Skip Navigation


OR Match jobs with LinkedIn

Any information we receive from LinkedIn is determined by LinkedIn and your privacy settings thereon. Duff & Phelps is not responsible for the privacy practices of any non-D&P operated websites. We will process any data we receive in accordance with our privacy policy.


Senior Associate, Legal Management Consulting

Job ID 17001087 Toronto, Canada

Our professionals balance analytical skills, deep market insight and independence to deliver solid, defensible analysis and practical advice to our clients. As an organization, we think globally. We create transparency in an opaque world, and we encourage our people to do the same. That means when you take your place on our team, you’ll discover a supportive and collaborative work environment that empowers you to excel. If you’re ready to share your perspective with the world, then you can make a real impact here. This is the Duff & Phelps difference.

Duff & Phelps’ Legal Management Consulting practice assists corporate legal departments, law firms and governmental agencies improve business performance, spend management and organizational effectiveness on a sustainable basis through services that focus on Contract Management, Global Data Risk, Information Lifecycle Management, Innovation Asset Management, Legal Operations, and Managed Services.

At Duff & Phelps, your work will help protect, restore and maximize value for our clients. Join us and together we’ll maximize the value of your career.


As part of our Legal Management Consulting practice, we are offering excellent opportunities within our Global Data Risk, Incident Response Consulting team focusing on responding to, investigating, and remediating data breaches worldwide.

This Senior Associate, Legal Management Consulting role will experience many of the disciplines of Information Security. Work requirements, engagements, and the industry change quickly and often — this individual will adapt and succeed in such an environment. This role requires team-work, flexibility, innovative thinking, curiosity, and a strong sense of determination. Our Senior Associate will routinely perform security reviews, penetration tests, and on-site incident responses for clients. From time to time, our staff will lend assistance to our digital forensics group in support of complex litigation. Other duties may be as follows:


  • Respond to security incidents by collecting, analyzing and preserving digital evidence
  • Attend at client site(s), if required
  • Investigate security incidents using SIEMs, packet captures, reports, data visualization, and pattern analysis tools, etc.
  • Assist the Incident Response team in remediation of critical information security incidents
  • Provide feedback to clients on findings and recommendations and discuss remediation options to address gaps, concerns and/or reduce risks
  • Conduct vulnerability scans and penetration tests using both industry standard, and in-house developed tools.
  • Identify and evaluate the severity of gaps in the client information security posture
  • Evaluate options and recommend mitigation strategies
  • Write technical reports using best practices to clearly identify information security risks and make recommendations that will improve the client’s overall security posture
  • Conduct threat and vulnerability assessment and security reviews
  • Assist in digital forensics investigations and cases.
  • Perform other related duties as required.


  • Strong understanding and foundation of common security compliance frameworks, controls and best practices (NIST, SANS, PCI, HIPAA)
  • A high degree of competency in manipulating and analyzing large data sets using tools like Elastisearch and Kibana
  • Expert understanding of networking, communications, and common network analysis tools
  • Strong understanding of IDS/IPS/HIDS technologies
  • Proficient in a number of scripting languages across a variety of platforms
  • Understanding of the risks & implications of Cloud Services in organizations
  • Ability to effectively communicate and present technical challenges to a variety of audiences
  • Ability to perform thorough penetration tests, security assessments, and red-team engagements from start to finish
  • Ability to assess the security configuration of common firewalls (i.e. Palo Alto, Cisco, Fortigate).
  • A subject-matter expert in multiple IT and/or security disciplines such as authentication and authorization models, data loss prevention methods, Linux/UNIX systems, DNS, NIDS, etc.
  • Familiarity with enterprise and personal virtualization software
  • Bachelor's degree in the field of Information Security, Computer Science or related fields OR equivalent years of work experience
  • Excellent verbal, written and communication skills in English
  • Strong teamwork, leadership, and analytical skills are a must
  • Strong customer-facing personality
  • Must be able to travel to various locations within the United States and Canada on short notice. Estimated travel is less than 10%.


  • 3-5 years of relevant hands-on experience in providing information security services and conducting assessments and audits
  • Adept system administrator on *nix, or Windows platforms
  • Previous experience working with threat-hunting tools and technologies

In order to be considered for a position at Duff & Phelps, you must formally apply via

Duff & Phelps is committed to providing equal opportunities in employment. We will not discriminate between applications for reason of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability.

Similiar Jobs


  • Professional Growth

    At Duff & Phelps, you’ll be encouraged to reach your peak—and then push further. We’ll complement your current skill set with a personalized growth and development plan.

  • Global Locations

    With more than 2,500 employees working in major business centers across North America, South America, Europe and Asia , we provide clients with both the local knowledge and the global resources they need.

  • Network of Women

    The Network of Women (NOW) was launched in 2012 to attract, develop and retain women at all levels of the

  • Student Opportunities

    YOU are bright, ambitious, and eager to make an immediate impact. And ready to begin your career with Duff & Phelps.

By entering your city, state and zip we can better target communications to your location.