... GCFA, GCFE, GCIH, EnCE, CCE, CFCE, CISSP, CCSP, AWS, or Microsoft Cloud/Security certifications. Company : ARSIEM Corporation is a proven and trusted partner to its government clients. Founded in ...
... GCFA, GCFE, GCIH, EnCE, CCE, CFCE, CISSP, CCSP, AWS, or Microsoft Cloud/Security certifications. Company : ARSIEM Corporation is a proven and trusted partner to its government clients. Founded in ...
... GCFA), GIAC Network Forensic Analyst (GNFA), GIAC Certified Incident Handler Certification (GCIH), GIAC Response and Industrial Defense (GRID), GIAC Experienced Forensics Analyst (GX-FA), GIAC Linux ...
Quick apply
... GCFA), GIAC Network Forensic Analyst (GNFA), GIAC Certified Incident Handler Certification (GCIH), GIAC Response and Industrial Defense (GRID), GIAC Experienced Forensics Analyst (GX-FA), GIAC Linux ...
SK Cloud Security Engineer
Herndon, VA · On-site
$57.25 - $76.50/hr
... GCFA, GCIH, or cloud-specific security certifications (e.g., Google Cloud Security Engineer, Oracle Cloud Security Architect) • Experience in security services and best practices within either ...
SK Cloud Security Engineer
Herndon, VA · On-site
$57.25 - $76.50/hr
... GCFA, GCIH, or cloud-specific security certifications (e.g., Google Cloud Security Engineer, Oracle Cloud Security Architect) • Experience in security services and best practices within either ...
Host Forensics Analyst
Arlington, VA · On-site
$131K - $149K/yr
GCFA, GCFE, EnCE, CCE, CFCE, CISSP Required Education: BS Computer Science, Cybersecurity, Computer Engineering, or related degree; or HS Diploma and 10+ years of host or digital forensics experience
Host Forensics Analyst
Arlington, VA · On-site
$131K - $149K/yr
GCFA, GCFE, EnCE, CCE, CFCE, CISSP Required Education: BS Computer Science, Cybersecurity, Computer Engineering, or related degree; or HS Diploma and 10+ years of host or digital forensics experience
Lead Consultant (1099): IR/Forensics Practice
Arlington, VA · On-site
$90 - $120/hr
... GCFA), GIAC Network Forensic Analyst (GNFA), GIAC Certified Incident Handler Certification (GCIH), GIAC Response and Industrial Defense (GRID), GIAC Experienced Forensics Analyst (GX-FA), GIAC Linux ...
Lead Consultant (1099): IR/Forensics Practice
Arlington, VA · On-site
$90 - $120/hr
... GCFA), GIAC Network Forensic Analyst (GNFA), GIAC Certified Incident Handler Certification (GCIH), GIAC Response and Industrial Defense (GRID), GIAC Experienced Forensics Analyst (GX-FA), GIAC Linux ...
Host Based Systems Analyst IV
Arlington, VA · On-site
$131K - $150K/yr
GCFA, GCFE, EnCE, CCE, CFCE, CISSP Required Education: BS Computer Science, Cybersecurity, Computer Engineering, or related degree; or HS Diploma and 10+ years of host or digital forensics experience ...
Quick apply
Host Based Systems Analyst IV
Arlington, VA · On-site
$131K - $150K/yr
GCFA, GCFE, EnCE, CCE, CFCE, CISSP Required Education: BS Computer Science, Cybersecurity, Computer Engineering, or related degree; or HS Diploma and 10+ years of host or digital forensics experience ...
EnCase, FTK, SIFT, X-Ways, Volatility, WireShark, Sleuth Kit/Autopsy, Splunk, Snort, Other EDR Tools (CrowdStrike, Carbon Black, Etc.) • Proficiency in conducting all-source research. • GCFA ...
