Senior Forensic Incident Response Lead

Charles River Associates; New York (NY); Hybrid; USD 130,000 - 153,000; Full time

Job summary

Charles River Associates (CRA) is a global consulting firm delivering independent economic and financial analysis for litigation, strategy, and policy impact. The Senior Associate in our Forensic Services practice leads end-to-end incident response and recovery engagements, guiding scoping, directing teams, and presenting findings to executives and counsel.

You will own matters from intake through final report, manage client and carrier relationships, and help grow the practice with reusable

Qualifications

• 5-7+ years in cyber IR, forensics, or recovery, incl. 3+ years leading engagements
• Led large ransomware recoveries or complex intrusions in enterprise, multi-site
• Strong command of hybrid Microsoft identity (AD, Entra ID, CA, PIM) to direct technical work
• Experience handling legal privilege and counsel/carrier dynamics
• Ability to scope and price engagements accurately, manage fixed-price delivery
• Executive written/verbal communication; briefing boards, GCs, CISOs

Responsibilities

• Lead multiple incident response and recovery engagements with scope, budget, staffing, and delivery quality
• Direct technical workstreams across containment, forensics, remediation, and infrastructure recovery
• Develop scoping and level-of-effort models for fixed-price recovery engagements
• Serve as primary contact for client executives, outside counsel, and insurance carriers
• Own final written work products: investigation reports, executive briefings, memoranda, roadmaps
• Review and quality-control consultant deliverables for technical accuracy
• Mentor associates and contribute to practice development and IP
• Support business development through carrier and law firm relationships

Skills

Cybersecurity IR

Lead engagements

Identity architecture

Legal privilege

Pricing engagements

Executive communication

Education

Certifications: CISSP, GCFA, GCIH, CISM

Advanced degree in a relevant field

Job description

Charles River Associates (CRA) is a global consulting firm delivering independent economic and financial analysis for litigation, strategy, and policy impact. The Senior Associate in our Forensic Services practice leads end-to-end incident response and recovery engagements, guiding scoping, directing teams, and presenting findings to executives and counsel.

You will own matters from intake through final report, manage client and carrier relationships, and help grow the practice with reusable