Aon Campus - Cyber Associate

Interested in launching your career in cybersecurity?

Locations: New York, Chicago, Washington DC, Boston, Dallas

• APPLICATIONS DUE BY: October 2nd, 2023
• Cyber Associate Program Begins: August 2024

This is a full-time position and for candidates who graduate between December 2023 - June 2024

Position Overview

The Cyber Associate Program is a 7-month early careers progressive training program beginning in August 2024 where you will be introduced to Aon's innovative cyber capabilities and services. This full-time position with a competitive salary and benefits will provide you with the opportunity to work with one of three cybersecurity consulting specializations:

• Digital Forensics and Incident Response
• Security Testing
• Proactive Security Advisory

Associates work side-by-side with our tenured colleagues, gaining exposure in their focus practice via client-facing assignments and long-term projects. You will learn from colleagues across Aon Cyber Solutions with diverse technical backgrounds. Cyber Associates will be given comprehensive feedback throughout the program and at the end of the 7 months.

Upon completing the training program, candidates who have successfully met the performance expectations of the business will be able to continue their career with promotion to Consultant and will be eligible for a bonus and base salary increase.

Each of our 2024-2025 class of Cyber Associates will be trained in one of the following focus areas of Aon's cyber consulting business:

Digital Forensics & Incident Response: works with an organization in response to a cyberattack or data breach as well as working with legal counsel to assist with acquiring, processing, and analyzing data. During the program you will aim to:

• Investigate network intrusions and other cyber security breaches to understand the cause and extent of the breach.
• Preserve and analyze data from electronic data sources, including laptop and desktop computers, servers, and mobile devices.
• Work on a wide range of DFIR engagements, both in complexity and volume and work alongside client representatives.
• Conduct statistical analysis of large data sets and other investigative components of cases.
• Produce high quality oral and written work product, presenting complex technical matters clearly and concisely.
• Form and articulate opinions based on analysis.
• Support expert testimony in depositions, trials, and other proceedings.
• Attend and contribute to a curriculum and assist in-house training sessions, individualized if needed, for DFIR staff, to ensure appropriate development of skills and continued innovation.
• DFIR Cyber Associates will work in-person in one of our forensic labs in New York, Chicago, Washington DC, Boston, or Dallas.

Security Testing: simulates attacker scenarios and identifying security vulnerabilities. During the program you will aim to:

• Perform penetration testing projects in the realms of web/mobile application penetration testing, network penetration testing (external & internal), source code review.
• Implement penetration testing projects according to internal testing methodology, tools, and processes.
• Document technical issues identified during security assessments to articulate the risk to the client, as well as provide tailored recommendations for remediation.
• Perform vulnerability research and exploit development.
• Learn how to triage source code for security vulnerabilities and exploit them in live applications using SAST and DAST tools.
• Security Testing Cyber Associates will work in-person in our New York lab.

Security Advisory: proactively assist an organization with maturing cybersecurity practices across cyber risk and compliance, security architecture, and incident response preparation. During the program you will aim to:

• Be part of a multi-functional Proactive Security Services team that manages, complete, and delivers various Security Advisory engagements for our clients.
• Develop client security programs by reviewing existing programs; conducting comprehensive reviews of threats; evaluating and analyzing relevant data points.
• Develop strategies to reduce security risks across cloud services, on-premise infrastructure, servers, network devices, and user endpoints.
• Develop client strategies to defend against threats such as ransomware, nation-state attacks, and insider threat.
• Implement cyber security consulting engagements for various clients.
• Proactive Security Advisory Cyber Associates have the option to work remotely, hybrid, or in-person in one of our labs in New York and Chicago

Aon is always working towards improving the health of our clients' organizations, ensuring their longevity, protection, and resilience. Your work will play a crucial part in helping our teams deliver the best service to our clients and ensuring that we help them reach their goals.

From the very beginning of the program, candidates engage in interactive learning activities focused on boosting business and client management skills and growth across technical disciplines. You'll also be exposed to a wide variety of technical environments and enterprise networks while working alongside our experienced technologists through direct client work, shadowing casework, and intensive immersions.

