Associate Principal​/Cybersecurity & Incident Response; Forensic Services practice

Position: Associate Principal/Cybersecurity & Incident Response (Forensic Services practice) Overview Associate Principal/Cybersecurity & Incident Response (Forensic Services practice) at Charles River Associates (CRA). CRA is a leading global consulting firm providing independent economic and financial analysis behind litigation matters, and guidance on strategy and regulations. This role is within CRA’s Forensic Services practice, which supports integrity and responds to fraud, waste, abuse, misconduct, and non-compliance with cross-trained forensic teams. Responsibilities • Lead security and privacy investigations for CRA clients, including ongoing breach detection, threat analysis, incident response, and malware analysis. • Perform forensic analysis of digital information using standard computer forensics and evidence handling techniques and tools. • Serve as primary client contact for all incident response activities involving malicious code, unauthorized access, and inappropriate usage. • Supervise project team execution, lead quality assurance efforts, and oversee work products. • Evaluate and implement new tools and processes to improve incident response capabilities. • Maintain relationships with local, state, and federal law enforcement agencies to assist in criminal matters. • Encourage a leveraged team environment, actively recruit and retain staff, and manage team morale. • Participate in and lead business development by building client relationships, drafting proposals, participating in pitches, and demonstrating firm capabilities. • Provide technical assessment and guidance on the adequacy of cyber security controls against frameworks such as NIST CSF 2.0, HIPAA, ISO 27001/27002, SOC2, NERC-CIP. • Assist with team recruiting and training as needed. • Work under the direction of counsel on investigations. Qualifications • Bachelor’s or Master’s degree in a related field preferred, but can be waived with sufficient experience. • 7-10+ years’ experience in cyber intrusion investigation, digital forensics, or incident response analysis. • Ability to effectively lead teams, prioritize projects, and meet deadlines. • Hands-on technical experience as a testifying expert, incident responder, network or malware analyst. • Experience leading data analytics engagements and implementing technology-based best practices. • Working knowledge of computer hardware, operating systems, networks, email systems, mobile devices, IT security or incident response. • Deep knowledge of networking (TCP/IP, protocols), operating systems (Windows/ • nix), and web technologies. • Willing and able to travel for client projects. To Apply To be considered for a position in the United States, please provide: • Resume – include current address, personal email, and telephone number. • Cover letter describing interest in CRA and how the role matches your goals. For international locations, visit CRA’s Careers site to view and apply for available jobs. Career Growth and Benefits • Robust skills development with ongoing training and leadership opportunities. • Comprehensive total rewards program including benefits, wellness programs, and immigration support for foreign nationals and international travelers. Work Location Flexibility CRA supports a balance of in-office and remote work. Typically 3–4 days per week in the office, with specific arrangements determined in coordination with the practice or team. Additional remote options may be available during certain periods. Our Commitment to Diversity CRA is an equal opportunity employer (EOE/AAE). We strive for a fair and inclusive hiring process and celebrate diversity. The District of Columbia requires a good-faith wage estimate for this role for work in the Washington, DC office. The estimated base wage range is $140,000 - $170,000; total compensation may include benefits and bonus. #J-18808-Ljbffr Apply tot his job