Skip navigation

Summary Report for:
15-1299.06 - Digital Forensics Analysts

Conduct investigations on computer-based crimes establishing documentary or physical evidence, such as digital media and logs associated with cyber intrusion incidents. Analyze digital evidence and investigate computer security incidents to derive information in support of system and network vulnerability mitigation. Preserve and present computer-related evidence in support of criminal, fraud, counterintelligence, or law enforcement investigations.

This title represents an occupation for which data collection is currently underway.

Tasks  |  Detailed Work Activities  |  Credentials  |  Wages & Employment  |  Job Openings

Tasks

  • Adhere to legal policies and procedures related to handling digital media. See more occupations related to this task.
  • Analyze log files or other digital information to identify the perpetrators of network intrusions. See more occupations related to this task.
  • Conduct predictive or reactive analyses on security measures to support cyber security initiatives. See more occupations related to this task.
  • Create system images or capture network settings from information technology environments to preserve as evidence. See more occupations related to this task.
  • Develop plans for investigating alleged computer crimes, violations, or suspicious activity. See more occupations related to this task.
  • Develop policies or requirements for data collection, processing, or reporting. See more occupations related to this task.
  • Duplicate digital evidence to use for data recovery and analysis procedures. See more occupations related to this task.
  • Identify or develop reverse-engineering tools to improve system capabilities or detect vulnerabilities. See more occupations related to this task.
  • Maintain cyber defense software or hardware to support responses to cyber incidents. See more occupations related to this task.
  • Maintain knowledge of laws, regulations, policies or other issuances pertaining to digital forensics or information privacy. See more occupations related to this task.
  • Perform file signature analysis to verify files on storage media or discover potential hidden files. See more occupations related to this task.
  • Perform forensic investigations of operating or file systems. See more occupations related to this task.
  • Perform web service network traffic analysis or waveform analysis to detect anomalies, such as unusual events or trends. See more occupations related to this task.
  • Preserve and maintain digital forensic evidence for analysis. See more occupations related to this task.
  • Recommend cyber defense software or hardware to support responses to cyber incidents. See more occupations related to this task.
  • Recover data or decrypt seized data. See more occupations related to this task.
  • Write and execute scripts to automate tasks, such as parsing large data files. See more occupations related to this task.
  • Write cyber defense recommendations, reports, or white papers using research or experience. See more occupations related to this task.
  • Write reports, sign affidavits, or give depositions for legal proceedings. See more occupations related to this task.
  • Write technical summaries to report findings. See more occupations related to this task.

Find occupations related to multiple tasks

back to top

Detailed Work Activities

  • Examine records or other types of data to investigate criminal activities. See more occupations related to this activity.
  • Write reports or evaluations. See more occupations related to this activity.
  • Recommend changes to improve computer or information systems. See more occupations related to this activity.
  • Analyze security of systems, network, or data. See more occupations related to this activity.
  • Analyze traffic data. See more occupations related to this activity.
  • Compile technical information or documentation. See more occupations related to this activity.
  • Develop technical methods or processes. See more occupations related to this activity.
  • Enter codes or other information into computers. See more occupations related to this activity.
  • Establish operational policies. See more occupations related to this activity.
  • Identify information technology project resource requirements. See more occupations related to this activity.
  • Maintain computer equipment or software. See more occupations related to this activity.
  • Maintain knowledge of laws or regulations. See more occupations related to this activity.
  • Maintain records, documents, or other files. See more occupations related to this activity.
  • Monitor the security of digital information. See more occupations related to this activity.
  • Plan production or operational procedures or sequences. See more occupations related to this activity.
  • Provide recommendations to others about computer hardware. See more occupations related to this activity.
  • Record images needed to address work issues. See more occupations related to this activity.
  • Testify at legal or legislative proceedings. See more occupations related to this activity.
  • Translate information for others. See more occupations related to this activity.
  • Write computer programming code. See more occupations related to this activity.

Find occupations related to multiple detailed work activities

back to top

Credentials

Find Training Find Certifications Apprenticeship.gov

back to top

Wages & Employment Trends

Median wage data for Computer Occupations, All Other.
Employment data for Computer Occupations, All Other.
Industry data for Computer Occupations, All Other.

Median wages (2020) $44.65 hourly, $92,870 annual
State wages
Local wages
 
Employment (2019) 431,100 employees
Projected growth (2019-2029) Faster than average (5% to 7%) Faster than average (5% to 7%)
Projected job openings (2019-2029) 32,300
State trends
 
Top industries (2019)

Source: Bureau of Labor Statistics 2020 wage data external site and 2019-2029 employment projections external site. "Projected growth" represents the estimated change in total employment over the projections period (2019-2029). "Projected job openings" represent openings due to growth and replacement.

back to top

Job Openings on the Web

Find Jobs

back to top