Forensic Incident Response Associate, Recovery Services

Charles River Associates; United States; Hybrid; USD 100,000 - 127,000; Full time

Benefits offered by this job

Medical benefits

Immigration support

Training program

Job summary

Charles River Associates (CRA) is seeking a Consulting Associate for Forensic Services to lead incident response and recovery engagements across Windows, Linux, VMware, and cloud environments.

You will work with client IT teams and counsel, build automation with PowerShell, Graph SDK and Python, and deliver defensible forensic reports under tight timelines.

The role requires 3-5 years in IR/forensics and willingness to work nights/weekends during active engagements.

Qualifications

• 3-5 years of hands-on incident response, digital forensics, or a closely related security engineering role.

Responsibilities

• Execute digital forensic collection and analysis across Windows, Linux, virtualized (VMware, Hyper-V), and cloud (Azure, M365, Google Workspace) environments.

Skills

Incident response

Digital forensics

Ransomware response

Active Directory

Entra ID

EDR tooling

PowerShell

Python

Written communication

Independence

Education

Bachelor's degree

Tools

CrowdStrike Falcon

Graph SDK

Job description

Charles River Associates (CRA) is seeking a Consulting Associate for Forensic Services to lead incident response and recovery engagements across Windows, Linux, VMware, and cloud environments.

You will work with client IT teams and counsel, build automation with PowerShell, Graph SDK and Python, and deliver defensible forensic reports under tight timelines.

The role requires 3-5 years in IR/forensics and willingness to work nights/weekends during active engagements.