STEM OPT Forensic Analyst Jobs
Forensic Analyst roles in digital forensics, crime lab analysis, and fraud investigation qualify for STEM OPT when your degree maps to an eligible CIP code. Your employer must be enrolled in E-Verify, and the 24-month STEM OPT extension gives you up to 36 months total to build your career in this field.
See All Forensic Analyst JobsOverview
Showing 5 of 8+ Forensic Analyst jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all Forensic Analyst jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Forensic Analyst roles.
Get Access To All JobsINTRODUCTION
If your background is in Cybersecurity, Computer Science and Engineering, Digital Forensics, Management Information Systems, or Security Information Systems, learn more about internships at Charles River Associates!
ABOUT CHARLES RIVER ASSOCIATES
Charles River Associates is a leading global consulting firm that provides economic, financial, and business management expertise to major law firms, corporations, and governments around the world. CRA advises clients on economic and financial matters pertaining to litigation and regulatory proceedings, and guides corporations through critical business strategy and performance-related issues. Since 1965, clients have engaged CRA for its combination of industry experience and rigorous, fact-based analysis that provide clients with clear, implementable solutions to complex business concerns. Practices seeking to hire interns with this profile include (hiring locations listed):
- Forensic Services/Cybersecurity & Digital Forensics (Boston, Chicago, Dallas, New York, Washington DC)
+ Our team supports cyber due diligence, incident response, insurance claims, and security transformation.
- Forensic Services/E-Discovery (Boston, Chicago, New York)
+ Our team assists companies and their counsel in data preservation, collection, analysis, reporting, and delivery from cloud-based and other repositories.
POSITION OVERVIEW
Our Summer Analyst/Associate Internship program mirrors the analyst experience to give you an understanding of our business and experience project work at Charles River Associates. Throughout the 8-10 week program, Analyst/Associate Interns work alongside senior colleagues to deliver live client consulting projects within the practice area. Along the way, you’ll benefit from professional development and wellness support programs, social events to connect you with peers, and a collegial work environment. Successful interns will be offered a full-time position following graduation.
During the Cyber and Forensic Technology Analyst/Associate Internship program, you may work on many aspects of a project:
- Assist with security and privacy investigations in response to data security matters, which may include ongoing breaches and fraud;
- Engage in problem solving and forensic analysis of digital information using standard computer forensic and evidence handling techniques and tools;
- Apply investigative techniques, scientific reasoning, and digital forensic techniques against various systems to answer questions;
- Identify, research, and organize information to determine what a hacker did to a compromised system, whether data was stolen from a company asset, or what data to assess and provide in a litigation;
- Defensibly collect digital evidence and complete chain-of-custody documentation;
- Leverage your programming, model building, and database administration skills (including using Python, T-SQL, VBA, Excel, C#, and/or other programming languages and tools);
- Share investigative and analytical findings, and assist with the drafting of written reports to summarize procedures performed and findings;
- Stay current with developments in digital forensics, e-discovery, and incident response.
DESIRED QUALIFICATIONS
- Bachelor’s or Master’s (non-MBA) degree candidates graduating December 2026/Summer 2027 with a related academic focus (Cybersecurity, Computer Science and Engineering, Digital Forensics, Management Information Systems, or Security Information Systems or related);
- Familiarity with several core skills:
+ Strong understanding of computer operating systems, software, and hardware;
+ Ability to conduct detailed forensic investigations and analyses of computers, networks, mobile devices, and removable media;
+ Experience with conducting digital forensic analyses using commercial and open-source forensic tools, including file system forensics, memory analysis, and network analysis;
+ Experience with conducting static/dynamic malware analyses in a lab environment and threat hunting in a live environment;
+ Understanding of proper evidence handling procedures and chain-of-custody;
+ Experience with drafting technical and investigative reports and communicating technical findings;
+ Experience with utilizing automation tools and scripts to expedite analyses;
+ Understanding of incident handling procedures, including preparation, identification, containment, eradication, and recovery-to-protect enterprise environments;
+ Understanding of common attack techniques used by an adversary on a victim network and how to leverage those techniques to stop further adversary activity;
+ Individuals with digital forensics/incident response training and/or certifications, including SANS GIAC (GCIA, GCFA, GCFE, GNFA, GCCC, and/or GREM), IACIS (CFCE or CIFR), and/or Guidance Software (EnCE), are preferred but not required.
