San Francisco, CA · On-site
$120 - $150/hr
GCIH, GCFA, or equivalent certifications * Demonstrated ability to lead IR engagements independently Nice to have * Experience building or maturing an IR function * Familiarity with cloud and ...
San Francisco, CA · On-site
$120 - $150/hr
GCIH, GCFA, or equivalent certifications * Demonstrated ability to lead IR engagements independently Nice to have * Experience building or maturing an IR function * Familiarity with cloud and ...
... GCFA, GASF), IACIS (CFCE), Magnet (MCME), 13Cubed (IME Gold, ILD Gold), Cellebrite (CCME, CAAF, CAFF, CAIF), or Hexordia (HMAC) • Experience conducting dead-box forensic investigations across iOS ...
... GCFA, GASF), IACIS (CFCE), Magnet (MCME), 13Cubed (IME Gold, ILD Gold), Cellebrite (CCME, CAAF, CAFF, CAIF), or Hexordia (HMAC) • Experience conducting dead-box forensic investigations across iOS ...
Los Angeles, CA · On-site
$87K - $108K/yr
... GCFA, GASF), IACIS (CFCE), Magnet (MCME), 13Cubed (IME Gold, ILD Gold), Cellebrite (CCME, CAAF, CAFF, CAIF), or Hexordia (HMAC) • Experience conducting dead-box forensic investigations across iOS ...
Los Angeles, CA · On-site
$87K - $108K/yr
... GCFA, GASF), IACIS (CFCE), Magnet (MCME), 13Cubed (IME Gold, ILD Gold), Cellebrite (CCME, CAAF, CAFF, CAIF), or Hexordia (HMAC) • Experience conducting dead-box forensic investigations across iOS ...
San Francisco, CA · On-site
$96K - $119K/yr
... GCFA, GASF), IACIS (CFCE), Magnet (MCME), 13Cubed (IME Gold, ILD Gold), Cellebrite (CCME, CAAF, CAFF, CAIF), or Hexordia (HMAC) • Experience conducting dead-box forensic investigations across iOS ...
San Francisco, CA · On-site
$96K - $119K/yr
... GCFA, GASF), IACIS (CFCE), Magnet (MCME), 13Cubed (IME Gold, ILD Gold), Cellebrite (CCME, CAAF, CAFF, CAIF), or Hexordia (HMAC) • Experience conducting dead-box forensic investigations across iOS ...
... GCFA, GASF), IACIS (CFCE), Magnet (MCME), 13Cubed (IME Gold, ILD Gold), Cellebrite (CCME, CAAF, CAFF, CAIF), or Hexordia (HMAC) • Experience conducting dead-box forensic investigations across iOS ...
... GCFA, GASF), IACIS (CFCE), Magnet (MCME), 13Cubed (IME Gold, ILD Gold), Cellebrite (CCME, CAAF, CAFF, CAIF), or Hexordia (HMAC) • Experience conducting dead-box forensic investigations across iOS ...
Preferred : • Relevant security certifications (e.g., GCIH, GCFA, GCIA, CISSP, GDSA) are a plus. Company : Scale's mission is to develop reliable AI systems for the world's most important decisions.
Preferred : • Relevant security certifications (e.g., GCIH, GCFA, GCIA, CISSP, GDSA) are a plus. Company : Scale's mission is to develop reliable AI systems for the world's most important decisions.
... GCFA, GASF), IACIS (CFCE), Magnet (MCME), 13Cubed (IME Gold, ILD Gold), Cellebrite (CCME, CAAF, CAFF, CAIF), or Hexordia (HMAC) • Experience conducting dead-box forensic investigations across iOS ...
... GCFA, GASF), IACIS (CFCE), Magnet (MCME), 13Cubed (IME Gold, ILD Gold), Cellebrite (CCME, CAAF, CAFF, CAIF), or Hexordia (HMAC) • Experience conducting dead-box forensic investigations across iOS ...
... GCFA, GASF), IACIS (CFCE), Magnet (MCME), 13Cubed (IME Gold, ILD Gold), Cellebrite (CCME, CAAF, CAFF, CAIF), or Hexordia (HMAC) • Experience conducting dead-box forensic investigations across iOS ...
... GCFA, GASF), IACIS (CFCE), Magnet (MCME), 13Cubed (IME Gold, ILD Gold), Cellebrite (CCME, CAAF, CAFF, CAIF), or Hexordia (HMAC) • Experience conducting dead-box forensic investigations across iOS ...
