HHiring Reality
← Charles River Associates

Consulting Associate/Recovery Services (Forensic Services practice)

Charles River Associates
Location
Boston, MA, United States; Chicago, IL, United States; Dallas, Texas, United States; Houston, Texas, United States; New York, NY, United States; Oakland, CA, United States; Washington, DC, United States
Posted
1 month ago
Department
Forensic Services
Salary
$100,000 - $126,500
What they actually want (must-haves)
  • 3-5 years of hands-on experience in incident response, digital forensics, or a closely related security engineering role
  • Demonstrated experience responding to ransomware, BEC, or intrusion matters in enterprise environments
  • Deep working knowledge of Active Directory and Entra ID, including attack paths and hardening controls
  • Proficiency with at least one enterprise EDR platform and its response tooling
  • Strong scripting ability in PowerShell; Python a plus
  • Excellent written communication; able to produce report-quality prose without heavy editing
Nice to have
  • Industry certifications such as GCFA, GCIH, GNFA, GCFE, EnCE, CISSP, or equivalent
  • Experience with virtualization forensics and backup platform recovery
  • Familiarity with Google Workspace forensics and administrative tooling
  • Experience working under legal privilege with outside counsel and cyber insurance carriers
  • Exposure to OT/ICS environments or regulated industries (healthcare, financial services)
What the job really is

The Consulting Associate in CRA's Forensic Services practice is responsible for executing digital forensic collection and analysis, particularly in incident response and recovery engagements. This role involves leading technical recovery efforts in ransomware cases, analyzing business email compromise incidents, and developing automation tools while producing clear forensic reports and communicating with clients and legal counsel.

Benefits
  • 100 hours of training annually through formal and informal programs
  • Comprehensive total rewards program including a superior benefits package
  • Wellness programming to support physical, mental, emotional and financial well-being
  • In-house immigration support for foreign nationals and international business travelers
  • 401(k) retirement plan with employer match
  • Paid time off (vacation, sick leave, holidays)
Things to weigh
  • Incident response work involves surge periods, including nights and weekends during active engagements
  • Salary range provided is a good-faith estimate and may vary based on various factors
Job score4.2/5
Benefits4/5
Freshness3/5
Career value4/5
Role clarity5/5
Pay transparency5/5

Applying to Charles River Associates?

See how your résumé matches this role — and tailor it from what actually gets interviews.

Calculate resume scoreGenerate resume to apply
Job Link →