Senior Cyber Incident Response Lead

Charles River Associates; Houston (TX); Hybrid; USD 130,000 - 153,000; Full time

Benefits offered by this job

Comprehensive benefits package

In-house immigration support

Job summary

Charles River Associates is seeking a Senior Associate in its Forensic Services practice to lead incident response and recovery engagements from intake to final report. The role includes directing technical workstreams, scoping engagements, and mentoring junior staff, with exposure to high-stakes matters and executive communication.

The position requires 5-7+ years in cybersecurity incident response or forensics, plus leadership experience and strong client-facing skills.

Qualifications

• 5-7+ years in cybersecurity incident response or forensics.
• Experience leading large ransomware recovery or complex intrusion matters.
• Executive-grade written and verbal communication; able to brief boards/CISOs.

Responsibilities

• Lead multiple incident response, forensic investigation, and recovery engagements.
• Direct workstreams across containment, forensics, identity remediation, and infrastructure recovery.
• Develop scoping and level-of-effort models for fixed-price engagements.
• Serve as primary client contact for executives, counsel, and insurance carriers.
• Own final written work products: investigation reports and remediation roadmaps.
• Review and quality-control consultant deliverables for technical accuracy.
• Mentor and develop associates; provide engagement-level coaching.
• Support business development through carrier and law firm relationships.

Skills

Incident response

Digital forensics

Enterprise recovery

Executive communication

Education

CISSP/GCFA/CISM GCFA

Advanced degree in relevant field

Tools

Active Directory

Entra ID

Conditional Access

Job description

Charles River Associates is seeking a Senior Associate in its Forensic Services practice to lead incident response and recovery engagements from intake to final report. The role includes directing technical workstreams, scoping engagements, and mentoring junior staff, with exposure to high-stakes matters and executive communication.

The position requires 5-7+ years in cybersecurity incident response or forensics, plus leadership experience and strong client-facing skills.