Digital Forensics Lead - Associate Principal

Charles River Associates; Oakland (CA); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Immigration support

100 hours of training annually

Wellness program

Job summary

Charles River Associates seeks an Associate Principal for its Forensic Services practice to lead digital investigations, manage client engagements, and supervise cross‑functional teams. You will coordinate data collection across MacOS, iOS, Android, Windows and Linux devices, perform forensic analysis, and provide expert testimony when required.

Applicants should have 7–10+ years in cyber intrusion, digital forensics or incident response, with strong leadership and project-management skills and

Qualifications

• Bachelor’s or Master’s degree in a related field preferred
• 7–10+ years in cyber intrusion investigation, digital forensics or incident response
• Experience diagnosing MacOS forensic artifacts (plists, unified logs, FS Events, spotlight metadata)
• Deep knowledge of Mac OS, Windows, Linux and file systems APFS, HFS+, FAT, NTFS
• Experience with forensic software products focused on MacOS and iOS analysis
• Proven ability to lead teams, manage multiple projects and meet deadlines
• Hands-on technical role with experience as testifying expert, digital forensic examiner or incident responder
• Willingness to travel for client projects

Responsibilities

• Lead digital forensic investigations for CRA clients
• Manage onsite data collection and triage across MacOS, iOS, Android, Windows and Linux devices
• Perform forensic analysis of MacOS artifacts and data remediation
• Provide expert witness testimony when needed
• Supervise project teams and ensure quality of work
• Develop opportunities and improve digital forensic capabilities

Skills

Digital forensics

Team leadership

Project management

MacOS knowledge

Travel readiness

Education

Bachelor’s or Master’s in related field

Tools

MacOS Forensics Tools

IOS Analysis Tools

APFS/HFS+/NTFS

Windows/Linux Forensics

Job description

Charles River Associates seeks an Associate Principal for its Forensic Services practice to lead digital investigations, manage client engagements, and supervise cross‑functional teams. You will coordinate data collection across MacOS, iOS, Android, Windows and Linux devices, perform forensic analysis, and provide expert testimony when required.

Applicants should have 7–10+ years in cyber intrusion, digital forensics or incident response, with strong leadership and project-management skills and