Digital Forensics and Incident Response Advisory - Manager

CohnReznick• , VA

19d•Onsite

About The Position

As CohnReznick grows, so do our career opportunities. As one of the nation’s top professional services firms, CohnReznick creates rewarding careers in advisory, assurance, and tax with team members who value innovation and collaboration in everything they do! CohnReznick helps organizations optimize performance, manage risk, and maximize value through CohnReznick LLP (assurance services) and CohnReznick Advisory LLC (advisory and tax services). Together, the firm provides leaders with deep industry knowledge and relationships, solutions to address clients’ unique business goals and risks, and insight on how emerging market forces can drive opportunity. With offices nationwide, the firm serves organizations around the world as an independent member of Nexia. We currently have an exciting career opportunity for a Manager to join the Cybersecurity and Digital Trust team in our Risk Advisory practice. Due to the nature of this role, this position is considered 100% on-site which means it must be consistently performed at an assigned CohnReznick office location and requires daily commute to the office location. YOUR TEAM. Join a diverse team of fun-loving, energetic professionals with decades of experience managing security, technology, and privacy risks in nearly every industry sector who have a passion for creating tailored solutions that go beyond technology offerings or tools and help clients reduce cost of compliance while mitigating risks.

Requirements

6+ years of experience in hands-on technology roles, with a proven track record of service delivery.
4+ years of experience in digital forensics and incident response.
Proficiency with DFIR tools such as KAPE, Velociraptor, Volatility, Elasticsearch, SentinelOne, Falcon, EnCase and others.
Mastery of operating system internals and forensic artifacts (Windows, Linux, or macOS).
Deep understanding of M365 security and forensics analysis techniques.
Problem solving skills and ability to learn quickly.
Strong business writing and communication skills.
Strong work ethic and desire to meet client demands.
The ability to multi-task in a dynamic team environment.
Ability to author detailed, high-quality technical reports for various audiences, including technical teams, executive leadership, and legal counsel.
Clearly articulate complex technical findings to non-technical stakeholders.
Willingness to assist on non-DFIR engagements.
Bachelor's degree in Computer Science, Engineering, Information Technology, Information Systems, or a related field required.
Experience administering Microsoft Windows, Windows Server and Microsoft 365 environments.
Experience with AWS security & incident response.

Nice To Haves

Relevant industry certifications (e.g., CISSP, GCFE, EnCE, ACE, CEH) are a plus.

Responsibilities

Be part of the incident response and forensics team for complex cybersecurity incidents, including advanced persistent threats (APTs), ransomware, data breaches, and insider threats.
Perform computer/digital forensics work on real investigations using various digital forensic tools and techniques.
Lead and mentor staff.
Assist in developing forensic tools and techniques.
Support other projects in the Cybersecurity and Digital Trust practice.
Help build and lead the incident response team.
Assist with developing new business.
Create forensic images of computers, cell phones and other electronic devices under investigation.
Perform deep-dive forensic analysis of endpoints (Windows, macOS, Linux), servers, and mobile devices to determine the root cause, scope, and impact of an intrusion. This includes disk, memory, and artifact analysis.
Serve as the lead on incidents, managing resources, presenting findings and effectively advising the client.
Monitor own work and that of the team on assignments, ensuring high quality and value is delivered to the client.
Assist in briefing clients and attorneys.
Mentor junior analysts, providing technical guidance, and contributing to the overall skill development of the team.
Remediate impacted systems though building computers/servers, configuring servers, firewalls and other key network infrastructure.
Monitor servers and network infrastructure for anomalies and assist in diagnosis.
Lead vulnerability scanning and remediation efforts.
Conduct and lead cybersecurity assessments using various industry benchmarks and frameworks.
Assist in developing new service lines and bring them to market.