EnCase, FTK, SIFT, X-Ways, Volatility, WireShark, Sleuth Kit/Autopsy, Splunk, Snort, Other EDR Tools (CrowdStrike, Carbon Black, Etc.) • Proficiency in conducting all-source research. • GCFA ...
Preferred certifications include CISSP, GCIH, GCFA, CISM, CASP+, PMP, ITIL, or equivalent industry-recognized certifications. Equivalent experience leading major cybersecurity incidents, crisis ...
Preferred certifications include CISSP, GCIH, GCFA, CISM, CASP+, PMP, ITIL, or equivalent industry-recognized certifications. Equivalent experience leading major cybersecurity incidents, crisis ...
Desired Certifications: - GCFA, GCFE, EnCE, CCE, CFCE, CISSP
Desired Certifications: - GCFA, GCFE, EnCE, CCE, CFCE, CISSP
Preferred : • Proficiency with conducting all-source research. • GCFA, GCFE, EnCE, CCE, CFCE, CISSP • Experience with or knowledge of two or more of the following tools: EnCase, SIFT, X-Ways ...
Preferred : • Proficiency with conducting all-source research. • GCFA, GCFE, EnCE, CCE, CFCE, CISSP • Experience with or knowledge of two or more of the following tools: EnCase, SIFT, X-Ways ...
EnCase, FTK, SIFT, X-Ways, Volatility, WireShark, Sleuth Kit/Autopsy, Splunk, Snort, Other EDR Tools (CrowdStrike, Carbon Black, Etc.) • Proficiency in conducting all-source research. • GCFA ...
EnCase, FTK, SIFT, X-Ways, Volatility, WireShark, Sleuth Kit/Autopsy, Splunk, Snort, Other EDR Tools (CrowdStrike, Carbon Black, Etc.) • Proficiency in conducting all-source research. • GCFA ...
... GCFA, GCFE, GCIH, EnCE, CCE, CFCE, CISSP, CCSP, AWS, or Microsoft Cloud/Security certifications. Company : ARSIEM Corporation is a proven and trusted partner to its government clients. Founded in ...
... GCFA, GCFE, GCIH, EnCE, CCE, CFCE, CISSP, CCSP, AWS, or Microsoft Cloud/Security certifications. Company : ARSIEM Corporation is a proven and trusted partner to its government clients. Founded in ...
SK Cloud Security Engineer
Herndon, VA · On-site
$57.25 - $76.50/hr
Degree in Computer Science, Information Security, or a related technical field Relevant Certifications such as CISSP, CCSP, CCSK, GCFA, GCIH, or cloud-specific security certifications (e.g., Google ...
SK Cloud Security Engineer
Herndon, VA · On-site
$57.25 - $76.50/hr
Degree in Computer Science, Information Security, or a related technical field Relevant Certifications such as CISSP, CCSP, CCSK, GCFA, GCIH, or cloud-specific security certifications (e.g., Google ...
Host Based Systems Analyst IV
Arlington, VA · On-site
$131K - $150K/yr
GCFA, GCFE, EnCE, CCE, CFCE, CISSP Required Education: BS Computer Science, Cybersecurity, Computer Engineering, or related degree; or HS Diploma and 10+ years of host or digital forensics experience
Host Based Systems Analyst IV
Arlington, VA · On-site
$131K - $150K/yr
GCFA, GCFE, EnCE, CCE, CFCE, CISSP Required Education: BS Computer Science, Cybersecurity, Computer Engineering, or related degree; or HS Diploma and 10+ years of host or digital forensics experience
Incident Response Engineer - TS/SCI with Security Clearance
Arlington, VA · On-site
$125K - $142K/yr
Industry certifications such as GCIA, GCFA, GCIH, or equivalent incident response/forensics credentials. * Experience handling data spills or incidents involving sensitive or classified information ...
