LER.me
My LER

Digital Forensics Analysts

Conduct investigations on computer-based crimes establishing documentary or physical evidence, such as digital media and logs associated with cyber intrusion incidents. Analyze digital evidence and investigate computer security incidents to derive information in support of system and network vulnerability mitigation. Preserve and present computer-related evidence in support of criminal, fraud, counterintelligence, or law enforcement investigations.

SOC: 15-1299.06

What You'll Need to Succeed

AI-generated

Key competencies for this occupation at a glance

  • KnowledgeDevelop automated analysis scripts and forensic tools using Python, PowerShell, Bash, and other scripting languages to enhance investigation efficiency.
  • KnowledgeSynthesize findings from multiple data sources including network traffic, system logs, and cloud service records to produce comprehensive forensic reports for criminal, fraud, or counterintelligence cases.
  • KnowledgeAnalyze digital evidence from compromised systems and network logs using forensic tools such as EnCase, FTK, and Wireshark to support cyber intrusion investigations.
  • Hands-onOperate computer forensic software and security information event management (SIEM) platforms following chain-of-custody protocols to preserve digital evidence integrity.
  • KnowledgeEvaluate system and network vulnerabilities identified through intrusion detection systems in enterprise environments to recommend mitigation strategies.
  • KnowledgeExamine digital media artifacts across Windows, Linux, macOS, and mobile operating systems to reconstruct timelines and establish documentary evidence for criminal or fraud investigations.
  • MindsetIntegrate legal standards and forensic best practices with technical investigation methodologies when preparing evidence for law enforcement and counterintelligence proceedings.
  • KnowledgeInvestigate cyber intrusion incidents and attack patterns leveraging threat intelligence frameworks such as MITRE ATT&CK and cloud platforms including AWS and Azure.
  • Hands-onExecute precisely data acquisition and preservation procedures from digital storage devices and network infrastructure under time-sensitive conditions while maintaining forensic soundness.
  • KnowledgeAssess malware behavior and exploitation techniques using reverse engineering and penetration testing tools such as Metasploit and Burp Suite.
  • MindsetAdvocate for rigorous evidence handling and documentation standards when collaborating with legal teams, law enforcement agencies, and interdisciplinary investigation units.

Wage Data According to the Bureau of Labor Statistics

Annual wage data for Digital Forensics Analysts (2024)

Estimated Total Employment (U.S.)

439,380

Wage Distribution by Percentile

Line chart of annual wages by percentile. U.S. is the solid line. 10th percentile: U.S. $52,650. 25th percentile: U.S. $76,360. 50th percentile: U.S. $108,970. 75th percentile: U.S. $147,530. 90th percentile: U.S. $176,800. Use the left and right arrow keys to move between percentiles.

  • U.S.
MetricU.S.
10% of workers earn the following or less$52,650
10% of workers earn the following or more$176,800
Workers on average earn$116,700

+ indicates wage is at or above the BLS reporting cap ($239,200/year)

Tools & Technology

Equipment and software commonly used in this occupation

In-Demand Technology

Frequently requested by employers in job postings

  • Amazon Simple Storage Service S3
  • Amazon Web Services AWS software
  • Ansible software
  • Apple iOS
  • Apple macOS
  • Bash
  • Border Gateway Protocol BGP
  • C
  • C#
  • C++
  • Extensible markup language XML
  • Go
  • Google Workspace software
  • Hypertext markup language HTML
  • IBM Terraform
  • JavaScript
  • Kubernetes
  • Linux
  • Microsoft Access
  • Microsoft Active Directory
  • Microsoft Azure software
  • Microsoft Excel
  • Microsoft Office software
  • Microsoft PowerPoint
  • Microsoft PowerShell
  • Microsoft Windows
  • Microsoft Windows Server
  • Oracle Java
  • PHP
  • Perl
  • Python
  • R
  • Ruby
  • ServiceNow
  • Slack
  • Splunk Enterprise
  • Structured query language SQL
  • UNIX

Technology Skills

  • AccessData FTK
  • Cisco Systems Cisco NetFlow Collection Engine
  • Computer forensic software
  • Enterprise application integration EAI software
  • Firewall software
  • Geographic information system GIS systems
  • Graphical user interface GUI design software
  • Guidance Software EnCase Enterprise
Tools & Technology: Technology Skills