Computer forensic analysts use specialised methods and techniques to recover and examine data from computer systems or digital storage devices. They present their findings, which can then be used as evidence in civil or criminal prosecutions involving computer-based, or cyber crime.
They are also known as Cyber security professionals.
You would use a variety of specialist computer programmes and methods to analyse and search for data on devices such as mobile phones, tablets or laptops or desktop computers.
You could be:
- securing the system's hardware or software to avoid further tampering, and copying its files
- recovering damaged or deleted files, or accessing hidden, protected or encrypted files that hide a person’s or organisation’s identity
- analysing file data such as emails or metadata (information embedded in a file describing how and when it was created)
- examining data from mobile phones and satellite navigation systems to pinpoint locations
- following electronic data trails to reveal links between individuals or groups
- recording accurate detail on every stage of your investigation, including the sources of any data and images
- writing a technical report based on your findings
- giving evidence in a court case
- keeping up to date with evolving cyber crime methods and developments in IT forensic technology.
You could be involved in a wide variety of investigations including; industrial or commercial espionage (spying), commercial fraud, theft of undisclosed or confidential information by company employees, possession of illegal images or even bankruptcy cases.
The figures below are only a guide. Actual salaries may vary, depending on:
- where you work
- the size of the company or organisation you work for
- the demand for the job.
Starting salaries can be in the region of £21,000 a year. With experience this can rise to between £30,000 and £45,000 a year.
Some analysts can earn up to £80,000 a year or more.
- You would work in an office or in a computer lab, with normal working hours.
- You normally work overtime depending on how complicated an investigation is, or to meet a deadline.
- Most jobs are usually permanent although there is contract work available for specific projects or cases.
- You would be dealing with highly sensitive or confidential data or images, depending on the type of case you are investigating.
- You may have to travel to meetings, or to access networks or computers onsite to obtain data for analysis.
Workforce Employment Status
LMI data powered by LMI for All
You need a degree or qualification in an IT-related discipline, or a background in IT systems.
- Aberdeen, Abertay, Edinburgh Napier and Glasgow Caledonian Universities, and Edinburgh College all offer relevant degree courses in computer forensics, security or ethical hacking. Entry requirements are 3-5 Highers including Maths or a science or technological subject, plus National 5 English.
- Some degree courses include an industrial placement so that you gain direct experience on the job. Many employers prefer entrants to already have substantial experience.
- Postgraduate courses in computer forensics are also available at Abertay University and Edinburgh Napier University. Entry requirements are a good honours degree in a relevant subject, or equivalent degree with relevant experience. Check individual institutions’ websites for details.
- You might start out with a company as an IT support technician, developer or network engineer and work your way up by taking further training and qualifications. Many postgraduate courses available are part time during the day.
- You might be able to get in through a Modern Apprenticeship. The Tech Partnership website has details on apprenticeships available in Scotland (see Contacts below).
- A driving licence may be handy as you could travel to different sites to extract data for investigation.
- You need to be willing to move to other areas of the UK.
- You will undergo security checks and vetting procedures.
Prospects are good in this line of work, with major employers including the police forces and law enforcement agencies, and government departments and agencies, such as the Serious Fraud Office and MI5. Private employers include IT security and specialist forensic computing companies, as well as banks and financial organisations.
You can find jobs advertised on specialist employment websites such as CyberSecurityJobsite.com.
Workforce Education Levels (UK)
LMI data powered by EMSI UK
Job Outlook Scotland
Percentage of workforce registered as unemployed (Scotland)
LMI data powered by EMSI UK
Job Outlook Scotland and UK
LMI data powered by EMSI UK
What Does it Take?
You need to have:
- excellent problem solving skills
- patience and a methodical way of working
- an enquiring mind
- good written communication skills for reporting your findings.
You need to be able to:
- pay close attention to detail
- spot patterns or trends across large amounts of data
- work on your own initiative
- be impartial and objective
- respect confidentiality.
- You will need to keep up to date with the latest developments in cyber crime, and learning new investigative methods and software. Cyber crime is an ever changing and fast moving area.
- You would learn scripting languages and database development (such as Java, C#, WPF, MySQL, Oracle) as well as operating systems, such as Windows, iOS (Apple Macintosh), Linux, UNIX or DOS, and networking.
- There are many industry related qualifications and certificates you can take while you are working, including postgraduate courses that may allow you to focus on an area of interest.
- Once you have been in the job a number of years, you could progress to become a senior analyst, director or head of security.
- You could be self employed as a security consultant, and work on contracts with different organisations.
Cyber security is a fast developing area but there is still a current skills shortfall. Currently 58,000 people work in cyber security in the UK (up from 22,000 in 2011).
Visit Cybersecurity Challenge website to find lots of useful information about the industry and careers available.
TechFuture careers is also a good educational resource for IT careers.
The following organisations may be able to provide further information.
Was this article useful?
Please help us improve Planit by rating this article.