Senior DFIR Lead: Incident Response & Forensics

Accenture in the Philippines; Philippines; Hybrid; PHP 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Flexible working arrangements

HMO Insurance

Training & Certifications

13th Month Pay

Stock Purchase Plan

Housing Plan

Diversity & Inclusion

Career Growth

Job summary

Accenture in the Philippines is seeking an experienced DFIR Associate Manager to lead high-impact cybercrime investigations and fortify client defenses. You will supervise incident response, conduct complex forensic analyses, and mentor a growing team in a hybrid Cubao-based setup.

The role requires strong DFIR background, MITRE ATT&CK mastery, and hands-on experience with memory/disk/network forensics, malware analysis, and SIEM/EDR tools.

Qualifications

• Minimum 5 years of DFIR experience and incident response expertise.
• Strong understanding of IR lifecycle, DFIR methodologies, and MITRE ATT&CK.
• Experience with Windows and Linux operating systems and networking basics.
• Hands-on memory, disk, and network forensics; malware analysis skills.
• Familiarity with SIEM/EDR/Email security technologies and related tools.

Responsibilities

• Lead and support response during critical cybersecurity incidents.
• Investigate ransomware, malware, insider threats, data breaches, and BEC.
• Conduct detailed forensic investigations to determine scope, root cause, and remediation.
• Perform forensic analysis of endpoints, servers, cloud, and mobile devices.
• Develop incident response playbooks and documentation; mentor the team.

Skills

DFIR Experience

IR Lifecycle

MITRE ATT&CK

Threat Investigation

Windows & Linux

Networking Fundamentals

Memory Forensics

Malware Analysis

SIEM & EDR

Education

GCFA

GCFE

GNFA

GIAC Certifications

Tools

FTK

Autopsy

Volatility

EnCase

Magnet AXIOM

SIFT

REMnux

Job description

Accenture in the Philippines is seeking an experienced DFIR Associate Manager to lead high-impact cybercrime investigations and fortify client defenses. You will supervise incident response, conduct complex forensic analyses, and mentor a growing team in a hybrid Cubao-based setup.

The role requires strong DFIR background, MITRE ATT&CK mastery, and hands-on experience with memory/disk/network forensics, malware analysis, and SIEM/EDR tools.