ZipRecruiter

Log In

1

Forensics Analyst Jobs (NOW HIRING)

ECS

Cyber Forensics Analyst

Portland, OR · On-site

The Forensics Analyst Mid performs hands-on forensic analysis and malware investigation activities in support of SOC security investigations, incident response, routine memory checks, and advanced ...

Beyond SOF

Forensics Analyst II

San Antonio, TX · On-site

Perform initial analysis of log files, evidence and other information. * Utilize data decryption tools. * Perform forensic incident handling tasks (such as forensic collections, host analysis ...

Solutions³ LLC

Host Forensics Analyst

Arlington, VA · On-site

We are seeking experienced Host Forensics Analysts to provide front line response for digital forensics/incident response (DFIR) and proactively hunting for malicious cyber activity. Eligibility:

Defianx

Digital Forensics Analyst

Tysons, VA · On-site

The Digital Forensics Analyst is responsible for collecting, preserving, analyzing, and documenting digital evidence associated with cybersecurity incidents, investigations, legal proceedings, and ...

Solutions3 LLC

Host Forensics Analyst

Arlington, VA · On-site

We are seeking experienced Host Forensics Analysts to provide front line response for digital forensics/incident response (DFIR) and proactively hunting for malicious cyber activity. Eligibility:

NewGen

Host Forensics Analyst

Arlington, VA · On-site +1

They are seeking Host Forensics Analysts to support this critical customer mission. Responsibilities * -Assist Federal leads with overseeing and leading forensic teams at onsite engagements by ...

BCMC

Host Forensics Analyst

Arlington, VA · On-site

BCMC is seeking Host Forensics Analysts to support this critical customer mission. Responsibilities: - Assisting Federal leads with overseeing and leading forensic teams at onsite engagements by ...

BCMC

Host Forensics Analyst

Arlington, VA · On-site

BCMC is seeking Host Forensics Analysts to support this critical customer mission. Responsibilities: - Assisting Federal leads with overseeing and leading forensic teams at onsite engagements by ...

next page

Showing results 1-20

All JobsForensics Analyst Jobs

Forensics Analyst information

See salary details

$45K

$86.5K

$134K

How much do forensics analyst jobs pay per year?

As of Jul 15, 2026, the average yearly pay for forensics analyst in the United States is $86,474.00, according to ZipRecruiter salary data. Most workers in this role earn between $65,000.00 and $100,500.00 per year, depending on experience, location, and employer.

What do Forensic Analyst do?

A Forensic Analyst investigates crime scenes and collects, analyzes, and preserves physical evidence such as fingerprints, DNA, and digital data. They use specialized tools and techniques to support criminal investigations and often work closely with law enforcement agencies, requiring attention to detail and knowledge of legal procedures.

What are some common challenges a Forensics Analyst faces when collecting digital evidence, and how can these be managed?

Forensics Analysts often encounter obstacles such as encrypted files, damaged storage devices, or anti-forensic techniques used to hide or alter evidence. Managing these challenges involves staying current with forensic tools and methodologies, collaborating with IT and legal teams, and following strict chain-of-custody protocols to preserve evidence integrity. Analysts must also document every step meticulously to ensure findings are admissible in legal proceedings.

Can I be a CSI without being a cop?

A Forensics Analyst is typically a specialized role focused on analyzing physical evidence and may not require law enforcement credentials. While some crime scene investigators (CSIs) are law enforcement officers, others work as civilian forensic specialists in labs or investigative teams, often requiring relevant education and certifications in forensic science or related fields. The specific requirements depend on the employer and jurisdiction, but a background in science and evidence handling is essential.

What are the key skills and qualifications needed to thrive as a Forensics Analyst, and why are they important?

To thrive as a Forensics Analyst, you need a strong background in computer science, digital investigations, and evidence handling, often supported by a relevant degree and industry certifications like GCFA or EnCE. Proficiency with forensic tools such as EnCase, FTK, and Cellebrite, as well as knowledge of operating systems and network protocols, is typically required. Attention to detail, analytical thinking, and effective communication are essential soft skills for interpreting complex data and presenting findings. These skills are crucial to accurately uncover digital evidence, ensure legal compliance, and support criminal or corporate investigations.

How do you become a Forensic Analyst?

To become a forensic analyst, typically a bachelor's degree in criminal justice, forensic science, or a related field is required. Gaining experience through internships or entry-level positions, developing skills in laboratory techniques and digital tools, and obtaining certifications such as the Certified Forensic Computer Examiner (CFCE) can enhance job prospects.

What is the difference between Forensics Analyst vs Cybersecurity Analyst?

AspectForensics AnalystCybersecurity Analyst
Required CredentialsCertifications like GCFA, GCFE, EnCECertifications like CompTIA Security+, CISSP, CEH
Work EnvironmentInvestigative labs, law enforcement agencies, legal settingsIT departments, security operations centers, corporate networks
Employer & Industry UsageLaw enforcement, legal firms, government agenciesPrivate companies, tech firms, financial institutions
Common Search & Comparison IntentUnderstanding investigative roles in digital forensicsUnderstanding cybersecurity roles in protecting digital assets

While both roles focus on digital security, Forensics Analysts specialize in investigating cybercrimes and analyzing digital evidence, often working with law enforcement. Cybersecurity Analysts focus on protecting systems from attacks and vulnerabilities, working primarily within IT security teams. The roles overlap in technical skills and certifications but differ in their primary objectives and work environments.

