Senior Associate/Recovery Services (Forensic Services practice)
Core
Lead end-to-end incident response, forensic investigation, and recovery engagements for companies facing fraud, waste, abuse, or non-compliance allegations.
Role type
Senior Associate, Forensic Services (Cybersecurity Incident Response & Recovery)
Builds
Investigation reports, executive briefings, insurance guidance memoranda, and remediation roadmaps for enterprise clients.
Domain
Cybersecurity incident response, digital forensics, and enterprise recovery within the professional services/consulting sector.
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Leading large-scale ransomware recovery or complex intrusion matters, hybrid Microsoft identity architecture direction, scoping and pricing fixed-price engagements, managing counsel and carrier dynamics, executive-grade communication, mentoring consulting teams
Preferred skills
CISSP/GCFA/GCIH/CISM certifications, prior consulting experience at professional services or IR boutique firms, relationships with breach counsel or cyber insurance carriers, litigation or regulatory testimony experience, security assessment methodologies (NIST CSF, CISA SCuBA, CMMC)
Technologies
Active Directory, Entra ID, Conditional Access, privileged access models
Responsibilities
Lead multiple concurrent incident response and recovery engagements owning scope, budget, and delivery quality; Direct technical workstreams across containment, forensics, identity remediation, and infrastructure recovery; Develop evidence-based scoping and level-of-effort models; Serve as primary point of contact for client executives, outside counsel, and insurance carriers; Own final written work product including investigation reports and remediation roadmaps; Review and quality-control consultant deliverables; Mentor and develop consulting associates; Contribute to practice development including methodology standardization and reusable IP; Support business development through relationship management and proposal development
Seniority
Senior, hands-on IC with team leadership
