Cyber Forensics & Incident Response Associate

Charles River Associates International; Oakland (CA); Hybrid; USD 93,000 - 105,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) with employer match

Paid Time Off

Parental Leave

Wellness programs

Job summary

Charles River Associates (CRA) invites experienced professionals to join the Forensic Services practice. The role focuses on executing security investigations, providing digital forensic support, drafting reports, and testifying where needed.

Strong data analysis and threat-hunting skills are essential, with exposure to cross-functional teams and client engagement. The position emphasizes rigorous evidence handling, incident response, and continuous learning within a leadership-friendly

Qualifications

• Bachelor’s or Master’s degree with a relevant academic focus (Computer Science, Digital Forensics, Information Security and/or Information Systems)
• 2-4 years of relevant work experience in financial/economic analysis, preferably in a consulting firm
• Digital forensics/incident response training and certifications, including SANS GIAC (GCFA, GCFE, GNFA, GIME), IACIS (CFCE or CIFR), Magnet MCFE, X-ways X-Pert or similar
• Strong understanding of computer operating systems, software and hardware
• Ability to conduct detailed forensic investigations and analysis of computers, networks, mobile devices and removable media
• Experience with conducting digital forensic analysis using commercial and open source forensic tools
• Experience with conducting static/dynamic malware analysis in a lab environment and threat hunting in a live environment
• Experience in collegiate computer security competitions
• Strong understanding of proper evidence handling procedures and chain of custody
• Experience with drafting technical and investigative reports and communicating technical findings
• Experience with utilizing automation tools and scripts to expedite analysis
• Understanding incident handling procedures: preparation, identification, containment, eradication, and recovery
• Understanding of common attack techniques used by an adversary on a victim network and leveraging those techniques to stop further adversary activity

Responsibilities

• Execute security and privacy investigations for CRA clients, in preparation of, and in response to, data security matters
• Provide expert digital forensic support for counsel and clients in support of data security incidents
• Assist in drafting forensic reports, affidavits and testifying as an expert in digital forensics and incident response
• Engage in problem-solving and forensic analysis of digital information using standard evidence handling techniques
• Identify, research, and organize information to assess data availability for effective access and analysis
• Develop familiarity with data input to analysis including threat intelligence and logs

Skills

Python

T-SQL

VBA

Excel

C#

Malware analysis

Forensic investigations

Data analysis

Education

Bachelors in CS

Masters in Digital Forensics

Tools

GIAC GCFA

IACIS CFCE

X-Ways X-Pert

EnCase

Job description

Charles River Associates (CRA) invites experienced professionals to join the Forensic Services practice. The role focuses on executing security investigations, providing digital forensic support, drafting reports, and testifying where needed.

Strong data analysis and threat-hunting skills are essential, with exposure to cross-functional teams and client engagement. The position emphasizes rigorous evidence handling, incident response, and continuous learning within a leadership-friendly