Forensic Computer Analyst
What is the work like?
In recent years there has been a huge expansion of digital technology both in business and at home. This growth has been accompanied by a similar rise in computer-based crime. It is the job of a forensic computer analyst to investigate this type of crime and gather evidence to help build a case against suspected individuals or criminal networks.
As a forensic computer analyst, you could be involved in a wide range of investigations, such as:
- hacking, online scams and fraud
- political, industrial and commercial espionage
- terrorist communications
- possession of illegal pornography
- theft of sensitive company information by employees.
On a typical job, one of your first tasks would be to secure the IT system or hardware, so that it could not be tampered with. You would then use various forensic methods and specialised computer software to:
- find, recover and copy data from disks which may have been hidden, encrypted or damaged
- reveal (unlock) digital images that have been altered to mask the identity of a place or person
- analyse mobile phone records to trace devices to a particular location (or to rule them out)
- follow electronic data trails to uncover links between individuals or groups
- carefully document each stage of your investigation
- present technical findings to managers, law enforcement organisations and clients
- act as a technical or expert witness in court cases.
You could work for the police or security services, a large company like a bank, or for an IT firm that specialises in computer security. You might also work in a broader security role, for example, conducting audits to test the security of a company's information systems.
What qualifications and experience will employers look for?
You would need proven experience in IT to work as a forensic analyst. Employers may also look for a degree, postgraduate qualification or certification (see below).
One way to get into this type of career is to start work with a company, for example as a networking engineer or developer. By taking professional development courses and applying for job opportunities and secondments as they come up, you may eventually be able to move into a more specialised security or analyst role.
You could also take a forensic computing qualification at university. Many colleges now offer these and you can find them on the Universities and Colleges Admissions Service website. Employers recommend that you look for courses that include placements, which would allow you to gain valuable work experience.
You can find a lot of information about this career on the Forums section of Computer Forensics World. One particular tip from analysts is to look at the way different operating systems work and how they can be exploited. It suggests downloading and practising on a free open-source system like Linux to get an idea about some of the technical skills involved.
What further training and development can I do?
Computer crime is a very fast-moving field and it is extremely important that you keep up to date with the latest developments, both in criminal methods and investigative techniques. You could do this by taking training, including postgraduate qualifications, industry certification and specialised in-house courses.
There are numerous security and forensic certifications available, which can be done online, by class-based training or through short intensive 'boot camps'. However, industry advice suggests the best thing to do is to concentrate on gaining on-the-job experience. Once you have that, you can choose training which best matches your job responsibilities, knowledge and experience. A list of certifications broken down into basic, intermediate and advanced levels is available at SearchSecurity.com.
Most courses cover areas such as:
- computer crime and law
- operating systems
- forensic analysis methods
- crime scene management
- courtroom and expert witness skills.
You can find more information about professional development options on the Skills Framework for the Information Age (SFIA) website. This has been developed by professional bodies and employers and allows you to identify your current skills and work out career development options.
Where can I go for more information?
London
SW1E 6DR
If you would like to discuss your career options with a learning adviser at learndirect Careers Advice, call 0800 100 900 or use our online enquiry form
Related profiles...
What salary and other benefits can I expect?
- Salaries for analysts with a minimum of 12 month's experience can be between £25,000 and £35,000.
- With four to five years' experience this can rise to between £40,000 and £60,000.
Figures are intended as a guideline only.
What are the hours and working conditions?
The number of hours you work during a week would really depend on the type of investigation, the timescale and how complex it was. Overtime is likely to be needed in some cases.
The majority of your work would be office based but you would also attend briefings and meetings with colleagues and agencies working on other parts of the same cases.
You may work on stressful (or even disturbing) cases at times.
What skills and knowledge will I need?
- a creative approach to solving problems
- attention to detail
- excellent IT skills
- the ability to spot trends and patterns in large amounts of data
- a well organised and methodical approach to work
- knowledge of information security standards and legislation
- excellent communication and presentation skills
- the ability to work under pressure and to deadlines
- the ability to remain objective.
You would need a keen interest in this field to keep pace with fast-changing technology, investigative tools and increasingly sophisticated criminal methods.
What opportunities are there?
This is a relatively small but growing area of IT. You would normally find opportunities with the police, the Serious and Organised Crime Agency, MI5, other government departments and IT firms specialising in computer security and investigation.
Many public employers and larger commercial organisations, like banks, are now employing forensic computer analysts, often as part of their IT or information departments.
With experience you could progress to senior analyst, head of security or security consultant.
You may find the following links useful for job vacancies and general reading: (links open in new window)
ITJobsWatch
ComputerWeekly
Computing Careers
Forensic Focus
Computing
We do not accept responsibility for the content of external sites.
Search
Contact an adviser
Email
Call back
or phone: 0800 100 900
Bilingual advisers available
Face-to-face advice
