DFIR Associate Manager (Digital Forensics & Incident Response)

Accenture Inc.; Philippines; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Joining bonus up to PHP80,000

Job summary

Accenture is seeking an experienced DFIR Associate Manager to lead and support investigations of critical cybersecurity incidents. You will work with clients to improve cyber resilience, develop incident response playbooks, and mentor team members.

The role emphasizes forensics, malware analysis, threat hunting, and collaboration with security teams to communicate findings and strengthen defenses. Hybrid work with Cubao office is available.

Qualifications

• Minimum 5 years of Digital Forensics and Incident Response (DFIR) experience.
• Familiar with MITRE ATT&CK framework and cyber threat investigation methods.
• Proficient in Windows and Linux OS, networking, and security fundamentals.

Responsibilities

• Lead and support investigation of high‑impact cybersecurity incidents.
• Conduct detailed forensic investigations to determine scope, root cause, and remediation needs.
• Perform memory, disk, and network forensics on endpoints, servers, and cloud environments.

Skills

DFIR

Incident Response

Threat Hunting

Memory Forensics

Malware Analysis

SIEM

Networking Basics

Tools

FTK

Autopsy

Volatility

EnCase

Magnet AXIOM

SIFT

REMnux

Job description

Cybersecurity Demands with JOINING BONUS up to PHP80,000*

Investigate cyber threats. Lead critical incident response. Make a real impact.

Accenture is looking for an experienced DFIR Associate Manager to join our Cybersecurity team. If you're passionate about uncovering the truth behind cyber incidents, conducting complex forensic investigations, and helping organizations strengthen their defenses, this role is for you.

What You'll Do

As a DFIR Associate Manager, you'll lead and support the investigation of high-impact cybersecurity incidents while helping clients improve their cyber resilience.

Your Key Responsibilities

• Lead and support response efforts during critical cybersecurity incidents.
• Investigate ransomware attacks, malware infections, insider threats, data breaches, business email compromise (BEC), DDoS attacks, and advanced persistent threats (APTs).
• Conduct detailed forensic investigations to determine the scope, impact, root cause, and remediation requirements.
• Perform digital forensic analysis of endpoints, servers, cloud environments, and mobile devices.
• Work closely with security teams, business stakeholders, and management to coordinate response activities and communicate findings.
• Develop and enhance incident response playbooks, procedures, and documentation.
• Conduct proactive threat hunting and security investigations.
• Help optimize security tools and detection capabilities.
• Mentor team members and deliver knowledge-sharing sessions on incident response and forensic best practices.

Priority Skill

Computer Security Incident Response

What We're Looking For

Required Experience & Skills

• Minimum 5 years of Digital Forensics and Incident Response (DFIR) experience
• Strong understanding of:
  • Incident Response Lifecycle (Investigation, Containment, Eradication, Recovery)
  • Digital Forensics Methodologies
  • MITRE ATT&CK Framework
  • Cyber Threat Investigation and Analysis
  • Windows and Linux Operating Systems
  • Networking and Security Fundamentals
• Hands‑on experience with:
  • Memory, Disk, and Network Forensics
  • Malware Analysis (Static and/or Dynamic)
  • SIEM, Endpoint Security, Network Security, and Email Security Technologies
• Experience with forensic tools such as:
  • FTK
  • Autopsy
  • Volatility
  • EnCase
  • Magnet AXIOM
  • SIFT
  • REMnux
  • Similar DFIR platforms

Nice-to-Have Skills

• Mobile Forensics (Android/iOS)
• Threat Intelligence and Threat Hunting
• Scripting and Automation using Python or PowerShell
• Industry certifications such as:
  • GCFA
  • GCFE
  • GNFA
  • Other GIAC certifications

Work Setup

• Hybrid work arrangement
• Cubao office
• Amenable to possible shifting schedules

Accelerate Your Cybersecurity Career

At Accenture, continuous learning is part of the culture. As a member of our Cyber Resilience, Response, and Recovery (CRRR) team, you'll have opportunities to pursue advanced certifications, including:

• OSCP, OSDA
• CDSA, CPTS
• GCFA, GCFE, GMON, GCIH, GREM
• CRTO, CRTL

Certification sponsorship and upskilling opportunities are available to support your growth and career advancement.

Please note that you will be submitted as a referral and will be actively processed on these demands.

NOTE: Open demands are subject to change.