Description
Charles River Associates (CRA) is a leading global consulting firm that provides independent economic and financial analysis behind litigation matters, guides businesses through critical strategy and operational issues to become more profitable, and advises governments on the economic impact of policies and regulations.
We are looking for a Consulting Associate/Cybersecurity & Incident Response to join our Forensic Services practice in Toronto, ON, Canada. The successful candidate will have 3-5 years of experience in cyber intrusion investigation or incident response analysis, with a strong understanding of computer operating systems, software, and hardware.
Responsibilities:
- Execute security and privacy investigations for CRA clients
- Provide expert digital forensic support for counsel and clients
- Assist in drafting forensic reports and testify as an expert
- Engage in problem-solving and forensic analysis of digital information
- Present tactical and strategic intelligence about threat groups
- Create custom analytic products based on conclusions and judgments
- Provide timely support for clients' incident response and threat intelligence teams
- Perform technical analysis on malicious or suspicious artifacts
- Identify, research, and organize information to assess data appropriateness and sufficiency
- Develop familiarity with data that serves as input to analysis
- Recognize relationships among multiple sources and types of information
- Program, model build, and administer databases
- Ensure reliability of analysis and risk management
- Forensically acquire data and images from identified hosts
- Identify artifact and evidence locations
- Detect and hunt unknown live, dormant, and custom malware
- Create Indicators of Compromise (IOCs)
- Track adversary activity
- Understand evidence needed to determine malware type
- Identify lateral movement and pivots within client enterprises
- Use physical memory analysis tools
- Examine traffic using common network protocols
- Identify and track malware beaconing
- Provide technical assessment and guidance to clients
- Participate in practice-building activities
Desired Qualifications:
- 3-5 years of experience in cyber intrusion investigation or incident response analysis
- Strong understanding of computer operating systems, software, and hardware
- Ability to conduct detailed forensic investigations and analysis
- Experience with digital forensic analysis using commercial and open-source forensic tools
- Experience with conducting static/dynamic malware analysis
- Experience in collegiate computer security competitions
- Strong understanding of proper evidence handling procedures
- Experience with drafting technical and investigative reports
- Experience with utilizing automation tools and scripts
- Understanding incident handling procedures
- Understanding of common attack techniques used by adversaries
- Experience with vulnerability management, penetration testing, scripting, programming, and reverse engineering
- Exposure to various malware families
- Proficiency with Threat Intelligence Platforms and analyst software tools
- Digital forensics/incident response training and certifications
Career Growth and Benefits:
- Robust skills development programs
- Commitment to offering 100 hours of training annually
- Comprehensive total rewards program
- Superior benefits package
- Wellness programming
- In-house immigration support
Work Location Flexibility:
- Expect to spend at least 3-4 days a week working in the office
Salary and other compensation:
- Good-faith estimate of annual base salary range: CAD$120,000 - $140,000