Digital Forensics Analysts
Conduct investigations on computer-based crimes establishing documentary or physical evidence, such as digital media and logs associated with cyber intrusion incidents. Analyze digital evidence and investigate computer security incidents to derive information in support of system and network vulnerability mitigation. Preserve and present computer-related evidence in support of criminal, fraud, counterintelligence, or law enforcement investigations.
- O*NET-SOC code
15-1299.06 - Preparation Job Zone Four: Considerable Preparation Needed
Wages
BLS doesn't publish wages for Digital Forensics Analysts separately. These are the figures for Computer Occupations, All Other (15-1299), its parent occupation.
| 10th | 25th | Median | 75th | 90th |
|---|---|---|---|---|
| $55,940 | $79,370 | $116,580 | $157,500 | $188,470 |
By state (51)
| State | Employment | Median annual | Location quotient |
|---|---|---|---|
| Alabama | 2,630 | $106,330 | 0.44 |
| Alaska | 710 | $105,960 | 0.78 |
| Arizona | 5,510 | $105,240 | 0.61 |
| Arkansas | 1,120 | $86,940 | 0.31 |
| California | 80,150 | $134,440 | 1.57 |
| Colorado | 11,800 | $139,580 | 1.47 |
| Connecticut | 3,100 | $127,720 | 0.65 |
| Delaware | 860 | $137,470 | 0.63 |
| District of Columbia | 17,200 | $156,590 | 8.75 |
| Florida | 13,710 | $105,370 | 0.49 |
| Georgia | 20,630 | $104,610 | 1.51 |
| Hawaii | 2,080 | $120,100 | 1.18 |
| Idaho | 1,040 | $98,700 | 0.43 |
| Illinois | 11,160 | $99,360 | 0.65 |
| Indiana | 3,340 | $93,540 | 0.37 |
| Iowa | 3,850 | $107,340 | 0.88 |
| Kansas | 1,340 | $103,380 | 0.33 |
| Kentucky | 1,850 | $89,420 | 0.33 |
| Louisiana | 5,020 | $77,000 | 0.93 |
| Maine | 900 | $107,990 | 0.50 |
| Maryland | 19,060 | $144,680 | 2.46 |
| Massachusetts | 6,170 | $109,590 | 0.61 |
| Michigan | 7,440 | $105,680 | 0.60 |
| Minnesota | 4,180 | $91,750 | 0.51 |
| Mississippi | 1,450 | $86,940 | 0.45 |
| Missouri | 14,340 | $101,040 | 1.74 |
| Montana | 540 | $81,970 | 0.38 |
| Nebraska | 2,280 | $92,480 | 0.79 |
| Nevada | 2,610 | $100,220 | 0.60 |
| New Hampshire | 970 | $91,720 | 0.51 |
| New Jersey | 12,010 | $108,310 | 1.00 |
| New Mexico | 1,650 | $127,090 | 0.67 |
| New York | 11,460 | $116,990 | 0.42 |
| North Carolina | 15,090 | $104,850 | 1.09 |
| North Dakota | 730 | $78,330 | 0.60 |
| Ohio | 6,150 | $109,780 | 0.40 |
| Oklahoma | 3,320 | $102,520 | 0.69 |
| Oregon | 2,450 | $97,350 | 0.45 |
| Pennsylvania | 14,580 | $107,230 | 0.86 |
| Rhode Island | 830 | $102,210 | 0.59 |
| South Carolina | 4,300 | $112,260 | 0.67 |
| South Dakota | 240 | $105,370 | 0.18 |
| Tennessee | 10,930 | $76,470 | 1.19 |
| Texas | 57,020 | $111,530 | 1.45 |
| Utah | 6,680 | $97,470 | 1.37 |
| Vermont | 1,320 | $111,530 | 1.56 |
| Virginia | 17,000 | $139,030 | 1.48 |
| Washington | 14,360 | $128,940 | 1.44 |
| West Virginia | 3,380 | $107,140 | 1.72 |
| Wisconsin | 4,680 | $88,130 | 0.57 |
| Wyoming | 170 | $94,520 | 0.22 |
Similar occupations
Similarity is our measure: the cosine of importance x level over all 120 O*NET skills, knowledge areas and abilities. It is not an O*NET finding. More.