Los Angeles, CA · On-site +1
Certifications CISSP (Highly Preferred), CISM, CCSP, or specialized GIAC (GCIH/GCFA). Experience & Qualifications * 8-12+ Years in Information Security, with a significant background (3+ years) in ...
Los Angeles, CA · On-site +1
Certifications CISSP (Highly Preferred), CISM, CCSP, or specialized GIAC (GCIH/GCFA). Experience & Qualifications * 8-12+ Years in Information Security, with a significant background (3+ years) in ...
Los Angeles, CA · On-site +1
Certifications CISSP (Highly Preferred), CISM, CCSP, or specialized GIAC (GCIH/GCFA).Experience & Qualifications * 8-12+ Years in Information Security, with a significant background (3+ years) in ...
Los Angeles, CA · On-site +1
Certifications CISSP (Highly Preferred), CISM, CCSP, or specialized GIAC (GCIH/GCFA).Experience & Qualifications * 8-12+ Years in Information Security, with a significant background (3+ years) in ...
CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, GCFA, GCIH, SCYBER, or PenTest+ • Knowledge of Incident Response Handling Procedures (NIST SP 800-61) • Familiarity with cyber adversary tactics and ...
CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, GCFA, GCIH, SCYBER, or PenTest+ • Knowledge of Incident Response Handling Procedures (NIST SP 800-61) • Familiarity with cyber adversary tactics and ...
Irvine, CA · On-site
$118K - $182K/yr
Industry-recognized certifications such as GCIH, GCFA, GCIA, GNFA, CISSP, CISM, Security+, or CySA+. * Experience working with MSSPs. * Experience supporting SIRP, readiness initiatives, and tabletop ...
Irvine, CA · On-site
$118K - $182K/yr
Industry-recognized certifications such as GCIH, GCFA, GCIA, GNFA, CISSP, CISM, Security+, or CySA+. * Experience working with MSSPs. * Experience supporting SIRP, readiness initiatives, and tabletop ...
GCIH (GIAC Certified Incident Handler), GCFA (GIAC Certified Forensic Analyst), GCFE (GIAC Certified Forensic Examiner), GCIA (GIAC Certified Intrusion Analyst), or CISM (Certified Information ...
GCIH (GIAC Certified Incident Handler), GCFA (GIAC Certified Forensic Analyst), GCFE (GIAC Certified Forensic Examiner), GCIA (GIAC Certified Intrusion Analyst), or CISM (Certified Information ...
Irvine, CA · On-site
$118K - $182K/yr
Industry-recognized certifications such as GCIH, GCFA, GCIA, GNFA, CISSP, CISM, Security+, or CySA+. * Experience working with MSSPs. * Experience supporting SIRP, readiness initiatives, and tabletop ...
Quick apply
Irvine, CA · On-site
$118K - $182K/yr
Industry-recognized certifications such as GCIH, GCFA, GCIA, GNFA, CISSP, CISM, Security+, or CySA+. * Experience working with MSSPs. * Experience supporting SIRP, readiness initiatives, and tabletop ...
... GCFA, CCO, CCPA, CCME, etc.) • General knowledge of litigation support applications (e.g. Relativity, Concordance, Nuix, LAW PreDiscovery, etc.) • Experience working with structured data exported ...
... GCFA, CCO, CCPA, CCME, etc.) • General knowledge of litigation support applications (e.g. Relativity, Concordance, Nuix, LAW PreDiscovery, etc.) • Experience working with structured data exported ...
Los Angeles, CA · On-site
$250K - $300K/yr
One or more digital forensics and incident response certifications, such as GCIH, GCFE, GCFA, CFCE, CCME or equivalent government forensic certifications. ENVIRONMENT DETAILS * Some travel is ...
Los Angeles, CA · On-site
$250K - $300K/yr
One or more digital forensics and incident response certifications, such as GCIH, GCFE, GCFA, CFCE, CCME or equivalent government forensic certifications. ENVIRONMENT DETAILS * Some travel is ...
$120K - $155K/yr
Relevant cyber security qualifications or certifications such as GCIH, GCFA, OSCP, CREST, AWS or Azure Security certifications are desirable. Origin - Where good change happens At Origin, we're ...
