(2027 Bachelor's/Master's graduates) Cyber & Forensic Technology Consulting Analyst/Associate

Charles River Associates - Private; Toronto; Hybrid; CAD 134,000 - 141,000; Full time

Benefits offered by this job

Training programs

Comprehensive benefits

Immigration support

Job summary

Charles River Associates in Toronto is seeking a cybersecurity/ digital forensics professional to assist with security investigations, incident response, and forensic analysis.

You will apply programming and data analysis skills (Python, SQL, VBA, Excel, C#) to collect evidence, document chain-of-custody, and draft technical reports for clients.

The role offers hybrid work, ongoing training, and a comprehensive benefits package to support career growth at CRA.

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, CS&E, Digital Forensics, MIS, or related field.
• Strong understanding of operating systems, software, and hardware.
• Ability to conduct detailed forensic investigations of computers and networks.
• Experience with digital forensic tools, memory/network analysis.
• Experience with malware analysis and threat hunting in lab/live environments.
• Knowledge of evidence handling and chain-of-custody procedures.
• Experience drafting technical/investigative reports and communicating findings.
• Familiarity with legal concepts related to intellectual property; automation tooling.

Responsibilities

• Assist with security investigations and data security matters, including breaches and fraud.
• Perform forensic analysis of digital information using standard techniques and tools.
• Apply investigative methods to answer questions about hackers, data theft, and litigation.
• Defensively collect digital evidence and maintain chain-of-custody documentation.
• Leverage programming and database skills (Python, SQL, VBA, Excel, C#).
• Communicate findings to team members, clients, and in written reports.
• Develop new tools with stakeholders to support the evolving forensic landscape.
• Stay current with developments in digital forensics, e-discovery, and incident response.

Skills

Forensic analysis

Digital forensics

Incident response

Python / SQL / VBA

Data privacy & security

Technical reporting

Communication skills

Teamwork

Problem solving

Education

Bachelor’s or Master’s degree candidates graduating December 2026/Summer 2027

Tools

Python

T-SQL

VBA

Excel

C#

Job description

If your background is in Cybersecurity, Computer Science and Engineering, Digital Forensics, Management Information Systems, or Security Information Systems, learn more about CRA!

About Charles River Associates

Charles River Associates is a leading global consulting firm that provides economic, financial, technical, and business management expertise to major law firms, corporations and governments around the world. CRA advises clients on matters pertaining to litigation and regulatory proceedings, and guides corporations through critical business strategy and performance-related issues. Since 1965, clients have engaged CRA for its combination of industry experience and rigorous, fact-based analysis that provide clients with clear, implementable solutions to complex business concerns.

Practices seeking to hire candidates with this profile include (hiring locations listed):

• Forensic Services/Cybersecurity & Digital Forensics (Toronto)
  • Our team supports cyber due diligence, incident response, software/source code analysis, insurance claims, and security transformation.

Learn more about our work by reviewing our Services and Industries on our website.

Position Overview

• Assist with security and privacy investigations in response to data security matters, which may include ongoing breaches and fraud;
• Engage in problem solving and forensic analysis of digital information using standard computer forensic and evidence handling techniques and tools;
• Apply investigative techniques, scientific reasoning, and digital forensic techniques against various systems to answer questions;
• Identify, research, and organize information to determine what a hacker did to a compromised system, whether data was stolen from a company asset, or what data to assess and provide in a litigation;
• Defensibly collect digital evidence and complete chain-of-custody documentation;
• Leverage your programming, model building, and database administration skills (including using Python, T-SQL, VBA, Excel, C#, and/or other programming languages and tools);
• Communicate with team members, clients, and other professionals to share investigative and analytical findings, and assist with the drafting of written reports to summarize procedures performed and findings;
• Work closely with business stakeholders and experts to develop new and innovative tools to support the evolving forensic landscape;
• Stay current with developments in digital forensics, software tools, e-discovery, and incident response.

Check out our blog about a typical day at CRA and how you can make an impact!

Desired Qualifications

• Bachelor’s or Master’s degree candidates graduating December 2026/Summer 2027 with an academic focus in Cybersecurity, Computer Science and Engineering, Digital Forensics, Management Information Systems, Security Information Systems, or related field;
• Strong understanding of computer operating systems, software, and hardware;
• Ability to conduct detailed forensic investigations and analyses of computers, networks, mobile devices, and removable media;
• Experience with conducting digital forensic analyses using commercial and open-source forensic tools, including file system forensics, memory analysis, and network analysis;
• Experience with conducting static/dynamic malware analyses in a lab environment and threat hunting in a live environment;
• Strong understanding of proper evidence handling procedures and chain-of-custody;
• Experience with drafting technical and investigative reports and communicating technical findings;
• High-level familiarity with legal concepts related to intellectual property;
• Experience with utilizing automation tools and scripts to expedite analyses;
• Understanding of incident handling procedures, including preparation, identification, containment, eradication, and recovery-to-protect enterprise environments
• Understanding of common attack techniques used by an adversary on a victim network and how to leverage those techniques to stop further adversary activity
• Individuals with digital forensics/incident response training and/or certifications, including SANS GIAC (GCIA, GCFA, GCFE, GNFA, GCCC, and/or GREM), IACIS (CFCE or CIFR), and/or Guidance Software (EnCE), are preferred but not required;
• Effective written and oral communication skills;
• Demonstrated high level of initiative and leadership;
• Demonstrated attention to detail and commitment to producing accurate, high-quality work;
• Strong teamwork and collaboration capabilities;
• Excellent time management and task prioritization skills;
• Clear and demonstrated interest in consulting through coursework, work experience, activities, or attendance at CRA recruiting events.

Career Growth and Benefits

• CRA’s robust skills development programs, including a commitment to offering 100 hours of training annually through formal and informal programs, encourage you to thrive as an individual and team member. Beginning with research and analysis skill building, training continues with technical training, presentation skills, internal seminars, and career mentoring and performance coaching from an assigned senior colleague. Additional leadership and collaboration opportunities exist through internal firm development activities.
• We offer a comprehensive total rewards program including a superior benefits package, wellness programming to support physical, mental, emotional and financial well-being, and in-house immigration support for foreign nationals and international business travelers.

Work Location Flexibility

CRA creates a work environment that enables our colleagues to benefit from being together in the office to best deliver on our promise of career growth, mentorship and inclusivity. At the same time, we recognize that individuals realize a range of benefits when working from home periodically. We currently expect that individuals spend at least 3 to 4 days a week working in the office (which may include traveling to another CRA office or to client meetings), with specific days determined in coordination with your practice or team.

Our Commitment to Equal Employment Opportunity

Charles River Associates is an equal opportunity employer (EOE). All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, status as a protected veteran, or any other protected characteristic under applicable law.

Salary and other compensation

A good-faith estimate of the annual base salary range for this position is $95,000 – $100,000. Starting pay within this range may vary based on factors such as education level, experience, skills, geographic location, market conditions, and other qualifications of the successful candidate. This position may be eligible for additional bonus incentive compensation.

CRA offers a comprehensive benefits package, subject to eligibility requirements, which includes: medical, dental, and vision insurance; retirement plan with employer match; life and disability insurance; paid time off (vacation, sick leave, holidays); paid parental leave; wellness programs and employee assistance resources; and commuter benefits.