Responsibilities
- Conduct security and privacy investigations to support clients before and during data security incidents, including breach detection, threat analysis, incident response, and malware examination
- Deliver expert digital forensic assistance to legal counsel and clients in cases involving data breaches or fraudulent activity
- Support the preparation of forensic reports, affidavits, and provide expert testimony in digital forensics and incident response
- Apply problem-solving techniques and digital forensic methods using standard evidence handling procedures and forensic software tools
- Identify, research, and organize data to evaluate its relevance and completeness for effective digital analysis
- Gain proficiency with data inputs used in analysis, such as threat intelligence, system logs, and contextual indicators
- Analyze relationships across diverse data sources to enhance investigative accuracy and insight
- Perform programming, model development, and database management using languages and tools including Python, T-SQL, VBA, Excel, and C#
- Maintain analytical integrity and manage risk through quality assurance practices and thorough documentation
- Forensically collect data and disk images from targeted systems to uncover evidence of compromise through disk, file, memory, and log examination
- Locate digital artifacts and evidence to answer key investigative questions about execution events, file access, data exfiltration, anti-forensic tactics, and system usage by attackers
- Detect and investigate unknown, inactive, and custom malware across enterprise networks
- Develop Indicators of Compromise (IOCs) from forensic findings to improve threat intelligence and incident response capabilities
- Reconstruct adversary actions on a system with second-by-second timeline analysis
- Determine the type of malware used in attacks—such as rootkits, backdoors, and Trojans—and recommend appropriate defensive and response strategies
- Trace lateral movement and system pivoting within enterprise environments to map how attackers evade detection
- Use memory analysis tools to uncover attacker activities on compromised hosts and identify other systems used as access points across the network
- Analyze network traffic using standard protocols to detect suspicious patterns or actions requiring deeper investigation
- Track malware communication with command and control (C2) servers through memory forensics, registry analysis, and network connection reviews
- Evaluate client cybersecurity controls against recognized standards such as NIST CSF 2.0, HIPAA, ISO 27001/27002, SOC2, and NERC-CIP to provide technical assessments and guidance
- Engage in practice development through recruitment and training initiatives
Compensation
Estimated annual base salary range is $100,000 - $126,500, with variation based on education, experience, skills, location, and qualifications; position may qualify for bonus incentives; includes comprehensive benefits such as medical, dental, vision, 401(k) with employer match, life and disability insurance, paid time off, parental leave, wellness programs, employee assistance, and commuter benefits
Work Arrangement
Hybrid
Other
- Resume must include current address, personal email, and phone number
- Cover letter required, detailing interest in the organization and alignment of the role with candidate’s career goals
- Expectation to work 3 to 4 days per week in the office, with schedule coordinated by team
- Comprehensive total rewards program featuring strong benefits, wellness initiatives, and immigration support for foreign nationals and international business travelers
- Robust skills development with 100 hours of annual training through formal and informal programs
- Training covers research and analysis, technical skills, presentation techniques, internal seminars, career mentoring, and performance coaching
- Opportunities for leadership and collaboration through internal firm development activities
- Equal opportunity employer—employment decisions made without regard to race, color, religion, sex, national origin, age, disability, veteran status, or other protected characteristics