Position Responsibilities (across all practices)

• Perform tasks related to technical consulting engagements involving digital forensics, incident response, security testing, and proactive security advisory.
• Help identify clients’ risks related to internal IT infrastructure, publicly available IT assets and other relevant attack surfaces.
• Evaluate and maintain proficiency with industry standard tools and practices.
• Design, develop, document, analyze, test and modify computer systems & programs.
• Learn to present sophisticated technical matters and analysis clearly and concisely.
• Engage with client partners to assess security maturity and identify strategic and tactical opportunities for improvement.
• Develop actionable recommendations and present comprehensive reports to client security leadership.
• Research and pilot security software (commercial and open source).
• Assist in developing proprietary tools and programs to aid in matters of forensic analysis, network incident response, and penetration testing.
• Stay up to date on the current regulatory environment, industry trends, and related implications.
• Build understanding around methods of cyber-crime and employ this knowledge to help guide investigations and institute preventative solutions.
• Develop and broaden skills through training and research.
• Participate in in-house training sessions.
• Suggest and pursue firm-enhancing projects that draw on your skills and academic interests.

What are we looking for?

We are aiming to recruit a diverse group of associates whose varying experiences, backgrounds and strengths can help Aon offer the most innovative solutions.

Education & Application Information

Bachelor's degree or Graduate degree in Computer Science, Information Security, Engineering, Digital Forensics or other quantitative analysis focused majors are preferred. Applicants for this role should graduate between December 2023 – May 2024 and have a GPA of 3.0 or above.

The target salary range for this position is $90,000 - $95,000 annually. The actual salary will vary based on applicant’s education, experience, skills, and abilities, as well as internal equity and alignment with market data. The salary may also be adjusted based on applicant’s geographic location.

Basic Qualifications

• Knowledge of computer networking technologies.
• Familiarity with computer system hardware and software.
• Strong analytic, qualitative, and quantitative reasoning skills.
• Strong written and oral communication skills, plus attention to detail.
• Solid understanding of MS Office, and familiarity with Windows, Macintosh, and/or Linux operation systems.
• Creative problem solving and eagerness to learn and research new skills.
• Exceptional work ethic, high level of professionalism and commitment to ethical standards.
• Strong self-motivation and a positive mentality.

Desired Knowledge and Expertise

• Security Testing: Familiarity with configuring, identifying, testing, and remediating vulnerable services and security bugs, and other ethical hacking techniques. Experience with cybersecurity related CTF challenges and platforms such as Hack The Box, Over The Wire, Hacker101, etc.
• Proactive Security Advisory: Familiarity with cybersecurity frameworks and standards such as NIST CSF, CIS Benchmarks, CMMC etc.
• DFIR: An investigative approach, foundational knowledge of digital forensic artifacts or operating systems, and experience with any of the following: malware analysis; database operations and analysis; security tooling including EDR; cloud security and investigations; or parsing and drawing conclusions from large data sets.
• Flexibility to collaborate or work independently; to grasp new concepts quickly and adapt to changing priorities; to work occasional weekend or evening hours; and to potentially travel globally, as client work may demand short notice travel.
• Proficiency with C++, Java, C#, Python, SQL, or assembly languages are a plus.

How we support our colleagues

In addition to our comprehensive benefits package, we encourage a diverse workforce. Plus, our agile, inclusive environment allows you to manage your wellbeing and work/life balance, ensuring you can be your best self at Aon. Furthermore, all colleagues enjoy two “Global Wellbeing Days” each year, encouraging you to take time to focus on yourself. We offer a variety of working style solutions, but we also recognize that flexibility goes beyond just the place of work... and we are all for it. We call this Smart Working!

Aon offers a comprehensive package of benefits for full-time and regular part-time colleagues, including, but not limited to: a 401(k) savings plan with employer contributions; an employee stock purchase plan; consideration for long-term incentive awards at Aon’s discretion; medical, dental and vision insurance, various types of leaves of absence, paid time off, including 12 paid holidays throughout the calendar year, 15 days of paid vacation per year, paid sick leave as provided under state and local paid sick leave laws, short-term disability and optional long-term disability, health savings account, health care and dependent care reimbursement accounts, employee and dependent life insurance and supplemental life and AD&D insurance; optional personal insurance policies, adoption assistance, tuition assistance, commuter benefits, and an employee assistance program that includes free counseling sessions. Eligibility for benefits is governed by the applicable plan documents and policies.

Our continuous learning culture inspires and equips you to learn, share and grow, helping you achieve your fullest potential. As a result, at Aon, you are more connected, more relevant, and more valued.

Aon values an innovative, diverse workplace where all colleagues feel empowered to be their authentic selves. Aon is proud to be an equal opportunity workplace.

Aon provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, age, disability, veteran, marital, domestic partner status, or other legally protected status. We welcome applications from all and provide individuals with disabilities with reasonable adjustments to participate in the job application, interview process and to perform essential job functions once onboard. If you would like to learn more about the reasonable accommodations we provide, email ReasonableAccommodations@Aon.com

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time.