- Effective written and oral communication skills;
- Demonstrated high level of initiative and leadership;
- Strong teamwork and collaboration capabilities;
- Excellent time management and task prioritization skills;
- Clear and demonstrated interest in consulting through coursework, work experience, activities, or attendance at CRA recruiting events.
TO APPLY
To be considered for the Summer 2026 Analyst/Associate Internship program, we require:
- Resume – please include current address, personal email, and telephone number;
- Cover letter – please describe your interest in CRA and how this role matches your goals. Also, please note if you have interest in a particular practice and/or a location preference;
- Transcript – may be unofficial. Note: you must be graduating from a bachelor's or master's degree program for this role. If you are graduating from an MBA/PhD program or have work experience, please visit our Careers site to see current open roles. If you are interested in applying for one of our international locations, please visit our Careers site to view and apply for available jobs. Candidate resume review will commence during the fall semester and continue on a rolling basis until positions are filled.
WORK LOCATION FLEXIBILITY
CRA creates a work environment that enables our colleagues to benefit from being together in the office to best deliver on our promise of career growth, mentorship, and inclusivity. At the same time, we realize that individuals realize a range of benefits when working from home periodically. We currently ask that individuals spend 3 to 4 days a week on average working in the office, with specific days determined in coordination with your practice or team.
OUR COMMITMENT TO EQUAL EMPLOYMENT OPPORTUNITY
Charles River Associates is an equal opportunity employer (EOE). All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, status as a protected veteran, or any other protected characteristic under applicable law.
The city of New York and the District of Columbia require CRA to include a good-faith estimate of the wage range for this role. This range is specific to individuals applying to work in our New York and Washington DC offices and considers several factors including but not limited to experience, education level, and expertise. A good-faith estimate of the base wage range for this role is $30 - $36 per hour; actual total compensation may also include benefits and bonus.
INTRODUCTION
If your background is in Cybersecurity, Computer Science and Engineering, Digital Forensics, Management Information Systems, or Security Information Systems, learn more about internships at Charles River Associates!
ABOUT CHARLES RIVER ASSOCIATES
Charles River Associates is a leading global consulting firm that provides economic, financial, and business management expertise to major law firms, corporations, and governments around the world. CRA advises clients on economic and financial matters pertaining to litigation and regulatory proceedings, and guides corporations through critical business strategy and performance-related issues. Since 1965, clients have engaged CRA for its combination of industry experience and rigorous, fact-based analysis that provide clients with clear, implementable solutions to complex business concerns. Practices seeking to hire interns with this profile include (hiring locations listed):
- Forensic Services/Cybersecurity & Digital Forensics (Boston, Chicago, Dallas, New York, Washington DC)
+ Our team supports cyber due diligence, incident response, insurance claims, and security transformation.
- Forensic Services/E-Discovery (Boston, Chicago, New York)
+ Our team assists companies and their counsel in data preservation, collection, analysis, reporting, and delivery from cloud-based and other repositories.
POSITION OVERVIEW
Our Summer Analyst/Associate Internship program mirrors the analyst experience to give you an understanding of our business and experience project work at Charles River Associates. Throughout the 8-10 week program, Analyst/Associate Interns work alongside senior colleagues to deliver live client consulting projects within the practice area. Along the way, you’ll benefit from professional development and wellness support programs, social events to connect you with peers, and a collegial work environment. Successful interns will be offered a full-time position following graduation.