Incident Response Engineer - TS/SCI with Security Clearance
Arlington, VA · On-site
$125K - $142K/yr
Industry certifications such as GCIA, GCFA, GCIH, or equivalent incident response/forensics credentials. * Experience handling data spills or incidents involving sensitive or classified information ...
GCLD, GCFR, GCFA, GCFE, GCIH, EnCE, CCE, CFCE, CISSP, CCSP, AWS or Microsoft Cloud/Security certifications About Us For more than 20 years, NewGen Technologies has solved our clients' toughest IT ...
GCLD, GCFR, GCFA, GCFE, GCIH, EnCE, CCE, CFCE, CISSP, CCSP, AWS or Microsoft Cloud/Security certifications About Us For more than 20 years, NewGen Technologies has solved our clients' toughest IT ...
Required Education: BS Computer Science, Cybersecurity, Computer Engineering, or related degree; or HS Diploma and 7 -9 years of host or digital forensics experience Desired Certifications: - GCFA ...
Required Education: BS Computer Science, Cybersecurity, Computer Engineering, or related degree; or HS Diploma and 7 -9 years of host or digital forensics experience Desired Certifications: - GCFA ...
Additional forensic certifications (CFCE, GCFE, EnCE, CCME, GASF, GCFA). * Expertise in digital-evidence handling, exploitation techniques, or advanced investigative workflows. * Experience with ...
Additional forensic certifications (CFCE, GCFE, EnCE, CCME, GASF, GCFA). * Expertise in digital-evidence handling, exploitation techniques, or advanced investigative workflows. * Experience with ...
GCLD, GCFR, GCFA, GCFE, GCIH, EnCE, CCE, CFCE, CISSP, CCSP, AWS or Microsoft Cloud/Security certifications About Us For more than 20 years, NewGen Technologies has solved our clients' toughest IT ...
Quick apply
GCLD, GCFR, GCFA, GCFE, GCIH, EnCE, CCE, CFCE, CISSP, CCSP, AWS or Microsoft Cloud/Security certifications About Us For more than 20 years, NewGen Technologies has solved our clients' toughest IT ...
GCIH, GCFA GISP, GCED, CCFP or CISSP
GCIH, GCFA GISP, GCED, CCFP or CISSP
Gcfa information
See Virginia salary details
$17.40 - $21.30
4% of jobs
$21.30 - $25.20
5% of jobs
$25.20 - $29.10
9% of jobs
$29.10 - $33
1% of jobs
$35.64 is the 25th percentile. Wages below this are outliers.
$33 - $36.90
7% of jobs
$36.90 - $40.80
15% of jobs
$40.80 - $44.70
4% of jobs
The median wage is $46.21 / hr.
$44.70 - $48.60
9% of jobs
$48.60 - $52.50
11% of jobs
$54.03 is the 75th percentile. Wages above this are outliers.
$52.50 - $56.40
22% of jobs
$56.40 - $60.30
12% of jobs
$17
$43
$60
How much do gcfa jobs pay per hour?
What is a GCFA?
A GCFA (GIAC Certified Forensic Analyst) is a cybersecurity professional specializing in digital forensics and incident response. They analyze cyberattacks, investigate data breaches, and recover compromised systems. GCFA-certified professionals work in law enforcement, government agencies, and private organizations to detect threats and secure networks. Their role involves collecting and preserving digital evidence while following industry best practices.
What are the key skills and qualifications needed to thrive as a GCFA, and why are they important?
To thrive as a GCFA (GIAC Certified Forensic Analyst), you need a solid background in computer forensics, incident response, and digital investigations, usually supported by relevant IT or cybersecurity qualifications. Proficiency with forensic analysis tools such as EnCase, FTK, and other evidence collection software, as well as the GCFA certification itself, is essential. Strong analytical thinking, attention to detail, and effective written and verbal communication are important soft skills for this position. These competencies ensure accurate, thorough investigations, strong courtroom testimony, and collaboration with technical and non-technical stakeholders.
What are some common challenges faced by GCFA professionals in their daily work?
