ZipRecruiter

Log In

2

Remote Forensic Cyber Security Jobs in Seattle, WA

All JobsForensic Cyber Security JobsRemote Forensic Cyber Security JobsRemote Forensic Cyber Security Jobs in Seattle, WA

Remote Forensic Cyber Security information

See Seattle, WA salary details

$46.1K

$139.9K

$204.8K

How much do remote forensic cyber security jobs pay per year?

As of Aug 30, 2026, the average yearly pay for remote forensic cyber security in Seattle, WA is $139,852.00, according to ZipRecruiter salary data. Most workers in this role earn between $116,100.00 and $161,600.00 per year, depending on experience, location, and employer.

What is a remote forensic cyber security professional?

A Remote Forensic Cyber Security professional is an expert who investigates digital crimes and security incidents by analyzing electronic data, often while working from a remote location. Their responsibilities include identifying, collecting, preserving, and examining digital evidence following legal and technical protocols. These professionals help organizations detect breaches, trace cybercriminal activity, and support legal proceedings by providing expert analysis and reports. Working remotely, they use secure connections and tools to access affected systems and collaborate with teams or law enforcement agencies. This role requires a deep understanding of computer systems, networks, digital forensics tools, and cybersecurity best practices.

What are the key skills and qualifications needed to thrive as a remote forensic cyber security specialist?

To thrive as a Remote Forensic Cyber Security Specialist, a strong background in digital forensics, cybersecurity concepts, and incident response is essential, often supported by a degree in computer science and certifications like GCFA or EnCE. Familiarity with forensic analysis tools such as EnCase, FTK, and SIEM platforms is typically required. Outstanding analytical thinking, attention to detail, and effective communication skills help professionals excel in remote environments and complex investigations. These competencies are critical for identifying, preserving, and analyzing digital evidence while ensuring security and compliance during remote operations.

What are some common challenges faced by professionals in remote forensic cyber security roles, and how can they be addressed?

Remote forensic cyber security professionals often encounter challenges such as limited access to physical evidence, ensuring secure data transmission, and maintaining effective communication with on-site teams. To address these, it's important to use secure, encrypted channels for data transfer, employ remote access tools that comply with industry standards, and establish clear protocols for evidence handling. Regular virtual meetings and collaboration tools can help bridge communication gaps and ensure investigations proceed smoothly.

What is the difference between Remote Forensic Cyber Security vs Remote Cyber Security Analyst?

AspectRemote Forensic Cyber SecurityRemote Cyber Security Analyst
CertificationsGCFA, GCIH, CISSPCISSP, Security+, CEH
Work EnvironmentInvestigations, incident response, digital forensicsMonitoring, vulnerability assessment, security analysis
Employer & Industry UsageLaw enforcement, cybersecurity firms, legal casesCorporate, government, tech companies

Remote Forensic Cyber Security specialists focus on investigating cyber incidents, analyzing digital evidence, and supporting legal proceedings. In contrast, Remote Cyber Security Analysts primarily monitor networks, identify vulnerabilities, and implement security measures. Both roles require certifications like CISSP, but forensic roles emphasize investigative skills and digital evidence handling, while analysts focus on proactive security defense.

What are popular job titles related to Remote Forensic Cyber Security jobs in Seattle, WA?

For Remote Forensic Cyber Security jobs in Seattle, WA, the most frequently searched job titles are:

What job categories do people searching Remote Forensic Cyber Security jobs in Seattle, WA look for?

The top searched job categories for Remote Forensic Cyber Security jobs in Seattle, WA are:

What cities near Seattle, WA are hiring for Remote Forensic Cyber Security jobs?

Cities near Seattle, WA with the most Remote Forensic Cyber Security job openings:

Remote Forensic Cyber Security jobs near you
Infographic showing various Remote Forensic Cyber Security job openings in Seattle, WA as of June 2026, with employment types broken down into 97% Full Time, and 3% Contract. Highlights an 38% Physical, 3% Hybrid, and 59% Remote job distribution, with an average salary of $139,852 per year, or $67.2 per hour.

Sr. Cybersecurity Engineer, Cloud and Incident Response

widenet

Seattle, WA • On-site, Remote

$85 - $95/hr

Contractor

Medical, Retirement

Posted 9 days ago

Job description

Job Description:
Location: This position requires the candidate to work onsite 2-3 days a week in Seattle, WA. Potential opening for remote candidates in PST.
This position will help strengthen the cloud security posture, mature incident response capabilities, and advance data security and zero-trust initiatives.
Responsibilities
Cloud security:
- Harden Azure and multi-cloud environments against recognized benchmarks and cloud security posture findings
- Remediate Defender for Cloud findings and drive measurable secure score improvement
- Implement workload protection, configuration baselines, and infrastructure-as-code security checks
- Address cloud identity and entitlement risk, including overprivileged roles, service principals, and standing access
Incident response:
- Enhance and operationalize incident response playbooks aligned to NIST SP 800-61
- Lead and support investigations across cloud, identity, endpoint, email, and SaaS, including account compromise, data exfiltration, insider risk, and business email compromise
- Perform containment, eradication, recovery, evidence preservation, and post-incident reporting
- Coordinate with the managed detection and response provider on escalation quality, handoff, and case closure
- Design and facilitate tabletop exercises and translate findings into control improvements
SIEM optimization and detection engineering:
- Tune Microsoft Sentinel for signal quality and cost efficiency, including connector selection, ingestion tiering, and table-level retention decisions
- Author and maintain analytic rules and hunting queries in KQL
- Map detection coverage to MITRE ATT&CK and close identified gaps
- Reduce false positive volume and improve alert enrichment and automation through SOAR playbooks
Data security and DLP:
- Design, deploy, and tune Microsoft Purview DLP policies across email, endpoint, SharePoint, OneDrive, Teams, and cloud apps
- Implement sensitivity labels, auto-labeling, and data classification at scale
- Operate Insider Risk Management and support eDiscovery and investigative requests
- Drive DLP findings to closure through policy change, access revocation, or corrective action, not just alerting
Zero trust:
- Advance zero trust maturity across identity, device, network, application, and data pillars
- Implement and refine conditional access, privileged identity management, device compliance, and least privilege access models
- Support segmentation and egress control initiatives
Required Qualifications
- 7+ years in security engineering or security operations
- Deep hands-on Microsoft security stack experience: Sentinel, Defender XDR, Defender for Cloud, Entra ID, Intune
- Direct, demonstrable Microsoft Purview experience across DLP, sensitivity labels, and Insider Risk Management
- Strong KQL authoring ability, including detection development and investigative hunting
- Demonstrated incident response leadership on real incidents, not tabletop only
- Azure cloud security depth, including identity, networking, and workload protection
- PowerShell and Microsoft Graph API automation
- Clear written communication for both technical peers and executive audiences
Preferred
- Experience in a lean security team where the role spans engineering and operations
- Familiarity with Palo Alto Networks, Tanium, and CASB or SSPM platforms
- Digital forensics experience, including cloud and M365 artifact analysis
- Experience working alongside an MXDR or managed SOC provider
- Certifications: AZ-500, SC-200, SC-400, SC-100, GCIH, GCFA, CISSP
Pay Range: $85.00 - $95.00 per hour, depending upon experience.
Health & Medical Benefits, 401K, Employee Assistance Program, and Sick Time applicable by state.

Apply