Digital Forensic Salary and Job Survey Results

Forms response chart. Question title: Education background. Number of responses: 45 responses.

Forms response chart. Question title: How many years have you been in the DFIR field. Number of responses: 44 responses.

Forms response chart. Question title: Do you hold any certifications from the following vendors. Number of responses: 36 responses.

Forms response chart. Question title: Are you currently happy with your current job. Number of responses: 45 responses.

Forms response chart. Question title: Would you consider yourself overworked or burnt out. Number of responses: 45 responses.

Forms response chart. Question title: What is your current salary. Number of responses: 44 responses.

Forms response chart. Question title: What is your job role (select all the applies) . Number of responses: 45 responses.

Forms response chart. Question title: Role level. Number of responses: 45 responses.

Forms response chart. Question title: Do you feel underpaid. Number of responses: 44 responses.

Forms response chart. Question title: How many times have you swapped jobs/companies . Number of responses: 45 responses.

Forms response chart. Question title: Do you work in a Major City (NY, LA, Chicago, etc) . Number of responses: 44 responses.

Forms response chart. Question title: Are you Law Enforcement or Private Sector. Number of responses: 45 responses.

What advice would you have for recent graduates or newcomers to the DFIR community

Stay curious, read and practice by don't burn your personal time too much

Sometimes it's worth just getting your foot in the door as law enforcement to get free certs and invaluble training provided by other bigger agencies especially if you have little to no experience. That being said I am in a country where digital forensics is underpaid and very niche in the private sector. (NZ)

Stay hungry. Learn many topics across InfoSec as it makes you more marketable. Learn how to translate security into business language.

Network like mad

Learn about the OS you're going to be working with so you can understand and verify what the tool you use is presenting to you

Forensics is not always the same as what is in books. Most of my knowledge is self taught as dead-box but being on an IR team, I have rarely done traditional forensics. But I apply all the skill sets of forensics to every incident. It can be very rewarding but don't let it overwork you.

Be so interested in the DFIR job that you study it in your of time.

Don't pay/take any cert programs until you speak with a real person at a company/job you would want.

You will not know the answer to every question asked of you but showing a willingness to learn is worth it's weight in gold.

Focus on learning, know your worth.

Work in a SOC. It is grueling at times and overwhelming, but you will learn so much about forensic artifacts from SOC work. A year, maybe two - then apply that knowledge to move into a senior role where you have the opportunity to dive deeper.

Keep learning.

The job really requires someone that actually likes computers. I've seen a number of people come and go that like the investigative part of the job, but don't really understand computers and don't really want to know. You have to like to solve puzzles and to overcome hurdles. This isn't a job where you can just follow the recipes, do this first, then do that, then that other thing. You have to have a flexible mind and a willingness to learn.

Be hungry and never stop learning!

Paperwork is just as important as the find.

Do what makes you happy

Apply to everything, and have a clear understanding of the entire deadbox forensics process.

Never stop learning.

Read and read some more. Go to conferences and trainings.

Network on LinkedIn and online with the DFIR community.

Go into Law Enforcement to get your experience

Establish a strong professional network, and find a mentor. Go to local chapter events to meet other professionals in Cyber. Its about what you know, who you know, and how driven you are to keep learning, bring more productive, and then leading those around you, and those who come after you.