$120K - $155K/yr
Relevant cyber security qualifications or certifications such as GCIH, GCFA, OSCP, CREST, AWS or Azure Security certifications are desirable. Origin - Where good change happens At Origin, we're ...
One or more digital forensics and incident response certifications, such as GCIH, GCFE, GCFA, CFCE, CCME or equivalent government forensic certifications. ENVIRONMENT DETAILS * Some travel is ...
Quick apply
One or more digital forensics and incident response certifications, such as GCIH, GCFE, GCFA, CFCE, CCME or equivalent government forensic certifications. ENVIRONMENT DETAILS * Some travel is ...
GIAC Certified Enterprise Defender (GCED) or GIAC Cloud Forensics (GCFA) * Certified Information Systems Security Professional (CISSP) or CISM * AWS Certified Cloud Practitioner or AWS Certified ...
GIAC Certified Enterprise Defender (GCED) or GIAC Cloud Forensics (GCFA) * Certified Information Systems Security Professional (CISSP) or CISM * AWS Certified Cloud Practitioner or AWS Certified ...
GCIH (GIAC Certified Incident Handler), GCFA (GIAC Certified Forensic Analyst), GCFE (GIAC Certified Forensic Examiner), GCIA (GIAC Certified Intrusion Analyst), or CISM (Certified Information ...
GCIH (GIAC Certified Incident Handler), GCFA (GIAC Certified Forensic Analyst), GCFE (GIAC Certified Forensic Examiner), GCIA (GIAC Certified Intrusion Analyst), or CISM (Certified Information ...
$17.32 - $21.20
4% of jobs
$21.20 - $25.08
5% of jobs
$25.08 - $28.96
9% of jobs
$28.96 - $32.85
1% of jobs
$35.48 is the 25th percentile. Wages below this are outliers.
$32.85 - $36.73
7% of jobs
$36.73 - $40.61
15% of jobs
$40.61 - $44.49
4% of jobs
The median wage is $46 / hr.
$44.49 - $48.37
9% of jobs
$48.37 - $52.26
11% of jobs
$53.78 is the 75th percentile. Wages above this are outliers.
$52.26 - $56.14
22% of jobs
$56.14 - $60.02
12% of jobs
$17
$43
$60
A GCFA (GIAC Certified Forensic Analyst) is a cybersecurity professional specializing in digital forensics and incident response. They analyze cyberattacks, investigate data breaches, and recover compromised systems. GCFA-certified professionals work in law enforcement, government agencies, and private organizations to detect threats and secure networks. Their role involves collecting and preserving digital evidence while following industry best practices.
To thrive as a GCFA (GIAC Certified Forensic Analyst), you need a solid background in computer forensics, incident response, and digital investigations, usually supported by relevant IT or cybersecurity qualifications. Proficiency with forensic analysis tools such as EnCase, FTK, and other evidence collection software, as well as the GCFA certification itself, is essential. Strong analytical thinking, attention to detail, and effective written and verbal communication are important soft skills for this position. These competencies ensure accurate, thorough investigations, strong courtroom testimony, and collaboration with technical and non-technical stakeholders.
GCFA professionals often encounter challenges such as rapidly evolving cyber threats, the need to preserve and analyze large volumes of digital evidence, and ensuring findings stand up to legal scrutiny. Balancing quick response times with thorough, precise forensic analysis can be demanding, particularly when working on multiple incidents or under time-sensitive conditions. Additionally, staying current with new forensic tools and techniques requires ongoing professional development. Working in this field may involve collaboration with legal teams, law enforcement, and other IT security personnel to effectively resolve incidents and mitigate future risks.
For Gcfa jobs in California, the most frequently searched job titles are:
The top searched job categories for Gcfa jobs in California are:
Cities in California with the most Gcfa job openings:
San Francisco, CA • On-site
$120 - $150/hr
Other
Posted 6 days ago
Lead response to AI-system compromise — prompt injection, model abuse, data leakage — coordinating containment and recovery.
About the roleThe AI Incident Response Lead runs our most serious engagements end to end. When a client's AI system is compromised — through prompt injection, model abuse, agent hijacking, or data leakage — you lead containment, forensics, root-cause analysis, and recovery.
You will be the calm, senior voice in the room, coordinating with client engineering and briefing executives while the team works the problem. You will also turn each incident into reusable playbooks that strengthen the whole practice.
Key Responsibilities
