Consulting Associate/Cybersecurity & Incident Response (Forensic Services practice)
Core
Executing security and privacy investigations, digital forensics, and incident response for clients facing fraud, waste, abuse, or data breaches.
Role type
Consulting Associate, Cybersecurity & Incident Response (Forensic Services)
Builds
Forensic reports, affidavits, expert testimony, and technical assessments for legal counsel and corporate clients.
Domain
Forensic Services / Cybersecurity / Legal Consulting
Deliverable
client delivery
Required skills
Digital forensics analysis, malware analysis, incident response, threat hunting, evidence handling, data analysis, programming (Python, T-SQL, VBA, C#), network analysis, memory forensics, timeline analysis, adversarial technique recognition
Preferred skills
SANS GIAC certifications (GCFA, GCFE, GNFA, GIME), IACIS certifications (CFCE, CIFR), Magnet MCFE, X-ways X-Pert, collegiate computer security competition experience
Technologies
Python, T-SQL, VBA, Excel, C#, forensic tools, memory analysis tools, network protocol analyzers
Responsibilities
Execute security and privacy investigations for data security matters; provide expert digital forensic support for data breaches or fraud; draft forensic reports and testify as an expert; forensically acquire data and images from hosts; detect and hunt malware across enterprise environments; create Indicators of Compromise (IOCs); track adversary activity via timeline analysis; assess cybersecurity controls against frameworks (NIST CSF, HIPAA, ISO 27001, SOC2, NERC-CIP)
Seniority
Associate, 3-5 years experience