Senior Associate, Cyber Resilience and Red Teaming

Alvarez & Marsal (A&M) is a global consulting firm with entrepreneurial, action- and results-oriented professionals. We take a hands-on approach to solving our clients' problems and helping them reach their potential. A&M is different by design: we give people ownership and impact from day one, fuel development through real opportunity, and provide direct access to leaders who invest in our growth.

Our culture celebrates independent thinkers and doers who positively impact clients and shape our industry. Guided by A&M's core values of Integrity, Quality, Objectivity, Fun, Personal Reward, and Inclusive Diversity, our collaborative, globally minded environment is why our people love working at A&M.

Alvarez & Marsal’s (A&M’s) Global Cyber Risk Services (GCRS) practice helps Boards and management teams understand and manage cyber risk, strengthen resilience, support transactions, and respond with confidence when incidents occur. As the cyber landscape continues to evolve, we help clients see that cybersecurity is not a technology issue, but a business issue. Our methods are grounded in guidance from the regulatory and industry frameworks and best practices that govern our clients’ specific business.

Our team of cybersecurity experts provides prioritized findings, observations, recommendations, and a roadmap for gap closure, using expertly developed methodologies, tools, and techniques to identify vulnerabilities, system misconfigurations, and program deficiencies and improve our clients’ overall cyber posture and process maturity.

A&M’s team includes former Chief Information Security Officers (CISOs), forensic investigators, offensive security practitioners, and senior information security professionals who help organizations articulate a strategic vision that goes well beyond the day-to-day management of cybersecurity. GCRS delivers across four service lines:

• Cyber Risk Advisory: program maturity assessments (ISO 27001, NIST, CIS Controls), risk-based program prioritization, security and privacy governance, data privacy and cyber compliance (GDPR, CCPA, NYDFS, HIPAA, PCI-DSS), third-party risk, AI security assessments, and board reporting.
• Incident Response & Forensic Investigations: breach and ransomware response, cyber war room management, comprehensive forensic investigations and log analysis, malware reverse engineering, Microsoft 365 investigations, AI incident response, expert witness and litigation support, and incident response retainers.
• Cyber Resilience: incident response program development, ransomware readiness and playbooks, cyber threat simulations and tabletop exercises, red teaming and penetration testing, threat hunting and compromise assessments, application, network, cloud and OT security assessments, and secure Dev Ops.
• Cybersecurity Transaction Advisory: buy-side, sell-side, and carve-out cybersecurity due diligence, Day 1 readiness, separation and integration support (IMO/SMO), TSA governance and exit planning, and post-close performance improvement.

Our clients choose A&M for our technical depth, board-level judgment, and product-agnostic approach. A&M is accredited by the National Security Agency (NSA) as a Cyber Incident Response Assistance (CIRA) firm and is a CREST Cybersecurity Incident Response provider, with a global footprint and dedicated cyber and forensics labs that enable in-region data handling and rapid on-the-ground response.

Across GCRS, we are building practical capability to help clients navigate the security implications of artificial intelligence, including AI governance, model and pipeline security, and the emerging risks of agentic AI systems, as well as the use of AI by threat actors.