Digital Forensics Analysts
People classed as Digital Forensics Analysts conduct investigations on computer-based crimes establishing documentary or physical evidence, such as digital media and logs associated with cyber intrusion incidents. The skills rated most useful are reading comprehension, writing, and speaking. You may also need to duplicate digital evidence to use for data recovery and analysis procedures. The strongest interest signal is Investigative (6.1 of 7), then Conventional (6.0) and Realistic, which gives it the code ICR. Getting in usually takes a bachelor’s degree plus a period of work experience, a level O*NET calls considerable preparation. Expect to preserve and maintain digital forensic evidence for analysis. People who want research, analysis and working through hard problems usually fit better here than those who need helping, teaching or caring for people.
What they do
Conduct investigations on computer-based crimes establishing documentary or physical evidence, such as digital media and logs associated with cyber intrusion incidents. Analyze digital evidence and investigate computer security incidents to derive information in support of system and network vulnerability mitigation. Preserve and present computer-related evidence in support of criminal, fraud, counterintelligence, or law enforcement investigations.
Main tasks
- Duplicate digital evidence to use for data recovery and analysis procedures.
- Preserve and maintain digital forensic evidence for analysis.
- Adhere to legal policies and procedures related to handling digital media.
- Write reports, sign affidavits, or give depositions for legal proceedings.
- Perform forensic investigations of operating or file systems.
- Create system images or capture network settings from information technology environments to preserve as evidence.
Skills
- Reading Comprehension
- Writing
- Speaking
- Judgment and Decision Making
- Active Listening
- Complex Problem Solving
Who this career fits
May suit you if
- You enjoy working out why something happens, not just what happened.
- You like clear rules and getting the details right.
- You are ready to spend around four years on a degree, then build experience.
- You are comfortable relying on reading comprehension and writing.
May not suit you if
- You lose interest when a job asks for long stretches of analysis.
- You want helping people to be at the center of your work. Social rates 1.7 out of 7 here.
- You want to avoid a four-year degree or its equivalent.
Interest profile
O*NET rates each occupation from 1 to 7 on six interest types. The code ICR takes the three highest, and Investigative comes first here.
Preparation
Considerable preparation. Most jobs here ask for a bachelor’s degree, and employers usually expect a few years of related experience as well.
Also called
- Computer Forensics Analyst
- Digital Forensic Examiner
- Digital Forensics Examiner
- Digital Forensics Specialist
Related careers
Is this your direction?
See how your interests line up with ICR and 906 other careers.
This page includes information from the O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. O*NET® is a trademark of USDOL/ETA.