GCFA professionals often encounter challenges such as rapidly evolving cyber threats, the need to preserve and analyze large volumes of digital evidence, and ensuring findings stand up to legal scrutiny. Balancing quick response times with thorough, precise forensic analysis can be demanding, particularly when working on multiple incidents or under time-sensitive conditions. Additionally, staying current with new forensic tools and techniques requires ongoing professional development. Working in this field may involve collaboration with legal teams, law enforcement, and other IT security personnel to effectively resolve incidents and mitigate future risks.
- No Experience Policy Analyst
- Director Vulnerability Management Analyst
- Entry Level Securities Analyst
- Remote Forensic Analyst
- Cyber Security Business Analyst
- No Experience Information Security Analyst
- Forensic Historian
- Internship Visa Sponsorship Available Cyber Security
- Security Assessment Analyst
- Defense Policy Analyst

Full-time
Re-posted 10 days ago
Job description
ARSIEM Corporation is committed to providing technical solutions and support to government clients across the United States. They are seeking a Cyber Network Defense Analyst (CNDA) with Cloud Forensics experience to conduct forensic analysis and respond to incidents targeting cloud and hybrid identity environments.
Responsibilities:
• Conduct forensic acquisition and analysis from on-premises and cloud platforms (Entra ID/Azure AD, M365, AWS, GCP, SaaS) to identify compromise activity, persistence mechanisms, and data exfiltration.
• Investigate and respond to incidents and attacks targeting cloud and hybrid identity.
• Correlate cloud control-plane events and network telemetry (e.g., Azure Activity Logs, AWS CloudTrail, VPC Flow Logs) to reconstruct attacker timelines, validate IOCs, and identify post-compromise privilege escalation.
• Develop and operationalize detection logic and automation using cloud-native tools (Microsoft Defender, Sentinel, AWS GuardDuty, GCP Chronicle) and scripting (PowerShell, Python, Bash), integrating threat intelligence feeds and indicators.
• Produce technical reports, incident documentation, and containment recommendations integrating cloud, identity, and endpoint findings; support development of incident response playbooks and procedures for cloud and hybrid environments.
• Support cloud development and automation projects to enhance threat emulation, investigative, and hunting capabilities.
• Coordinate with internal teams, government staff, and external stakeholders to validate alerts and investigate preliminary findings.
Qualifications:
Required:
• BS in Computer Science, Cybersecurity, Computer Engineering, or related field; OR HS Diploma with 7+ years relevant experience.
• 5+ years of experience in cyber forensic investigations with leading tools and techniques.
• Strong understanding of SaaS, PaaS, and IaaS in cloud environments and hybrid identity security.
• Expertise in acquiring forensically sound evidence, analyzing attacks, and reporting findings.
• Knowledge of M365/Azure, hybrid identity, and threats targeting these solutions.
• Knowledge of AWS, IAM, and best practices for cloud identity security.
• This position requires an Active TS/SCI clearance and the ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability.
Preferred:
• Strong API and scripting skills (PowerShell, Python, Bash, JavaScript) for automation and threat detection.
• Knowledge of common and advanced cloud attacks and techniques, and how to detect and mitigate these threats.
• Proficiency with cloud automation and orchestration tools (Terraform, Kubernetes, CloudFormation, Azure Resource Manager, Docker).
• GCLD, GCFR, GCFA, GCFE, GCIH, EnCE, CCE, CFCE, CISSP, CCSP, AWS, or Microsoft Cloud/Security certifications.
Company:
ARSIEM Corporation is a proven and trusted partner to its government clients. Founded in 2013, the company is headquartered in Baltimore, USA, with a team of 51-200 employees. The company is currently Growth Stage.
About ARSIEM
Sourced by ZipRecruiter
Industry
It services
Company size
11 - 50 Employees
Headquarters location
Baltimore, MD, US
Year founded
2013