Senior Cyber Incident Response Specialist

Alvarez & Marsal; New York (NY); On-site; USD 85,000 - 120,000; Full time

Job summary

Alvarez & Marsal is seeking a Senior Associate in Global Cyber Risk Services to lead incident response and forensic investigations for diverse clients. You will balance hands-on analysis with client engagement, containing incidents and reconstructing timelines.

You will handle on-site forensics, cloud investigations, and AI-enabled attack scenarios, while contributing to playbooks and mentoring junior analysts.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Digital Forensics, or a related field; or equivalent experience.
• Active GIAC/SANS certification(s) in digital forensics and/or incident response (GCFE, GCIH, GCFA, GNFA, etc.); at least one of GCFE or GCIH.
• Hands-on experience performing host-based forensics on Windows, Linux, and macOS.
• Experience investigating real-world intrusions (ransomware, BEC, cloud account compromise) and producing written findings.
• Proficiency with scripting/programming (Python, PowerShell, Bash) for automation.
• Strong knowledge of MITRE ATT&CK and attacker lifecycle.
• Willingness to travel and work weekends/off-hours as needed.
• Excellent written and verbal communication; ability to interact with stakeholders and Board members.
• Ability to create and maintain technical documentation for enterprise clients.
• Preferred: additional certifications (GRID, GICSP, EnCE, CFCE, CISSP) and familiarity with AI threats.

Responsibilities

• Perform post-breach incident response and digital forensic investigations across Windows, Linux, and macOS to identify IOCs and root cause.
• Support containment, eradication, and recovery activities in coordination with client IT, legal, and insurers.
• Investigate ransomware, BEC, and cloud/SaaS incidents including Microsoft 365 investigations.
• Conduct cloud forensics across AWS, Azure, and GCP; analyze logs and attacker activity.
• Produce memory, disk, network, and log analyses; support malware triage and reverse engineering as needed.
• Examine log sources to identify malicious activity and support threat hunting.
• Investigate AI-enabled incidents, prompt injection, and agentic AI risks.
• Maintain chain of custody and prepare defensible, clear incident reports for executives and regulators.
• Develop IR playbooks and participate in proactive client engagements; mentor junior staff.

Skills

IR & Forensics

Scripting

MITRE ATT&CK

Communication

Travel readiness

Education

Bachelor’s in CS/Cybersecurity/IS/Forensics

Tools

EnCase/FTK/Magnet AXIOM

KAPE

Volatility

EDR tools (CrowdStrike)

Job description

Alvarez & Marsal is seeking a Senior Associate in Global Cyber Risk Services to lead incident response and forensic investigations for diverse clients. You will balance hands-on analysis with client engagement, containing incidents and reconstructing timelines.

You will handle on-site forensics, cloud investigations, and AI-enabled attack scenarios, while contributing to playbooks and mentoring junior analysts.