Cyber & Forensic Technology Consulting Analyst/Associate

About the Role

Charles River Associates (CRA) is a leading global consulting firm. CRA advises clients on litigation, regulatory proceedings, and critical business strategy and performance-related issues. Practices hiring candidates with this profile include Forensic Services/Cybersecurity & Digital Forensics and Forensic Services/E-Discovery.

Position Overview

• Assist with security and privacy investigations in response to data security matters, including breaches and fraud.
• Engage in problem-solving and forensic analysis of digital information using standard computer forensic and evidence handling techniques and tools.
• Apply investigative techniques, scientific reasoning, and digital forensic techniques against various systems.
• Identify, research, and organize information to determine adversary actions on compromised systems, data exfiltration, or data for litigation assessment.
• Defensibly collect digital evidence and complete chain-of-custody documentation.
• Leverage programming, model building, and database administration skills using Python, T-SQL, VBA, Excel, C#, and/or other programming languages and tools.
• Communicate investigative and analytical findings to team members, clients, and other professionals, and assist with drafting written reports.
• Work closely with business stakeholders and experts to develop new tools for the evolving forensic landscape.
• Stay current with developments in digital forensics, software tools, e-discovery, and incident response.

Requirements & Tech Stack

• Bachelor’s or Master’s degree candidates graduating December 2026/Summer 2027 with an academic focus in Cybersecurity, Computer Science and Engineering, Digital Forensics, Management Information Systems, Security Information Systems, or a related field.
• Strong understanding of computer operating systems, software, and hardware.
• Ability to conduct detailed forensic investigations and analyses of computers, networks, mobile devices, and removable media.
• Experience with conducting digital forensic analyses using commercial and open-source forensic tools, including file system forensics, memory analysis, and network analysis.
• Experience with conducting static/dynamic malware analyses in a lab environment and threat hunting in a live environment.
• Strong understanding of proper evidence handling procedures and chain-of-custody.
• Experience with drafting technical and investigative reports and communicating technical findings.
• High-level familiarity with legal concepts related to intellectual property.
• Experience with utilizing automation tools and scripts to expedite analyses.
• Understanding of incident handling procedures, including preparation, identification, containment, eradication, and recovery.
• Understanding of common attack techniques used by an adversary on a victim network and how to leverage those techniques to stop further adversary activity.
• Individuals with digital forensics/incident response training and/or certifications, including SANS GIAC (GCIA, GCFA, GCFE, GNFA, GCCC, and/or GREM), IACIS (CFCE or CIFR), and/or Guidance Software (EnCE), are preferred but not required.
• Effective written and oral communication skills.
• Demonstrated high level of initiative and leadership.
• Demonstrated attention to detail and commitment to producing accurate, high-quality work.
• Strong teamwork and collaboration capabilities.
• Excellent time management and task prioritization skills.
• Clear and demonstrated interest in consulting through coursework, work experience, activities, or attendance at CRA recruiting events.

To Apply

• Resume
• Cover letter
• Transcript (unofficial)

Note: This role is for bachelor's or master's degree program graduates. For MBA/PhD programs or candidates with existing work experience, please visit the CRA Careers site.