What does a Forensics Analyst do?

A Forensics Analyst is a professional who investigates and analyzes evidence from crime scenes or digital sources to help solve criminal cases. They may work with physical evidence, such as fingerprints and biological samples, or digital evidence, like data from computers and mobile devices. Their work involves collecting, preserving, and interpreting evidence to support law enforcement investigations and court proceedings. Forensic analysts often prepare reports and may testify as expert witnesses in court. Their expertise is crucial in ensuring that evidence is handled properly and can be used effectively in legal cases.

Do forensic analysts get paid well?

Forensic analysts typically earn competitive salaries that vary based on experience, education, and location. Entry-level positions may start lower, but experienced analysts with certifications and specialized skills can earn higher wages, often comparable to other roles in law enforcement or cybersecurity fields.
More about Forensics Analyst jobs
What cities are hiring for Forensics Analyst jobs? Cities with the most Forensics Analyst job openings:
What states have the most Forensics Analyst jobs? States with the most job openings for Forensics Analyst jobs include:
What job categories do people searching Forensics Analyst jobs look for? The top searched job categories for Forensics Analyst jobs are:
Forensics Analyst jobs near you

Cyber Forensics Analyst

Electronic Consulting Services, Inc (ECS Federal)

Portland, OR • On-site

Other

Posted 9 days ago

Job description

Job Description
ECS is seeking a Cyber Forensics Analyst to work in our Portland, OR office. Note: This position is contingent upon contract award.
The Forensics Analyst Mid performs hands-on forensic analysis and malware investigation activities in support of SOC security investigations, incident response, routine memory checks, and advanced threat hunting. This role uses industry-standard forensic tools and strong investigative skills to collect, analyze, and document technical evidence.
The ideal candidate has solid cybersecurity experience, strong written communication skills, and the ability to operate resourcefully and independently while coordinating with SOC teams, data centers, and senior forensic personnel during investigations.
Key Responsibilities
Digital Forensics and Investigation
  • Perform forensic analysis using industry-standard forensic tools and open-source DFIR utilities.
  • Assist with forensic investigations involving endpoints, servers, malware, and cyber incidents.
  • Analyze Windows Registry, Windows System Calls, Linux artifacts, file system data, logs, and memory artifacts.
  • Create findings and technical notes that support investigative conclusions and remediation actions.
Malware Analysis and IOC Development
  • Analyze malware in a lab environment using standard malware analysis techniques.
  • Create IOCs based on forensic and malware findings for sharing with SOC and security teams.
  • Support Java code de-obfuscation and technical analysis activities within the analyst skill level.
  • Escalate complex malware or reverse-engineering requirements to senior analysts or the FMAT Lead.
SOC and Incident Response Support
  • Assist the SOC with security investigations and incident response activities.
  • Conduct routine memory checks on Linux and Windows servers as directed.
  • Support proactive malware analysis, incident response, and advanced threat hunting activities.
  • Communicate with different teams and data centers during investigations.
Reporting and Collaboration
  • Create clear investigation reports, forensic summaries, and supporting documentation.
  • Communicate findings effectively to SOC analysts, incident responders, data center teams, and leadership.
  • Apply strong investigative, research, and problem-solving skills to ambiguous technical issues.
  • Contribute to repeatable forensic procedures, knowledge sharing, and continuous process improvement.

Required Skills
  • U.S. Citizenship with ability to obtain and maintain a DOE "L" clearance after start.
  • 5 to 8 years of experience in cybersecurity, digital forensics, incident response, or related cyber investigation work.
  • Experience performing forensic analysis using industry-standard forensic tools and open-source tools.
  • Familiarity with Windows Registry, Windows System Calls, Linux operating systems, and Java code de-obfuscation.
  • Hands-on experience with Volatility or other memory forensics tools, FTK, and Wireshark.
  • Ability to create IOCs based on forensic analysis and share them with other security teams.
  • Ability to analyze malware in a lab environment using standard malware analysis techniques.
  • Experience performing or supporting forensic investigations and incident response activities.
  • Excellent written communication, resourcefulness, investigative ability, research skills, and problem-solving skills.

Desired Skills
  • Experience with EnCase (OpenText), Autopsy, Axiom, Zimmerman tools, and other DFIR tools.
  • Experience supporting a U.S. Government civilian agency, enterprise SOC, or regulated environment.
  • Experience with OllyDbg, IdaPro , or comparable reverse-engineering tools.
  • Knowledge of X86 Intel Assembly Language.
Tools and Technologies
  • Forensic Toolkit (FTK)
  • EnCase (OpenText)
  • Autopsy
  • Axiom
  • DFIR tools
  • Zimmerman tools
  • Volatility or equivalent memory forensics tools
  • Wireshark
  • Linux
  • OllyDbg
  • IdaPro
Preferred Certifications
  • GCFE
  • GCFA
  • EnCE
  • FOR508
  • Security+
  • GREM
  • CEH
  • CSFA
Key Competencies
  • Hands-on forensic analysis
  • Malware triage and IOC creation
  • Memory analysis
  • Research and technical problem solving
  • Clear reporting and cross-team communication

#EverforthECS1
ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.
Everforth ECS is the federal segment of Everforth , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.
Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.
We value:
  • Attracting and developing top talent and high-performing teams
  • Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!

Apply