Circles are the 20 most similar occupations, coloured by Job Zone. Lines join pairs where one is among the other's 10 most similar; darker lines are pairs O*NET also lists as related. Drag a circle to move it out of the way; select one to open it.
| # | Occupation | Job Zone | Similarity |
|---|---|---|---|
| 1 | Information Security Analysts | 4 | 0.968 |
| 2 | Information Security Engineers | 4 | 0.960 |
| 3 | Penetration Testers | 4 | 0.959 |
| 4 | Intelligence Analysts | 4 | 0.955 |
| 5 | Document Management Specialists | 4 | 0.953 |
| 6 | Database Administrators | 4 | 0.948 |
| 7 | Blockchain Engineers | 4 | 0.947 |
| 8 | Web and Digital Interface Designers | 4 | 0.942 |
| 9 | Business Continuity Planners | 4 | 0.940 |
| 10 | Private Detectives and Investigators | 3 | 0.939 |
One skill away
Among the 50 occupations most similar to Digital Forensics Analysts, those at the same Job Zone or lower, where exactly one skill rated at least 3 in importance needs a level more than 0.75 points higher (on O*NET's 0-7 level scale). Our definition. Change the thresholds.
| Occupation | Skill to build | Level gap | Similarity |
|---|---|---|---|
| Data Warehousing Specialists | Programming | 2.25 | 0.930 |
| Claims Adjusters, Examiners, and Investigators | Critical Thinking | 0.87 | 0.921 |
Software to learn next
Software used by at least 3 of the 20 occupations most similar to Digital Forensics Analysts, excluding software Digital Forensics Analysts already lists and any you named. Ranked by how many of them use it, weighted by how much more common it is among them than across all occupations (lift). Our ranking.
| Software | Similar jobs using it | Lift |
|---|---|---|
| Apache Tomcat | 11 of 20 | 22.1x |
| Oracle WebLogic Server | 11 of 20 | 20.3x |
| Microsoft SQL Server | 16 of 20 | 7.9x |
| Red Hat Enterprise Linux | 11 of 20 | 19.5x |
| MongoDB | 11 of 20 | 18.8x |
| Red Hat WildFly | 10 of 20 | 23.1x |
| NoSQL | 11 of 20 | 16.9x |
| Enterprise JavaBeans | 10 of 20 | 22.0x |
| KornShell | 10 of 20 | 22.0x |
| Microsoft .NET Framework | 11 of 20 | 16.4x |
Skills
From O*NET data. Importance is rated 1 to 5 and level 0 to 7.
| Skill | Type | Importance | Level |
|---|---|---|---|
| Reading Comprehension | Essential skill | 3.75 | 3.75 |
| Writing | Essential skill | 3.50 | 3.88 |
| Speaking | Essential skill | 3.50 | 3.75 |
| Active Listening | Essential skill | 3.50 | 3.50 |
| Judgment and Decision Making | Transferable skill | 3.50 | 3.38 |
| Active Learning | Essential skill | 3.38 | 3.25 |
| Complex Problem Solving | Transferable skill | 3.38 | 3.25 |
| Monitoring | Essential skill | 3.25 | 3.62 |
| Critical Thinking | Essential skill | 3.25 | 3.38 |
| Systems Analysis | Transferable skill | 3.12 | 3.12 |
| Time Management | Transferable skill | 3.00 | 3.12 |
| Social Perceptiveness | Transferable skill | 3.00 | 2.88 |
| Systems Evaluation | Transferable skill | 3.00 | 2.75 |
| Learning Strategies | Essential skill | 2.88 | 3.00 |
| Persuasion | Transferable skill | 2.88 | 3.00 |
| Coordination | Transferable skill | 2.88 | 2.88 |
| Service Orientation | Transferable skill | 2.75 | 2.88 |
| Quality Control Analysis | Transferable skill | 2.62 | not rated |
| Instructing | Transferable skill | 2.62 | 2.75 |
| Negotiation | Transferable skill | 2.62 | 2.62 |
| Operations Monitoring | Transferable skill | 2.50 | not rated |
| Mathematics | Essential skill | 2.50 | 2.75 |
| Management of Personnel Resources | Transferable skill | 2.50 | 2.25 |
| Troubleshooting | Transferable skill | 2.38 | not rated |
| Management of Financial Resources | Transferable skill | 2.12 | 1.50 |
| Programming | Transferable skill | 2.12 | 1.50 |
| Technology Design | Transferable skill | 2.00 | 1.25 |
| Management of Material Resources | Transferable skill | 1.88 | 1.50 |
| Repairing | Transferable skill | 1.75 | 1.12 |
