A. Digital Forensics |
1 | Digital Forensics Analyst | Acquire and analyse data from computers, mobiles and storage media; preserve chain of custody and write evidence reports. | Forensic firms, law enforcement, Big 4, corporates | Analyst → Senior Analyst → Digital Forensics Lead |
2 | Mobile & IoT Forensics Specialist | Extract and analyse data from smartphones, wearables, vehicles and smart devices, including encrypted and deleted content. | Law enforcement, forensic labs, intelligence agencies, tech firms | Specialist → Lab Lead → Head of Mobile Forensics |
3 | Cloud & SaaS Forensics Analyst | Investigate incidents in AWS, Azure, GCP and Microsoft 365; collect logs and cloud artefacts. | Cloud providers, Big 4, MSSPs, large enterprises | Analyst → Cloud Forensics Lead |
4 | Memory & Malware Forensics Analyst | Analyse memory dumps and malware samples to identify attacker tools, persistence and impact. | Security vendors, CERTs, defence, Big 4 | Analyst → Malware Research Lead |
B. Incident Response & Threat Hunting |
5 | Incident Response (DFIR) Analyst | Contain and investigate breaches, ransomware and insider threats; build timelines and root-cause reports. | Mandiant, CrowdStrike, Big 4, banks, tech companies | Analyst → IR Lead → Head of IR |
6 | Threat Hunter / Threat Intelligence Analyst | Proactively hunt for attackers and track threat actors, campaigns and indicators of compromise. | SOC teams, security vendors, governments, financial institutions | Analyst → Senior Hunter → Threat Intel Lead |
7 | SOC Analyst (Tier 1–3) | Monitor alerts, triage incidents and escalate confirmed threats using SIEM and EDR tools. | MSSPs, enterprises, banks, telecoms | Tier 1 → Tier 3 → SOC Manager |
C. Cybercrime & Law Enforcement |
8 | Cybercrime Investigator | Investigate hacking, ransomware, online fraud and data theft; coordinate with prosecutors and agencies. | FBI, NCA, Europol, Interpol, national cyber units | Investigator → Senior Agent → Unit Head |
9 | Online Fraud & Cyber Fraud Investigator | Investigate phishing, account takeover, business email compromise and payment fraud. | Banks, payment networks, e-commerce, fintechs | Investigator → Head of Cyber Fraud |
10 | OSINT & Dark Web Investigator | Gather open-source and dark-web intelligence to identify offenders and track illicit marketplaces. | Law enforcement, intelligence firms, corporates, journalists | Analyst → Senior Investigator → Intelligence Lead |
D. Blockchain & Crypto Forensics |
11 | Blockchain / Crypto Forensic Analyst | Trace on-chain funds, cluster wallets and link addresses to exchanges and illicit actors. | Chainalysis, Elliptic, TRM Labs, exchanges, law enforcement | Analyst → Investigations Lead |
12 | Smart Contract & DeFi Incident Investigator | Investigate exploits, rug pulls and bridge hacks; analyse contract code and fund flows. | Security auditors, DeFi protocols, exchanges, forensic firms | Investigator → Head of Security Research |
E. Legal, Governance & Advisory |
13 | eDiscovery & Litigation Support Specialist | Collect, process and review electronic data for litigation, regulatory and internal investigations. | Law firms, Big 4, eDiscovery vendors, corporates | Specialist → eDiscovery Manager |
14 | Expert Witness (Digital Evidence) | Prepare expert reports and give testimony on digital evidence in court and arbitration. | Forensic firms, law firms, independent practice | Consultant → Expert Witness → Practice Lead |
15 | Data Privacy & Breach Investigator | Assess data breaches, regulatory exposure (GDPR, CCPA) and notification duties. | Regulators, law firms, Big 4, multinationals | Analyst → Privacy / DPO Lead |
16 | Forensic Data Analyst | Use SQL, Python and analytics tools to detect anomalies, insider activity and fraud patterns in large datasets. | Big 4, banks, RegTech firms, corporates | Analyst → Forensic Analytics Lead |
