Consulting Associate/Cybersecurity & Incident Response (Forensic Services practice) jobs in United States
cer-icon
Apply on Employer Site
company-logo

Charles River Associates · 1 day ago

Consulting Associate/Cybersecurity & Incident Response (Forensic Services practice)

Charles River Associates is a leading global consulting firm specializing in economic and financial analysis. The Consulting Associate in the Cybersecurity & Incident Response practice will support clients in responding to allegations of fraud and misconduct, conducting forensic investigations, and providing expert digital forensic support.

AuctionsConsultingLegal
check
Growth Opportunities
check
H1B Sponsorednote

Responsibilities

Executing security and privacy investigations for CRA clients, in preparation of, and in response to, data security matters, which may include ongoing breach detection, threat analysis, incident response and malware analysis
Providing expert digital forensic support for counsel and clients in support of data security incidents, such as data breaches or fraud
Assisting in the drafting of forensic reports, affidavits and testifying as an expert in the field of digital forensics and incident response
Engaging in problem-solving and forensic analysis of digital information using standard evidence handling techniques and computer forensics tools
Identify, research, and organize information to assess the appropriateness and sufficiency of available data to facilitate effective data access and analysis
Developing familiarity with data that serves as input to this analysis, including threat intelligence, logging data, as well as contextual clues
Recognizing relationships among multiple sources and types of information to facilitate effective data analysis
Programming, model building, and database administration (Python, T-SQL, VBA, Excel, C#, among others)
Ensuring reliability of analysis and risk management through implementing quality control measures and documentation
Forensically acquire data and images from identified hosts, and then locate evidence of compromise determine its impact from disk, file, memory, and log analysis
Identify artifact and evidence locations to answer critical questions, including execution, file access, data theft, anti-forensics, and detailed system usage by an adversary
Detect and hunt unknown live, dormant, and custom malware across multiple hosts in an enterprise environment
Create Indicators of Compromise (IOCs) from analysis to strengthen incident response and threat intelligence efforts
Track adversary activity second-by-second on a host via in-depth timeline analysis
Understand the evidence needed to determine the type of malware used in an attack, including rootkits, backdoors, and Trojan horses, choosing appropriate defenses and response tactics for each
Identify lateral movement and pivots within client enterprises, showing how an adversary transitions from system to system without detection
Use physical memory analysis tools to determine an adversary's activities on a host and other hosts the adversary used as pivot points across the network
Examine traffic using common network protocols to identify patterns of activity or specific actions that warrant further investigation
Identify and track malware beaconing outbound to its command and control (C2) channel via memory forensics, registry analysis, and network connections
Providing technical assessment/audit and guidance to clients on the adequacy of cyber security controls in accordance with cybersecurity frameworks that are included in one or more of the following - NIST CSF 2.0, HIPAA, ISO 27001 and 27002, SOC2, NERC-CIP
Participating in practice-building activities including recruiting and training

Qualification

Digital ForensicsIncident ResponseCybersecurity ConceptsMalware AnalysisPythonT-SQLVBAC#Technical WritingAnalytical SkillsTeam CollaborationTime ManagementCommunication Skills

Required

3-5 years of experience
Majored in Computer Science, Digital Forensics, Information Security, and/or Information Systems
Knowledge of cybersecurity concepts
Research experience
Quantitative ability
Exceptional written and oral communication skills
High level of initiative
Ability to execute security and privacy investigations
Provide expert digital forensic support for counsel and clients
Assist in the drafting of forensic reports and affidavits
Engage in problem-solving and forensic analysis of digital information
Identify, research, and organize information for effective data access and analysis
Develop familiarity with data for analysis, including threat intelligence and logging data
Recognize relationships among multiple sources and types of information
Programming, model building, and database administration (Python, T-SQL, VBA, Excel, C#, among others)
Ensure reliability of analysis and risk management through quality control measures
Forensically acquire data and images from identified hosts
Identify artifact and evidence locations
Detect and hunt unknown live, dormant, and custom malware
Create Indicators of Compromise (IOCs)
Track adversary activity via in-depth timeline analysis
Understand evidence needed to determine type of malware used in an attack
Identify lateral movement and pivots within client enterprises
Use physical memory analysis tools
Examine traffic using common network protocols
Identify and track malware beaconing outbound to its command and control (C2) channel
Provide technical assessment/audit and guidance on adequacy of cyber security controls
Participate in practice-building activities including recruiting and training

Preferred

Experience in collegiate computer security competitions
Digital forensics/incident response training and certifications, including SANS GIAC (GCFA, GCFE, GNFA, GIME), IACIS (CFCE or CIFR), Magnet MCFE, X-ways X-Pert or similar

Benefits

Medical, dental, and vision insurance
401(k) retirement plan with employer match
Life and disability insurance
Paid time off (vacation, sick leave, holidays)
Paid parental leave
Wellness programs and employee assistance resources
Commuter benefits

Company

Charles River Associates

company-logo
Charles River Associates is a consulting firm specializing in financial, litigation, regulatory, and management consulting.

H1B Sponsorship

Charles River Associates has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (86)
2024 (51)
2023 (48)
2022 (59)
2021 (42)
2020 (48)

Funding

Current Stage
Public Company
Total Funding
$250M
2022-08-22Post Ipo Debt· $250M
1998-04-24IPO

Leadership Team

leader-logo
Paul Maleh
President and CEO
linkedin
leader-logo
Adam Hart
Vice President
linkedin
Company data provided by crunchbase