During the Cyber and Forensic Technology Analyst/Associate Internship program, you may work on many aspects of a project:
- Assist with security and privacy investigations in response to data security matters, which may include ongoing breaches and fraud;
- Engage in problem solving and forensic analysis of digital information using standard computer forensic and evidence handling techniques and tools;
- Apply investigative techniques, scientific reasoning, and digital forensic techniques against various systems to answer questions;
- Identify, research, and organize information to determine what a hacker did to a compromised system, whether data was stolen from a company asset, or what data to assess and provide in a litigation;
- Defensibly collect digital evidence and complete chain-of-custody documentation;
- Leverage your programming, model building, and database administration skills (including using Python, T-SQL, VBA, Excel, C#, and/or other programming languages and tools);
- Share investigative and analytical findings, and assist with the drafting of written reports to summarize procedures performed and findings;
- Stay current with developments in digital forensics, e-discovery, and incident response.
DESIRED QUALIFICATIONS
- Bachelor’s or Master’s (non-MBA) degree candidates graduating December 2026/Summer 2027 with a related academic focus (Cybersecurity, Computer Science and Engineering, Digital Forensics, Management Information Systems, or Security Information Systems or related);
- Familiarity with several core skills:
+ Strong understanding of computer operating systems, software, and hardware;
+ Ability to conduct detailed forensic investigations and analyses of computers, networks, mobile devices, and removable media;
+ Experience with conducting digital forensic analyses using commercial and open-source forensic tools, including file system forensics, memory analysis, and network analysis;
+ Experience with conducting static/dynamic malware analyses in a lab environment and threat hunting in a live environment;
+ Understanding of proper evidence handling procedures and chain-of-custody;
+ Experience with drafting technical and investigative reports and communicating technical findings;
+ Experience with utilizing automation tools and scripts to expedite analyses;
+ Understanding of incident handling procedures, including preparation, identification, containment, eradication, and recovery-to-protect enterprise environments;
+ Understanding of common attack techniques used by an adversary on a victim network and how to leverage those techniques to stop further adversary activity;
+ Individuals with digital forensics/incident response training and/or certifications, including SANS GIAC (GCIA, GCFA, GCFE, GNFA, GCCC, and/or GREM), IACIS (CFCE or CIFR), and/or Guidance Software (EnCE), are preferred but not required.
- Effective written and oral communication skills;
- Demonstrated high level of initiative and leadership;
- Strong teamwork and collaboration capabilities;
- Excellent time management and task prioritization skills;
- Clear and demonstrated interest in consulting through coursework, work experience, activities, or attendance at CRA recruiting events.
TO APPLY
To be considered for the Summer 2026 Analyst/Associate Internship program, we require:
- Resume – please include current address, personal email, and telephone number;
- Cover letter – please describe your interest in CRA and how this role matches your goals. Also, please note if you have interest in a particular practice and/or a location preference;
- Transcript – may be unofficial. Note: you must be graduating from a bachelor's or master's degree program for this role. If you are graduating from an MBA/PhD program or have work experience, please visit our Careers site to see current open roles. If you are interested in applying for one of our international locations, please visit our Careers site to view and apply for available jobs. Candidate resume review will commence during the fall semester and continue on a rolling basis until positions are filled.
WORK LOCATION FLEXIBILITY
CRA creates a work environment that enables our colleagues to benefit from being together in the office to best deliver on our promise of career growth, mentorship, and inclusivity. At the same time, we realize that individuals realize a range of benefits when working from home periodically. We currently ask that individuals spend 3 to 4 days a week on average working in the office, with specific days determined in coordination with your practice or team.
OUR COMMITMENT TO EQUAL EMPLOYMENT OPPORTUNITY
Charles River Associates is an equal opportunity employer (EOE). All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, status as a protected veteran, or any other protected characteristic under applicable law.
The city of New York and the District of Columbia require CRA to include a good-faith estimate of the wage range for this role. This range is specific to individuals applying to work in our New York and Washington DC offices and considers several factors including but not limited to experience, education level, and expertise. A good-faith estimate of the base wage range for this role is $30 - $36 per hour; actual total compensation may also include benefits and bonus.
