(2026 Bachelor's/Master's graduates) Cyber & Forensic Technology Consulting Analyst/Associate

If your background is in Cybersecurity, Computer Science and Engineering, Digital Forensics, Management Information Systems, or Security Information Systems, learn more about CRA!

About Charles River Associates

Charles River Associates is a leading global consulting firm that provides economic, financial, technical, and business management expertise to major law firms, corporations and governments around the world. CRA advises clients on matters pertaining to litigation and regulatory proceedings, and guides corporations through critical business strategy and performance-related issues. Since 1965, clients have engaged CRA for its combination of industry experience and rigorous, fact-based analysis that provide clients with clear, implementable solutions to complex business concerns.

Practices seeking to hire candidates with this profile include (hiring locations listed):

• Forensic Services/Cybersecurity & Digital Forensics (Boston, Chicago, Dallas, New York, Washington DC)
  • Our team supports cyber due diligence, incident response, software/source code analysis, insurance claims, and security transformation.
• Forensic Services/E-Discovery (Boston, Chicago, New York)
  • Our team assists companies and their counsel in data preservation, collection, analysis, reporting, and delivery from cloud-based and other repositories.

Learn more about our work by reviewing our Services and Industries on our website.

Position Overview

• Assist with security and privacy investigations in response to data security matters, which may include ongoing breaches and fraud;
• Engage in problem solving and forensic analysis of digital information using standard computer forensic and evidence handling techniques and tools;
• Apply investigative techniques, scientific reasoning, and digital forensic techniques against various systems to answer questions;
• Identify, research, and organize information to determine what a hacker did to a compromised system, whether data was stolen from a company asset, or what data to assess and provide in a litigation;
• Defensibly collect digital evidence and complete chain-of-custody documentation;
• Leverage your programming, model building, and database administration skills (including using Python, T-SQL, VBA, Excel, C#, and/or other programming languages and tools);
• Communicate with team members, clients, and other professionals to share investigative and analytical findings, and assist with the drafting of written reports to summarize procedures performed and findings;
• Work closely with business stakeholders and experts to develop new and innovative tools to support the evolving forensic landscape;
• Stay current with developments in digital forensics, software tools, e-discovery, and incident response.

Check out our blog about a typical day at CRA and how you can make an impact!

Desired Qualifications

• Bachelor’s or Master’s degree candidates graduating December 2025/Summer 2026 with an academic focus in Cybersecurity, Computer Science and Engineering, Digital Forensics, Management Information Systems, Security Information Systems, or related field;
• Strong understanding of computer operating systems, software, and hardware;
• Ability to conduct detailed forensic investigations and analyses of computers, networks, mobile devices, and removable media;
• Experience with conducting digital forensic analyses using commercial and open-source forensic tools, including file system forensics, memory analysis, and network analysis;
• Experience with conducting static/dynamic malware analyses in a lab environment and threat hunting in a live environment;
• Strong understanding of proper evidence handling procedures and chain-of-custody;
• Experience with drafting technical and investigative reports and communicating technical findings;
• High-level familiarity with legal concepts related to intellectual property;
• Experience with utilizing automation tools and scripts to expedite analyses;
• Understanding of incident handling procedures, including preparation, identification, containment, eradication, and recovery-to-protect enterprise environments
• Understanding of common attack techniques used by an adv