade, MD · On-site
$164K - $195K/yr
Experience conducting evidence acquisition, forensic imaging, and analysis in compliance with legal and evidentiary standards. * Strong analytical and technical problem-solving skills. * Ability to ...
New
Demonstrated expertise in the use of forensic imaging and analysis tools such as Encase or FTK. * Understand the EDRM model. * Experience with one or more eDiscovery platforms (Clearwell preferred)
Demonstrated expertise in the use of forensic imaging and analysis tools such as Encase or FTK. * Understand the EDRM model. * Experience with one or more eDiscovery platforms (Clearwell preferred)
Develop and standardize forensic radiology protocols, including post‑mortem imaging techniques and emerging technologies (PMCTA, 3D surface scanning). * Direct validation, calibration, and quality ...
New
Develop and standardize forensic radiology protocols, including post‑mortem imaging techniques and emerging technologies (PMCTA, 3D surface scanning). * Direct validation, calibration, and quality ...
New
Conducting forensic imaging and analysis of endpoints, servers, cloud environments, and mobile devices. * Preserving and analyzing digital evidence in line with legal and regulatory requirements.
Conducting forensic imaging and analysis of endpoints, servers, cloud environments, and mobile devices. * Preserving and analyzing digital evidence in line with legal and regulatory requirements.
Conducting forensic imaging and analysis of endpoints, servers, cloud environments, and mobile devices. * Preserving and analyzing digital evidence in line with legal and regulatory requirements.
Conducting forensic imaging and analysis of endpoints, servers, cloud environments, and mobile devices. * Preserving and analyzing digital evidence in line with legal and regulatory requirements.
Conducting forensic imaging and analysis of endpoints, servers, cloud environments, and mobile devices. * Preserving and analyzing digital evidence in line with legal and regulatory requirements.
Quick apply
Conducting forensic imaging and analysis of endpoints, servers, cloud environments, and mobile devices. * Preserving and analyzing digital evidence in line with legal and regulatory requirements.
Experience in Forensic Imaging and Filesystem Media Analysis * Experience performing Advanced Network Event and Protocol analysis and timeline reconstruction * Experience and ability to develop, use ...
Experience in Forensic Imaging and Filesystem Media Analysis * Experience performing Advanced Network Event and Protocol analysis and timeline reconstruction * Experience and ability to develop, use ...
Experience in Forensic Imaging and Filesystem Media Analysis * Experience performing Advanced Network Event and Protocol analysis and timeline reconstruction * Experience and ability to develop, use ...
Experience in Forensic Imaging and Filesystem Media Analysis * Experience performing Advanced Network Event and Protocol analysis and timeline reconstruction * Experience and ability to develop, use ...
Digital Forensics Cybersecurity Advisor
Washington, DC · Hybrid
$69K - $158K/yr
Experience performing forensic imaging and analysis of physical virtual devices * Experience coordinating with legal, privacy, and incident response teams during an investigation * Bachelor's degree ...
Digital Forensics Cybersecurity Advisor
Washington, DC · Hybrid
$69K - $158K/yr
Experience performing forensic imaging and analysis of physical virtual devices * Experience coordinating with legal, privacy, and incident response teams during an investigation * Bachelor's degree ...
Experience performing forensic imaging and analysis of physical virtual devices * Experience coordinating with legal, privacy, and incident response teams during an investigation * Bachelor's degree ...
Experience performing forensic imaging and analysis of physical virtual devices * Experience coordinating with legal, privacy, and incident response teams during an investigation * Bachelor's degree ...
Forensic Imaging information
See salary details
$41K - $49.7K
12% of jobs
$57.7K is the 25th percentile. Wages below this are outliers.
$49.7K - $58.5K
15% of jobs
$58.5K - $67.2K
8% of jobs
$67.2K - $75.9K
9% of jobs
The median wage is $79.3K / yr.
$75.9K - $84.6K
15% of jobs
$84.6K - $93.4K
9% of jobs
$93.4K - $102.1K
3% of jobs
$106.1K is the 75th percentile. Wages above this are outliers.
$102.1K - $110.8K
7% of jobs
$110.8K - $119.5K
8% of jobs
$119.5K - $128.3K
7% of jobs
$128.3K - $137K
5% of jobs
$41K
$87.9K
$137K
How much do forensic imaging jobs pay per year?
What Are Types of Jobs in Forensic Imaging?
Forensic imaging jobs exist in all branches of government. There are positions with medical examiners or coroners as well as with agencies such as the US Fish & Wildlife Forensics Laboratory that handles cases related to poaching and other violations. As part of your duties, you visit crime scenes to collect digital images for computer analysis. You use a DSLR to photograph the area and work with the police or relevant investigating authority. Some forensic imaging workers specialize in computer-based crimes and use specialized technologies to document electronic information.
What is forensic imaging?
What are some common challenges faced by professionals in forensic imaging, and how can they be addressed?
What are the key skills and qualifications needed to thrive as a Forensic Imaging Specialist, and why are they important?
