Digital Forensics and Incident Response Advisory - Manager

Department Advisory /*generated inline style */ Location(s) Tysons Corner /*generated inline style */ State Virginia /*generated inline style */ Function Risk Advisory /*generated inline style *, You will be part of the incident response and forensics team for complex cybersecurity incidents, including advanced persistent threats (APTs), ransomware, data breaches, and insider threats. You will perform computer/digital forensics work on real investigations using various digital forensic tools and techniques. You will also lead and mentor staff along the way. You will assist in developing forensic tools and techniques and support other projects in the Cybersecurity and Digital Trust practice.

As you settle into the role, you will help build and lead the incident response team and assist with developing new business. Occasional domestic and possibly international travel may be involved, sometimes with short notice. Government security clearance is not required but a private background check and screening will be conducted.

Below are specific examples of your responsibilities. You would perform these activities in our office and at client locations within the US and occasionally internationally.

Create forensic images of computers, cell phones and other electronic devices under investigation Perform deep-dive forensic analysis of endpoints (Windows, macOS, Linux), servers, and mobile devices to determine the root cause, scope, and impact of an intrusion. This includes disk, memory, and artifact analysis. Serve as the lead on incidents, managing resources, presenting findings and effectively advising the client. Monitor your own work and that of your team on assignments, ensuring high quality and value is delivered to the client. Assist in briefing clients and attorneys Mentor junior analysts, providing technical guidance, and contributing to the overall skill development of the team. Remediate impacted systems though building computers/servers, configuring servers, firewalls and other key network infrastructure Monitor servers and network infrastructure for anomalies and assist in diagnosis. Lead vulnerability scanning and remediation efforts Conduct and lead cybersecurity assessments using various industry benchmarks and frameworks Assist in developing new service lines and bring them to market.

6+ years of experience in hands-on technology roles, with a proven track record of service delivery. 4+ years of experience in digital forensics and incident response Proficiency with DFIR tools such as KAPE, Velociraptor, Volatility, Elasticsearch, SentinelOne, Falcon, EnCase and others. Mastery of operating system internals and forensic artifacts (Windows, Linux, or macOS) Deep understanding of M365 security and forensics analysis techniques Problem solving skills and ability to learn quickly Strong business writing and communication skills Strong work ethic and desire to meet client demands The ability to multi-task in a dynamic team environment Ability to author detailed, high-quality technical reports for various audiences, including technical teams, executive leadership, and legal counsel. Clearly articulate complex technical findings to non-technical stakeholders. Willingness to assist on non-DFIR engagements Bachelor's degree in Computer Science, Engineering, Information Technology, Information Systems, or a related field required. Relevant industry certifications (e.g., CISSP, GCFE, EnCE, ACE, CEH) are a plus. Experience administering Microsoft Windows, Windows Server and Microsoft 365 environments Experience with AWS security & incident response

3.53.5 out of 5 stars Tysons Corner, VA Hybrid work $100,000 - $180,000 a year, Pulled from the full job description

• Parental leave
• Paid time off
• Life insurance, Join a diverse team of fun-loving, energetic professionals with decades of experience managing security, technology, and privacy risks in nearly every industry sector who have a passion for creating tailored solutions that go beyond technology offerings or tools and help clients reduce cost of compliance while mitigating risks.

WHY COHNREZNICK?

At CohnReznick, we're united by a common mission to create opportunity, value, and trust for our clients, our people, and our communities. Whether it's working alongside your peers to solve a client challenge, or volunteering together at the local food bank, there are so many ways to find your "why" at the firm.

We believe it's important to balance work with everyday life - and make time for enjoyment and fun. We invest in a robust Total Rewards package that includes everything from generous PTO, a flexible work environment, expanded parental leave, extensive learning & development, and even paid time off for employees to volunteer., In Virginia, the salary range for a Manager is $100,000 to $180,000. Salary is one component of the CohnReznick total rewards package, which includes a discretionary performance bonus, generous paid time off, expanded, and inclusive parental benefits, and access to best-in-class learning and development platforms, to name a few. To learn more about life at CohnReznick, visit Life at CohnReznick.

As CohnReznick grows, so do our career opportunities. As one of the nation's top professional services firms, CohnReznick creates rewarding careers in advisory, assurance, and tax with team members who value innovation and collaboration in everything they do! CohnReznick helps organizations optimize performance, manage risk, and maximize value through CohnReznick LLP (assurance services) and CohnReznick Advisory LLC (advisory and tax services). Together, the firm provides leaders with deep industry knowledge and relationships, solutions to address clients' unique business goals and risks, and insight on how emerging market forces can drive opportunity. With offices nationwide, the firm serves organizations around the world as an independent member of Nexia. We currently have an exciting career opportunity for a Manager to join the Cybersecurity and Digital Trust team in our Risk Advisory practice. CohnReznick is a hybrid firm and most of our professionals are located within a commutable distance to one of our offices. This position is considered hybrid which means team members are expected to be thoughtful and intentional in how they create opportunities for in-person collaboration. While the cadence of in-office presence is determined at the team level, our professionals are encouraged to be in the office/together in person on average 3 days a week., "CohnReznick" is the brand name under which CohnReznick LLP and CohnReznick Advisory LLC and their respective subsidiaries provide professional services. CohnReznick LLP and CohnReznick Advisory LLC (and their respective subsidiaries) practice in an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law, regulations, and professional standards. CohnReznick LLP is a licensed CPA firm that provides attest services to its clients. CohnReznick Advisory LLC provides tax and business consulting services to its clients. CohnReznick Advisory LLC and its subsidiaries are not licensed CPA firms.