Digital Forensics Analysts

Conduct investigations on computer-based crimes establishing documentary or physical evidence, such as digital media and logs associated with cyber intrusion incidents. Analyze digital evidence and investigate computer security incidents to derive information in support of system and network vulnerability mitigation. Preserve and present computer-related evidence in support of criminal, fraud, counterintelligence, or law enforcement investigations.

Bright Outlook

Interest Profile (RIASEC)

Key Tasks

Adhere to legal policies and procedures related to handling digital media.

Analyze log files or other digital information to identify the perpetrators of network intrusions.

Conduct predictive or reactive analyses on security measures to support cyber security initiatives.

Create system images or capture network settings from information technology environments to preserve as evidence.

Develop plans for investigating alleged computer crimes, violations, or suspicious activity.

Develop policies or requirements for data collection, processing, or reporting.

Duplicate digital evidence to use for data recovery and analysis procedures.

Identify or develop reverse-engineering tools to improve system capabilities or detect vulnerabilities.

Maintain cyber defense software or hardware to support responses to cyber incidents.

Maintain knowledge of laws, regulations, policies or other issuances pertaining to digital forensics or information privacy.

Perform file signature analysis to verify files on storage media or discover potential hidden files.

Perform forensic investigations of operating or file systems.

Perform web service network traffic analysis or waveform analysis to detect anomalies, such as unusual events or trends.

Preserve and maintain digital forensic evidence for analysis.

Recommend cyber defense software or hardware to support responses to cyber incidents.

Recover data or decrypt seized data.

Write and execute scripts to automate tasks, such as parsing large data files.

Write cyber defense recommendations, reports, or white papers using research or experience.

Write reports, sign affidavits, or give depositions for legal proceedings.

Write technical summaries to report findings.

Technology Skills

Operating system software

Apple iOS
Apple macOS
Bash
Microsoft Windows Server

Cloud-based data access and sharing software

Platform as a service PaaS
Slack

Object or component oriented development software

C#
Oracle Java
Perl
R

Network monitoring software

AccessData FTK
Cisco Systems Cisco NetFlow Collection Engine
Snort
Wireshark

Development environment software

Go
Microsoft Azure software
Microsoft PowerShell
Ruby

Transaction security and virus protection software

Metasploit
Microsoft Defender Antivirus
OpenVAS
Tenable Nessus

Data base user interface and query software

Amazon Web Services AWS software
Microsoft Access
ServiceNow
Structured query language SQL

Web platform development software

Hypertext markup language HTML
JavaScript
PHP
Security assertion markup language SAML

Program testing software

Kali Linux
MITRE ATT&CK software
System testing software

Enterprise application integration software

Enterprise application integration EAI software
Extensible markup language XML

Office suite software

Google Workspace software
Microsoft Office software

Internet directory services software

Microsoft Active Directory
Network directory services software

Spreadsheet software

Microsoft Excel

Geographic information system

Geographic information system GIS systems

Filesystem software

Computer forensic software

Authentication server software

Single sign-on SSO

Configuration management software

IBM Terraform

Application server software

Kubernetes

Enterprise system management software

Splunk Enterprise

Expert system software

Ansible software

Enterprise resource planning ERP software

Management information systems MIS

Network security or virtual private network VPN management software

Intrusion detection system IDS

Transaction server software

Web server software

Network security and virtual private network VPN equipment software

Firewall software

Graphical user interface development software

Graphical user interface GUI design software

Analytical or scientific software

Guidance Software EnCase Enterprise

Presentation software

Microsoft PowerPoint

Storage networking software

Amazon Simple Storage Service S3

Switch or router software

Border Gateway Protocol BGP

Detailed Work Activities

Examine records or other types of data to investigate criminal activities.

Write reports or evaluations.

Recommend changes to improve computer or information systems.

Analyze security of systems, network, or data.

Analyze traffic data.

Compile technical information or documentation.

Develop technical methods or processes.

Enter codes or other information into computers.

Establish operational policies.

Identify information technology project resource requirements.

Maintain computer equipment or software.

Maintain knowledge of laws or regulations.

Maintain records, documents, or other files.

Monitor the security of digital information.

Plan production or operational procedures or sequences.

Provide recommendations to others about computer hardware.

Record images needed to address work issues.

Testify at legal or legislative proceedings.

Translate information for others.

Write computer programming code.

Job Zone

Job Zone Four: Considerable Preparation Needed

Most of these occupations require a four-year bachelor's degree, but some do not.

A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an accountant must complete four years of college and work for several years in accounting to be considered qualified.

Employees in these occupations usually need several years of work-related experience, on-the-job training, and/or vocational training.

Many of these occupations involve coordinating, supervising, managing, or training others. Examples include real estate brokers, sales managers, database administrators, graphic designers, conservation scientists, art directors, and cost estimators.

SVP Range: (7.0 to < 8.0)