What is the difference between Forensic Imaging vs Forensic Photography?
| Aspect | Forensic Imaging | Forensic Photography |
|---|---|---|
| Credentials | Certification in digital forensics, imaging tools | Photography certification, digital imaging skills |
| Work Environment | Labs, crime scenes, digital environments | Crime scenes, labs, courtrooms |
| Industry Usage | Digital evidence preservation, forensic analysis | Evidence documentation, scene recording |
| Common Search/Comparison | Digital evidence, data recovery | Scene documentation, evidence photos |
Forensic Imaging focuses on creating exact digital copies of evidence, often involving data recovery and analysis. Forensic Photography emphasizes capturing visual evidence at crime scenes or labs. Both roles require specialized skills and certifications but serve different purposes in the forensic process.

Full-time
Posted 12 days ago
Job description
The Digital Forensics Collection Specialist is a client-dedicated, on-site role based in Seattle, WA that supports a major technology client's Legal department and eDiscovery team in the forensic preservation, imaging, collection, transfer, and secure storage of electronically stored information (ESI) during the discovery process.
This role requires hands-on expertise in digital forensics hardware and software, including physical imaging of Windows and macOS devices, cloud-based data transfers, and meticulous evidence tracking. The ideal candidate combines deep technical acumen with strong collaboration skills to interface with counsel, global IT teams, custodians, and stakeholders at all levels.
Key Responsibilities
- Perform on-site forensic imaging and collection of Windows devices using Logicube physical imaging hardware
- Perform on-site forensic collection of macOS devices using Digital Collector
- Maintain strict chain of custody protocols for all physical and digital evidence
- Transfer collected forensic images and data sets to AWS S3 storage in accordance with security and compliance standards
- Track and manage all evidence and collection efforts using QuickBase, ensuring accurate and timely record-keeping
- Coordinate with custodians and IT staff to schedule and facilitate device collections with minimal business disruption
- Facilitate remote collection of data from enterprise systems, including Exchange servers, file shares, and cloud-based collaboration tools (M365, SharePoint, Slack, etc.)
- Verify data integrity through hash validation and quality-assurance checks post-collection
- Effectively communicate with case teams, outside counsel, and corporate stakeholders in support of discovery workflows
- Analyze and deploy best practices for the forensic handling, preservation, and analysis of electronic evidence
- Assist with developing, revising, and maintaining process documentation, SOPs, and forensic workflow playbooks
- Evaluate and recommend new forensic tools, techniques, and technologies to improve collection efficiency
- Support team members with training and education on forensic best practices, tool usage, and evidence handling procedures
- Collaborate cross-functionally with IT Security, Legal Operations, and outside vendors to support investigation and litigation needs
- Participate in lab equipment maintenance, inventory management, and forensic hardware lifecycle planning
QualificationsEducation
- Bachelor's degree in Digital Forensics, Computer Science, Information Security, Computer Engineering, or related technical discipline
- Advanced degree or specialized forensic coursework preferred
- 3+ years of hands-on experience with digital forensic imaging and evidence collection
- Demonstrated experience with physical imaging hardware (Logicube Falcon, Falcon NEO, or similar forensic duplicators)
- Experience performing forensic collections on macOS using tools such as Digital Collector, MacQuisition, or similar
- Thorough understanding of the EDRM lifecycle and electronic discovery workflows
- Experience with cloud storage platforms, specifically AWS S3, for secure data transfer and storage
- Experience with evidence tracking and case management systems (QuickBase or similar)
- Familiarity with enterprise IT environments and various forms of ESI, including email systems (M365, Exchange, GSuite), file shares, and collaboration platforms
- Knowledge of data privacy regulations and cross-border data transfer considerations
- Prior experience in a legal services, eDiscovery, or client-facing forensic support role preferred
Required Skills:
- Strong understanding of forensic imaging formats (E01, DD/Raw, AFF) and hash-based integrity verification (MD5, SHA-1, SHA-256)
- Proficiency with write-blockers, forensic duplicators, and chain-of-custody protocols
- Ability to troubleshoot hardware and software issues during live collection scenarios
- Strong communication skills, including the ability to convey complex technical concepts in simple, clear terms to non-technical stakeholders
- Attention to detail and commitment to accuracy in evidence documentation and handling
Preferred Certifications (one or more):
- EnCE (EnCase Certified Examiner)
- CCE (Certified Computer Examiner)
- CFCE (Certified Forensic Computer Examiner)
- ACE (AccessData Certified Examiner)
- GCFE (GIAC Certified Forensic Examiner)
- AWS Certified Cloud Practitioner or Solutions Architect (a plus)
Additional Preferred Skills:
- Python scripting for automation of forensic workflows and data processing
- Experience with Amazon Web Services (S3, IAM, CLI)
- Familiarity with forensic suites such as EnCase, FTK, X-Ways, or AXIOM
- Experience with BitLocker, FileVault, and encrypted media handling
- This is a full-time, on-site position based in Seattle, WA — remote work is not available for this role
- Must be able to lift and transport forensic equipment (up to 30 lbs) and work in a corporate lab/office environment
- Occasional travel to other client offices in the region may be required for on-site collections
- May require flexible scheduling to accommodate urgent legal preservation requests
Excellence — We strive to make every client our advocate
Passion — We DO because we CARE
Collaboration — We win together through teamwork and communication
Agility — We flex, adapt and embrace change
People — We value, respect and invest in our teammates
Vision — We create clarity of purpose and a clear path forward
Consilio, LLC is an EEO/Affirmative Action Employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other legally protected status.
#LI-RF1
#LI-Hybrid