Occupation Atlasdigital forensics expert
ESCO · http://data.europa.eu/esco/occupation/0c448a27-10ec-43ba-b880-d9938bade424
digital forensics expert
Digital forensics experts retrieve and analyse information from computers and other types of data storage devices. They examine digital media that may have been hidden, encrypted or damaged, in a forensic manner with the aim to identify, preserve, recover, analyse and present facts and opinions about the digital information.
Job Zone
- 1
- 2
- 3
- 4
- 5
Zone 4: Considerable Preparation Needed
Considerable preparation. Usually a bachelor's degree plus several years of work-related experience, knowledge, or training.
Job Zone is O*NET's rating of how much education, experience and training an occupation typically needs — a property of the work, not of anyone doing it.
Occupational interest profile
ICRInvestigative · Conventional · Realistic — the three strongest interests, in order
- I Investigative6.11
- C Conventional6.03
- R Realistic3.20
- E Enterprising2.71
- A Artistic1.69
- S Social1.65
RIASEC (Holland) interests on O*NET's 0–7 scale: what the work draws on, not what any individual prefers. Hover a row for what each dimension means.
Job Zone and interest data are borrowed from Digital Forensics Analysts (15-1299.06): in the official ESCO–O*NET crosswalk, its exact O*NET match, and the best-ranked match that has them. ESCO doesn't publish them directly.
Typically associated skills
Essential (40)
ESCO's essential and optional tags describe how its taxonomy relates a skill to this occupation. They are not the essential functions of a job under the ADA, which an employer determines for its own role.
- GDPR
- ICT infrastructure
- ICT network security risks
- ICT security legislation
- ICT security standards
- apply reverse engineering
- attack vectors
- audit techniques
- check methods
- computer forensics
- cyber attack counter-measures
- cyber security
- develop information security strategy
- digital data processing
- educate on data confidentiality
- establish an ICT security prevention plan
- forensic intelligence
- gather data for forensic purposes
- identify ICT security risks
- identify ICT system weaknesses
- implement ICT network diagnostic tools
- information confidentiality
- levels of software testing
- manage IT security compliances
- manage data for legal matters
- operating systems
- penetration testing tool
- perform ICT security testing
- perform forensic preservations of digital devices
- present evidence
- provide ICT consulting advice
- query languages
- resource description framework query language
- secure sensitive customer's information
- security engineering
- security threats
- tools for ICT test automation
- use scripting programming
- use software for data preservation
- use technology for forensics
Optional (37)
- Aircrack (penetration testing tool)
- Backbox (penetration testing tool)
- BlackArch
- Cain and Abel (penetration testing tool)
- ICT encryption
- John The Ripper (penetration testing tool)
- Kali Linux
- LDAP
- LINQ
- MDX
- Maltego
- Metasploit
- N1QL
- Nessus
- Nexpose
- OWASP ZAP
- Parrot Security OS
- SPARQL
- Samurai Web Testing Framework
- THC Hydra
- WhiteHat Sentinel
- Wireshark
- XQuery
- analyse network configuration and performance
- cloud technologies
- collect cyber defence data
- data storage
- design computer network
- hardware architectures
- hardware platforms
- implement ICT security policies
- information architecture
- information security strategy
- legal requirements of ICT products
- manage cloud data and storage
- perform data mining
- use different communication channels
O*NET equivalents
From the official ESCO–O*NET crosswalk, strongest match first. A broader occupation takes in this one; a narrower one is a part of it.
Closest occupations
Compare any occupation →ESCO occupations that share the most of this occupation's 40 essential skills. A plain count, not a hidden score.
ethical hacker
15 shared · 21 more of its ownpenetration testing tool, computer forensics, operating systems, perform ICT security testing
ESCO · Compare
chief ICT security officer
14 shared · 33 more of its ownestablish an ICT security prevention plan, educate on data confidentiality, develop information security strategy, cyber attack counter-measures
ESCO · Compare
ICT security technician
13 shared · 21 more of its ownpenetration testing tool, establish an ICT security prevention plan, operating systems, identify ICT system weaknesses
ESCO · Compare
cyber incident responder
11 shared · 12 more of its ownGDPR, operating systems, cyber attack counter-measures, attack vectors
ESCO · Compare
embedded systems security engineer
9 shared · 22 more of its ownperform ICT security testing, identify ICT system weaknesses, cyber attack counter-measures, identify ICT security risks
ESCO · Compare
cybersecurity risk manager
8 shared · 14 more of its ownestablish an ICT security prevention plan, cyber attack counter-measures, attack vectors, ICT network security risks
ESCO · Compare
data protection officer
7 shared · 26 more of its ownGDPR, manage data for legal matters, develop information security strategy, ICT security standards
ESCO · Compare
ICT resilience manager
6 shared · 14 more of its owndevelop information security strategy, perform ICT security testing, identify ICT security risks, manage IT security compliances
ESCO · Compare
Use this in your own job architecture
BlissPoint Organization Viewer can link a role directly to this occupation and suggest these skills as that role's starting requirements.
This page includes information from the O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA), used under the CC BY 4.0 license; O*NET® is a trademark of USDOL/ETA. ESCO occupations and skills are from the European Commission's ESCO classification, and the occupation crosswalk is the official ESCO–O*NET mapping by the ESCO Secretariat with USDOL/ETA. This service uses the ESCO classification of the European Commission. BlissPoint Analytics has modified all or some of this information: skill, task and descriptor ratings are rounded to one decimal, and ESCO occupations show Job Zone and interests copied from a crosswalked O*NET occupation. USDOL/ETA has not approved, endorsed, or tested these modifications.