Investigator - Cyber Incident Response

WeAreTechWomen; Greater London; Hybrid; GBP 65,000 - 85,000; Full time

Job summary

A leading technology company is seeking an Investigator for Cyber Incident Response. This role involves investigating and recovering from cyber incidents while collaborating with experts in the field. The ideal candidate will have strong skills in understanding cyber attacks and lateral movement. Experience in handling complex incidents is crucial. Candidates must be willing to undergo Security Clearance and have at least 5 years of UK address history. This position offers flexibility in location and opportunities for professional growth.

Benefits

Access to world-class training

Supportive work culture

Variety of crisis work

Qualifications

• 5+ years of UK address history required for Security Clearance.
• Practical experience in cybersecurity preferred.
• Certifications in cybersecurity are a plus.

Responsibilities

• Investigate, contain, and recover from cyber incidents.
• Run tabletop exercises and develop playbooks.
• Collaborate with experts in forensics and crisis management.

Skills

Understanding cyber attacks

Lateral movement detection

Lab building and experimentation

Familiarity with MITRE ATT&CK

Experience with incident response

Job description

Job Description

Investigator - Cyber Incident Response

Location Flexible (UK)

Please Note: Due to the nature of client work you will be undertaking, you will need to be willing to go through a Security Clearance process as part of this role, which requires 5+ years UK address history at the point of application.

Accenture is a leading global professional services company, providing a broad range of services in strategy and consulting, interactive, technology and operations, with digital capabilities across all of these services. With our thought leadership and culture of innovation, we apply industry expertise, diverse skill sets and next-generation technology to each business challenge.

We believe in inclusion and diversity and supporting the whole person. Our core values comprise of Stewardship, Best People, Client Value Creation, One Global Network, Respect for the Individual and Integrity. Year after year, Accenture is recognized worldwide not just for business performance but for inclusion and diversity too.

“Across the globe, one thing is universally true of the people of Accenture: We care deeply about what we do and the impact we have with our clients and with the communities in which we work and live. It is personal to all of us.”

Julie Sweet, Accenture CEO

If you’re looking for a challenging career working in a vibrant environment with access to training and a global network of experts, this is the role for you. As part of our global team, you'll be working with cutting‑edge technologies and will have the opportunity to develop a wide range of new skills.

At Accenture, our global Incident Response team takes on some of the hardest and most meaningful challenges in cyber security. When major organisations are breached, when ransomware hits the headlines, when espionage or insider threats threaten operations, we’re the people called to help.

We’re looking for curious, capable people who love solving complex problems under pressure, thrive on collaboration, and want to work with the best in the industry.

Who We Are

We’re a globally distributed team of nearly 200 dedicated incident responders, forensics specialists, and crisis managers spread across more than 25 countries. Every day, we work across time zones, cultures, and languages to protect clients that range from household brands to nationally significant infrastructure.

We’re one of the NCSC CIR‑enhanced capabilities in the UK (https://www.ncsc.gov.uk/schemes/cyber-incident-response/information-for-buyers), meaning our team is trusted to respond to the nation’s most critical incidents, including ransomware, espionage, insider threats, and large‑scale fraud.

You’ll be joining a small team but backed by the scale and reach of Accenture – meaning you’ll always have the opportunity to grow, specialise, or even work in a different part of the world.

What You’ll Do

You’ll help organisations investigate, contain, and recover from the full spectrum of cyber incidents, from sophisticated intrusions to complex fraud and ransomware.

Between high‑intensity engagements, you’ll also get to work proactively with clients, running tabletop exercises, purple‑team operations, playbook development, and helping them build resilience before the next crisis strikes.

You’ll collaborate closely with brilliant minds in forensics, threat intelligence, and crisis management, all working together to help clients make the right decisions in the toughest moments.

Qualification

The following skills and experience are essential for this role:

• Understand what an attack looks like, both on hosts and across the network.
• Can think like an attacker and spot how lateral movement happens.
• Build labs, experiment, break things.
• Know or use frameworks like MITRE ATT&CK and care about TTPs, not just tools.
• Have seen what a “bad day” looks like in an incident, and still want more.

Formal qualifications are great, but curiosity and practical experience count for more. Whether you’ve come up through traditional routes or through your own self‑taught path, we’re interested in how you’ve learned and how you apply it.

Certifications are welcome, but so is evidence that you’ve used training to improve how you work or to strengthen your team.

What You’ll Get

• Access to world‑class training and tools, and a global network of experts to learn from.
• Variety: you’ll move between crisis work, proactive resilience, and strategic recovery.
• The chance to make a real difference; sometimes even save lives.
• A supportive, welfare‑focused culture that understands the demands of the job.

We know incident response can be intense, and we look after our people accordingly.

Flexibility and mobility are required to deliver this role as there may be requirements to spend time onsite with our clients and partners to enable delivery of the first‑class services we are known for.

About Accenture

Accenture is a leading global professional services company, providing a broad range of services in strategy and consulting, interactive, technology and operations, with digital capabilities across all of these services. We combine unmatched experience and specialized capabilities across more than 40 industries – powered by the world’s largest network of Advanced Technology and Intelligent Operations centres. With 733,000 people serving clients in more than 120 countries, Accenture brings continuous innovation to help clients improve their performance and create lasting value across their enterprises.

Equal Employment Opportunity Statement

Accenture is an equal opportunities employer and welcomes applications from all sections of society and does not discriminate on grounds of race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, or gender identity, or any other basis as protected by applicable law.

All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.

Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process.

Accenture is committed to providing veteran employment opportunities to our service men and women.

Please read Accenture’s Recruiting and Hiring Statement for more information on how we process your data during the Recruiting and Hiring process.

Locations

• London
• Birmingham
• Bristol
• Edinburgh
• Glasgow
• Manchester

Closing Date for Applications: 31/01/2026