Digital Forensics and Incident Response - Senior Associate

CohnReznick• , VA

23h•Onsite

About The Position

As CohnReznick grows, so do our career opportunities. As one of the nation’s top professional services firms, CohnReznick creates rewarding careers in advisory, assurance, and tax with team members who value innovation and collaboration in everything they do! CohnReznick helps organizations optimize performance, manage risk, and maximize value through CohnReznick LLP (assurance services) and CohnReznick Advisory LLC (advisory and tax services). Together, the firm provides leaders with deep industry knowledge and relationships, solutions to address clients’ unique business goals and risks, and insight on how emerging market forces can drive opportunity. With offices nationwide, the firm serves organizations around the world as an independent member of Nexia. We currently have an exciting career opportunity for an Senior Associate to join the Digital Forensics and Incident Response team in our Cybersecurity and Technology Risk Advisory practice. Due to the nature of this role, this position is considered on-site which means it must be consistently performed at an assigned CohnReznick office location and requires daily commute to the office location. YOUR TEAM. Join a diverse team of fun-loving, energetic professionals with decades of experience managing security, technology, and privacy risks in nearly every industry sector who have a passion for creating tailored solutions that go beyond technology offerings or tools and help clients reduce cost of compliance while mitigating risks. WHY COHNREZNICK? At CohnReznick, we’re united by a common mission to create opportunity, value, and trust for our clients, our people, and our communities. Whether it’s working alongside your peers to solve a client challenge, or volunteering together at the local food bank, there are so many ways to find your “why” at the firm. We believe it’s important to balance work with everyday life – and make time for enjoyment and fun. We invest in a robust Total Rewards package that includes everything from generous PTO, a flexible work environment, expanded parental leave, extensive learning & development, and even paid time off for employees to volunteer. OUR ROLE. Responsibilities include but not limited to: You will be part of our Cybersecurity, Technology Risk and Privacy team utilizing your technical knowledge to work as part of our client services team on various stages of engagements or projects. You will be part of the incident response and forensics team for complex cybersecurity incidents, including advanced persistent threats (APTs), ransomware, data breaches, and insider threats. You will perform computer/digital forensics work on real investigations using various digital forensic tools and techniques. You will assist in developing forensic tools and techniques. You will also support other projects in the Cybersecurity, Technology Risk and Privacy practice. The job involves working in varying environments with occasional travel out of town (20% average), sometimes with short notice. Occasional domestic and possibly international travel may be involved. Below are specific examples of your responsibilities. You would perform these activities in our office and at client locations within the US and occasionally internationally. Training in various forensic tools and techniques will be provided if needed.

Requirements

1-2 years providing hands on digital forensics and incident response
Additional 2-3 years professional experience providing IT Support, systems engineering and system administration (preferably in a Managed IT Services environment).
Proficiency with DFIR tools such as KAPE, Velociraptor, Volatility, Elasticsearch, SentinelOne, Falcon, EnCase and others.
Mastery of operating system internals and forensic artifacts (Windows, Linux, or macOS)
Deep understanding of M365 security and forensics analysis techniques
Problem solving skills and ability to learn quickly
Strong business writing and communication skills
Strong work ethic and desire to meet client demands
The ability to multi-task in a dynamic team environment
Ability to author detailed, high-quality technical reports for various audiences, including technical teams, executive leadership, and legal counsel.
Clearly articulate complex technical findings to non-technical stakeholders.
Willingness to assist on non-DFIR engagements

Nice To Haves

4-year degree in computer science, cyber security, or other technical background or equivalent
Experience with Microsoft Windows, Windows Server and Microsoft 365 environments
Experience with AWS security & incident response
Relevant security and/or cloud certifications (Azure, AWS)

Responsibilities

Create forensic images of computers, cell phones and other electronic devices under investigation
Perform deep-dive forensic analysis of endpoints (Windows, macOS, Linux), servers, and mobile devices to determine the root cause, scope, and impact of an intrusion. This includes disk, memory, and artifact analysis.
Assist in briefing clients and attorneys
Mentor junior analysts, providing technical guidance, and contributing to the overall skill development of the team.
Remediate impacted systems though building computers/servers, configuring servers, firewalls and other key network infrastructure
Monitor servers and network infrastructure for anomalies and assist in diagnosis.
Lead vulnerability scanning and remediation efforts
Conduct and lead cybersecurity assessments using various industry benchmarks and frameworks
Support IT Audits and provide subject matter expertise to assessment and attestation engagements.