This field used to be considered an obscure part of network security, but it has become a science all on its own. Analysts, CIOs, and many others are paying attention, and computer forensics companies are springing up, making this a really viable field for people who are interested in this sort of job. It makes sense that the demand is going up - as more and more companies become complex enough to store much of their information online, high tech crimes come into their own. We need to get the evidence to convict the perpetrators of these crimes, and computer forensic specialists are in demand.
Since computer forensics is such a hardware intensive field, one of the types of knowledge you're going to need to have is a solid foundation in the area of computer hardware. This includes storage media and architecture. It's important to be an expert in the field - not just competent. You have to have a high level of confidence in your skills and some good experience in order to do well in this field. Beginners will need to pay attention to a few things when they start on a case.
It's important to make sure that you've defined the scope of all cases correctly. This lets you make sure you know how to anticipate what kind of skills and equipment you're going to need, and the specific problems you're likely to encounter in that case. All computer forensic specialists must be able to bring the appropriate software and devices with them to the location they need to check out. This kind of work does not allow for delays. If you're not going to waste time, you have to make sure you'll have all tools and information you need with you so you can get to work immediately.
It's also important to make sure that you have a detail oriented personality, and that you're willing to check over all possible evidences in extremely close detail. This might seem obvious as part of a computer forensics position, but it's something that many people don't pay attention to. When you're dealing with delicate equipment and data sources, making sure that you're getting things done correctly is of extreme import. Being sloppy in this position could result in some really serious problems.
People working in computer forensics may be employed at large companies as an in house staff, or they may work for outsourcing companies that specialize in this kind of work and come in after an attack. As long as the evidence is obtained properly (and you'll have to adhere closely to the law when doing your work) both methods work. If you're knowledgeable about computers and hardware, and you want to help stop crimes, this could be a great position for you.
