Senior Cyber Incident Response & Forensics Associate

Alvarez & Marsal; Los Angeles (CA); On-site; USD 85,000 - 120,000; Full time

Benefits offered by this job

Healthcare plans

401(k) retirement savings

Paid time off

Job summary

Alvarez & Marsal (A&M) is seeking a Senior Associate for Cyber Incident Response and Forensics within its Global Cyber Risk Services. You will lead and support IR engagements, perform host-based forensics, and deliver timelines and findings to clients and executives.

The role involves on-site investigations, cloud forensics, and collaboration with legal, insurers, and IT teams. Travel and sometimes off-hours work are required as incidents demand.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Digital Forensics, or related field.
• Active GIAC/SANS certifications (GCFE or GCIH required).
• Experience performing host-based forensics and IR investigations.
• Familiarity with SIEMs and EDR tools; scripting for automation a plus.
• Willingness to travel and work nonstandard hours.

Responsibilities

• Perform post-breach incident response and digital forensics investigations.
• Support containment, eradication, and recovery activities with client teams.
• Investigate ransomware, business email compromise, and cloud account compromises.
• Conduct cloud forensics across AWS, Azure, and GCP.
• Produce clear written reports and timelines for stakeholders.
• Support proactive IR plan development and tabletop exercises.
• Develop tools, scripts, and documentation for internal use.

Skills

Strong communication

Client-facing experience

Team leadership

Adaptability

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Digital Forensics, or related field

GIAC/SANS certifications in digital forensics/IR (GCFE, GCIH, GCFA, GNFA, etc.)

Tools

EnCase

FTK

Magnet AXIOM

X-Ways

SIFT

Splunk

Job description

Alvarez & Marsal (A&M) is seeking a Senior Associate for Cyber Incident Response and Forensics within its Global Cyber Risk Services. You will lead and support IR engagements, perform host-based forensics, and deliver timelines and findings to clients and executives.

The role involves on-site investigations, cloud forensics, and collaboration with legal, insurers, and IT teams. Travel and sometimes off-hours work are required as incidents demand.