See all Forensic Analyst jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Forensic Analyst roles.
Get Access To All JobsTips for Finding STEM OPT Authorization as a Forensic Analyst
Verify your CIP code before applying
Cross-check your degree's CIP code against the official STEM Designated Degree Program list on USCIS. Forensic Science (43.0106), Computer Forensics (11.1003), and Chemistry (40.0501) all qualify, but your transcript's exact program title must match.
Confirm E-Verify enrollment during screening
Ask recruiters directly whether their organization is enrolled in E-Verify before accepting interviews. Forensic roles at private labs, consulting firms, and insurance carriers often lack E-Verify enrollment, even when government-contractor positions at the same company do.
Target agencies with active I-9 audit exposure
Federal agencies, defense contractors, and regulated financial institutions are required to use E-Verify by law or contract, making them reliable STEM OPT employers. Focus your search on these sectors rather than smaller independent labs.
Draft your I-983 training plan before your offer
Prepare a draft I-983 outlining how forensic casework, evidence analysis, and laboratory procedures connect to your STEM degree. Having this ready shortens employer review time and signals you understand the mutual training obligations both sides must sign.
Use Migrate Mate to filter for E-Verify employers
Search for Forensic Analyst roles on Migrate Mate, which surfaces employers with verified E-Verify enrollment and DOL Labor Condition Application history so you're not guessing whether a company can legally onboard a STEM OPT student.
Time your extension filing against cap-gap protection
If you're on STEM OPT and selected in the H-1B lottery, your work authorization automatically extends under cap-gap rules until October 1. Coordinate your forensic employer's I-129 filing timeline with your DSO to avoid any gap in your work authorization.
Forensic Analyst jobs are hiring across the US. Find yours.
Find Forensic Analyst JobsFrequently Asked Questions
Does a Forensic Analyst job qualify for the STEM OPT extension?
It depends on whether your underlying degree has a qualifying CIP code, not the job title itself. Degrees in Forensic Science, Computer Forensics, Chemistry, or Criminal Justice with a STEM concentration commonly qualify. Your DSO confirms eligibility by matching your program's CIP code to the USCIS STEM Designated Degree Program list before recommending the extension on your I-20.
Does my Forensic Analyst employer need to be enrolled in E-Verify?
Yes. E-Verify enrollment is a hard requirement for any employer hiring a STEM OPT student. Without it, your employer cannot sign the I-983 training plan and your extension is invalid. Ask the recruiter or HR contact to confirm enrollment status before you accept an offer. Federal agencies and defense contractors are typically enrolled by mandate, but private forensic labs and consulting firms vary.
What goes into the I-983 training plan for a Forensic Analyst role?
The I-983 must document how your day-to-day forensic work, such as evidence collection protocols, digital imaging, chain-of-custody procedures, or spectroscopic analysis, directly relates to your STEM degree field. It requires signatures from both you and an authorized employer representative. Your DSO reviews it before submitting the STEM OPT extension application. Vague descriptions that don't connect lab duties to your degree coursework are the most common reason DSOs send the plan back for revision.
How long can I work as a Forensic Analyst on STEM OPT?
Your initial OPT period runs 12 months. A timely STEM OPT extension adds 24 more months, giving you up to 36 months of total OPT work authorization. You must apply for the extension before your initial OPT expires. USCIS recommends filing at least 90 days before that end date to avoid gaps in authorization while the extension application is pending.
Where can I find Forensic Analyst jobs from E-Verify employers?
Migrate Mate is built specifically for STEM OPT students and filters Forensic Analyst listings by employers with E-Verify enrollment and active sponsorship history. That means you're not spending time on roles where the employer can't legally hire you. You can also cross-reference the O*NET occupation profile for Forensic Science Technicians to understand which industries post the most positions.
See which Forensic Analyst employers are hiring and sponsoring visas right now.
Search Forensic Analyst Jobs