| Science | Essential skill | 1.62 | not rated |
| Equipment Selection | Transferable skill | 1.62 | 1.12 |
| Equipment Maintenance | Transferable skill | 1.62 | 0.75 |
| Operations Analysis | Transferable skill | 1.50 | 0.88 |
| Operation and Control | Transferable skill | 1.38 | not rated |
| Installation | Transferable skill | 1.00 | not rated |
Knowledge (33) and abilities (52)
| Name | Importance | Level |
|---|---|---|
| Computers and Electronics | 4.68 | 6.07 |
| Law and Government | 3.72 | 4.27 |
| English Language | 3.70 | 4.59 |
| Engineering and Technology | 3.23 | 3.81 |
| Customer and Personal Service | 2.85 | 3.81 |
| Public Safety and Security | 2.85 | 3.00 |
| Telecommunications | 2.81 | 3.52 |
| Education and Training | 2.77 | 3.52 |
| Administrative | 2.67 | 3.67 |
| Mathematics | 2.58 | 3.30 |
| Administration and Management | 2.54 | 3.30 |
| Communications and Media | 2.44 | 3.07 |
| Psychology | 2.30 | 2.22 |
| Production and Processing | 2.12 | 2.07 |
| Mechanical | 1.78 | 1.78 |
| Sales and Marketing | 1.67 | 1.44 |
| Design | 1.63 | 1.33 |
| Sociology and Anthropology | 1.62 | 1.30 |
| Foreign Language | 1.59 | 1.44 |
| Personnel and Human Resources | 1.59 | 1.22 |
| Economics and Accounting | 1.48 | 1.23 |
| Geography | 1.41 | 0.85 |
| Transportation | 1.30 | not rated |
| Physics | 1.26 | not rated |
| History and Archeology | 1.22 | not rated |
| Therapy and Counseling | 1.19 | not rated |
| Chemistry | 1.15 | not rated |
| Fine Arts | 1.15 | not rated |
| Medicine and Dentistry | 1.15 | not rated |
| Philosophy and Theology | 1.12 | not rated |
| Biology | 1.11 | not rated |
| Building and Construction | 1.07 | not rated |
| Food Production | 1.04 | not rated |
| Name | Importance | Level |
|---|---|---|
| Written Comprehension | 4.00 | 4.25 |
| Deductive Reasoning | 4.00 | 4.00 |
| Written Expression | 3.88 | 4.12 |
| Inductive Reasoning | 3.88 | 4.00 |
| Oral Comprehension | 3.88 | 4.00 |
| Oral Expression | 3.62 | 3.88 |
| Problem Sensitivity | 3.62 | 3.88 |
| Information Ordering | 3.62 | 3.75 |
| Flexibility of Closure | 3.50 | 3.75 |
| Selective Attention | 3.50 | 3.25 |
| Near Vision | 3.38 | 3.50 |
| Fluency of Ideas | 3.25 | 3.50 |
| Originality | 3.25 | 3.50 |
| Category Flexibility | 3.25 | 3.38 |
| Speech Recognition | 3.25 | 3.38 |
| Speech Clarity | 3.25 | 3.12 |
| Perceptual Speed | 3.00 | 3.00 |
| Far Vision | 2.62 | 2.75 |
| Speed of Closure | 2.62 | 2.50 |
| Memorization | 2.50 | 2.50 |
| Time Sharing | 2.50 | 2.50 |
| Visual Color Discrimination | 2.50 | 2.50 |
| Visualization | 2.38 | 2.75 |
| Mathematical Reasoning | 2.38 | 2.50 |
| Number Facility | 2.38 | 2.25 |
| Hearing Sensitivity | 2.12 | 1.88 |
| Auditory Attention | 2.00 | 1.62 |
| Manual Dexterity | 2.00 | 1.62 |
| Arm-Hand Steadiness | 2.00 | 1.50 |
| Finger Dexterity | 2.00 | 1.50 |
| Trunk Strength | 2.00 | 1.25 |
| Depth Perception | 1.88 | 1.25 |
| Control Precision | 1.75 | 1.12 |
| Wrist-Finger Speed | 1.75 | 1.00 |
| Extent Flexibility | 1.62 | 0.75 |
| Sound Localization | 1.25 | not rated |
| Spatial Orientation | 1.25 | not rated |
| Glare Sensitivity | 1.12 | not rated |
| Multilimb Coordination | 1.12 | not rated |
| Night Vision | 1.12 | not rated |
| Peripheral Vision | 1.12 | not rated |
| Response Orientation | 1.12 | not rated |
| Dynamic Flexibility | 1.00 | not rated |
| Dynamic Strength | 1.00 | not rated |
| Explosive Strength | 1.00 | not rated |
| Gross Body Coordination | 1.00 | not rated |
| Gross Body Equilibrium | 1.00 | not rated |
| Rate Control | 1.00 | not rated |
| Reaction Time | 1.00 | not rated |
| Speed of Limb Movement | 1.00 | not rated |
| Stamina | 1.00 | not rated |
| Static Strength | 1.00 | not rated |
Software used
Examples from O*NET data. "Hot" and "in demand" are O*NET flags for technologies often listed in job postings.
