Senior Consultant, DFIR

Are you looking for tremendous exposure to a wide variety of different cases and technologies, to be recognized for your accomplishments, to learn new skills and attend training? If you are prepared to join a collaborative environment and make an impact - we are ready for you! Your work will vary from day to day helping your team to respond to breaches, nation-state attacks, ransomware and reverse malware engineering, just to name a few.

The location of this position flexible within the US, with preferred locations on the west coast.

At Aon, we shape decisions for the better to protect and enrich the lives of people around the world. As an organization, we are united through trust as one inclusive, diverse team, and we are passionate about helping our colleagues and clients succeed.

As a Senior Consultant, you are expected to bring several years' experience in the cybersecurity or technical consulting industry to bear on your casework. You will work at the direction of a Director in the unit to run client cases, which might require analysis of any technology used today: mobile devices, laptops and workstations, servers, networking switches, IoT devices, or cloud-based accounts and infrastructure.

• Preserve and analyze data from electronic data sources, including laptop and desktop computers, servers, and mobile devices.
• Lead technical engagements and present key findings to the client.
• Investigate network intrusions and other cyber security breaches to determine the cause and extent of the breach.
• Support or provide expert testimony in depositions, trials, and other proceedings.
• Build intellectual capital for the firm by writing blogs, submitting to CFPs, and creating internal tools for analysis.
• Work collaboratively across agencies and physical locations.
• Participate in technical meetings and working groups to address issues related to malware security, vulnerabilities, and issues of cybersecurity and preparedness.
• Comfort with intermittent periods of significant travel, evening and weekend hours.

Aon's Cyber Solutions is the only team in the market that has the scope and breadth of services to offer clients in any area of the cyber life cycle. If you want to work on some of the highest profile and sophisticated cases out there, we are that first responder. The team works closely together to ensure learning, growth and career development. And we invest in you, in the form of mentorship and hefty training budgets to attend security training and conferences.

• Experience leading or working on Ransomware, business email compromise, network intrusions, APT and/or malware cases.
• GCFE, GCIH, CCE, EnCE or equivalent DFIR certification.
• Experience with most common operating systems (Windows, macOS, Linux, iOS, Android) and their file systems (ext3/4, HFS+, APFS, NTFS, exFAT, etc.).
• Proficiency with industry-standard DFIR toolsets, including X-Ways, EnCase, Axiom/IEF, Cellebrite, FTK, Pstools and Volatility.
• Proficiency with database querying and analysis.
• Experience with cloud infrastructures for the enterprise, such as Amazon Web Services, G Suite, Office 365, and Azure.
• Experience with conducting log analysis of Windows Event Logs, Apache, IIS, and firewall logs.
• Ability to conduct basic malware analysis.
• Experience with command line tools (grep, sed, awk, PowerShell), python, and other programming languages.
• Familiarity with computer system hardware and software installation and troubleshooting.
• Well-developed analytic, qualitative, and quantitative reasoning skills and demonstrated creative problem solving abilities.
• Strong shell, C, C++ and/or Java programming skills and proficiency in Assembler languages a plus.

• Relevant and related industry experience required.

In addition to our comprehensive benefits package, we encourage a diverse workforce. Plus, our agile, inclusive environment allows you to manage your wellbeing and work/life balance, ensuring you can be your best self at Aon. Furthermore, all colleagues enjoy two "Global Wellbeing Days" each year, encouraging you to take time to focus on yourself. We offer a variety of working style solutions, but we also recognize that flexibility goes beyond just the place of work... and we are all for it. We call this SmartWorking!

Our continuous learning culture inspires and equips you to learn, share and grow, helping you achieve your fullest potential. As a result, at Aon, you are more connected, more relevant, and more valued.

Aon values an innovative, diverse workplace where all colleagues feel empowered to be their authentic selves. Aon is proud to be an equal opportunity workplace.

Aon provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, age, disability, veteran, marital, domestic partner status, or other legally protected status.

People with criminal histories are encouraged to apply.

We welcome applications from all and provide individuals with disabilities with reasonable adjustments to participate in the job application, interview process and to perform essential job functions once onboard. If you would like to learn more about the reasonable accommodations we provide, email ReasonableAccommodations@Aon.com

For positions in San Francisco and Los Angeles, we will consider for employment qualified applicants with arrest and conviction record in accordance with local Fair Chance ordinances.

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time.

The salary range for this position (intended for U.S. applicants) is $115,000-$140,000 annually. The actual salary will vary based on applicant's education, experience, skills, and abilities, as well as internal equity and alignment with market data. The salary may also be adjusted based on applicant's geographic location.

This position is eligible to participate in one of Aon's annual incentive plans to receive an annual discretionary bonus in addition to base salary. The amount of any bonus varies and is subject to the terms and conditions of the applicable incentive plan.

Aon offers a comprehensive package of benefits for full-time and regular part-time colleagues, including, but not limited to: a 401(k) savings plan with employer contributions; an employee stock purchase plan; consideration for long-term incentive awards at Aon's discretion; medical, dental and vision insurance, various types of leaves of absence, paid time off, including 12 paid holidays throughout the calendar year, 15 days of paid vacation per year, paid sick leave as provided under state and local paid sick leave laws, short-term disability and optional long-term disability, health savings account, health care and dependent care reimbursement accounts, employee and dependent life insurance and supplemental life and AD&D insurance; optional personal insurance policies, adoption assistance, tuition assistance, commuter benefits, and an employee assistance program that includes free counseling sessions. Eligibility for benefits is governed by the applicable plan documents and policies.

#LI-RB1