- Amazon Web Services AWS software in demand
- Linux in demand
- Microsoft PowerShell in demand
- Python in demand
- Splunk Enterprise in demand
- Structured query language SQL in demand
- Firewall software in demand
- MITRE ATT&CK software in demand
- Ansible software hot
- Apple iOS hot
- Apple macOS hot
- Bash hot
- Border Gateway Protocol BGP hot
- C hot
- C# hot
- C++ hot
- Extensible markup language XML hot
- Go hot
- Google Workspace software hot
- Hypertext markup language HTML hot
- IBM Terraform hot
- JavaScript hot
- Kubernetes hot
- Microsoft Access hot
- Microsoft Active Directory hot
- Microsoft Azure software hot
- Microsoft Excel hot
- Microsoft Office software hot
- Microsoft PowerPoint hot
- Microsoft Windows hot
All 64
- Microsoft Windows Server hot
- Oracle Java hot
- PHP hot
- Perl hot
- R hot
- Ruby hot
- ServiceNow hot
- Slack hot
- UNIX hot
- AccessData FTK
- Amazon Simple Storage Service S3
- Cisco Systems Cisco NetFlow Collection Engine
- Computer forensic software
- Enterprise application integration EAI software
- Geographic information system GIS systems
- Graphical user interface GUI design software
- Guidance Software EnCase Enterprise
- IBM QRadar SIEM
- Intrusion detection system IDS
- Kali Linux
- Management information systems MIS
- Metasploit
- Microsoft Defender Antivirus
- Network directory services software
- OpenVAS
- Platform as a service PaaS
- Portswigger BurP Suite
- Security assertion markup language SAML
- Single sign-on SSO
- Snort
- System testing software
- Tenable Nessus
- Web server software
- Wireshark
Where it concentrates
BLS doesn't publish wages for Digital Forensics Analysts separately. These are the figures for Computer Occupations, All Other (15-1299), its parent occupation.
Metro areas ranked by BLS location quotient: the occupation's share of the area's jobs divided by its share of all US jobs. Above 1 means more concentrated than the nation. Metros employing fewer than 100 are left out.
| Metro area | Employment | Location quotient | Median annual |
|---|---|---|---|
| Sierra Vista-Douglas, AZ | 500 | 5.29 | $118,120 |
| San Jose-Sunnyvale-Santa Clara, CA | 16,680 | 5.25 | $184,430 |
| Lexington Park, MD | 1,000 | 5.05 | $144,680 |
| Parkersburg-Vienna, WV | 350 | 3.46 | $106,330 |
| Warner Robins, GA | 690 | 3.26 | $100,260 |
| Elizabethtown, KY | 450 | 3.14 | $106,330 |
| Austin-Round Rock-San Marcos, TX | 10,100 | 2.79 | $129,470 |
| Fayetteville, NC | 970 | 2.65 | $101,800 |
| San Francisco-Oakland-Fremont, CA | 16,930 | 2.55 | $161,700 |
| Burlington-South Burlington, VT | 840 | 2.51 | $121,850 |