Senior Investigator

Accenture Nordics; Stockholms kommun; On-site; SEK 700,000 - 1,000,000; Full time

Job summary

Accenture Nordics in Sweden is seeking an experienced cybersecurity professional to join our Incident Response team in Sweden. You will tackle complex security incidents, conduct investigations, and help strengthen our clients' security posture across the Nordic region.

You will work with leading tools (EDR, SIEM, forensics) and collaborate with cross-functional teams, including legal and management, to contain threats, recover operations, and share lessons learned with clients and internal

Qualifications

• Experience with incident response and security monitoring procedures.
• Knowledge of Windows and Unix/Linux operating systems.
• Fluent in English and Swedish.
• Ability to pass Security Clearances in Sweden.
• Experience with forensics tools: EnCase, Axiom, Autopsy, Kape, FTK Suite.

Responsibilities

• Perform incident response to cybersecurity incidents, including APTs, ransomware, and data breaches.
• Conduct investigations to determine root cause and containment actions.
• Collaborate with cross-functional teams and communicate findings to stakeholders.
• Perform digital forensics on workstations, servers, and mobile devices.
• Develop and update incident response playbooks and documentation.
• Participate in threat hunting activities.
• Assist in implementing security tools to enhance detection and response.
• Train employees on cybersecurity best practices.
• Work with Nordic clients to maintain relationships.

Skills

Incident response

Digital forensics

Threat hunting

EDR tools

SIEM tools

English & Swedish

Tools

EnCase

Axiom

Autopsy

Kape

Plaso

Volatility

FTK Suite

CrowdStrike

Microsoft Defender for Endpoint

Splunk

Wireshark

Job description

At Accenture, you can bring your innovative vision to the heart of change to transform entire market sectors. Shape the future of business and technology by developing cutting-edge solutions that create new value.

Your role and opportunities

Join our international network of talents in the Incident Response field. You will work with innovative technologies on exciting projects, developing solutions to manage data securely. Specifically, you will be able to:

Responsibilities

• Perform incident response to cybersecurity incidents, including but not limited to APT & Nation State attacks, Ransomware infections and Malware outbreaks, Insider Threats, BEC, DDOS, Security and Data breach, etc.
• Conduct in-depth investigations of cybersecurity incidents, identifying the root cause, the extent of the impact, and recommended actions for containment, eradication, and recovery, and providing a final report that contains recommendations on how to prevent the same attack in the future by strengthening security posture.
• Collaborate with cross-functional teams to gather information, coordinate incident response efforts, and communicate findings to relevant stakeholders, including management and legal teams.
• Perform digital forensics examinations on various digital devices (workstations, servers, mobile devices, etc.) to collect, analyze, and preserve evidence related to security incidents or policy violations.
• Develop/Update incident response plan, playbooks, process, and process documentation to ensure standardized incident response procedures.
• Participate in threat hunting activities, proactively seeking out and identifying potential security threats and weaknesses.
• Assist in implementing and fine-tuning security tools and technologies to enhance threat detection and incident response capabilities.
• Conduct training sessions and workshops to educate employees on cybersecurity best practices and incident response procedures.
• Work closely with the Nordic clients to ensure quality relationships.

If you share our passion for cybersecurity and have the following characteristics, we are looking forward to meeting you:

• Knowledge of file and memory forensics techniques and commonly used tools such as EnCase, Axiom, Autopsy, Kape, Plaso, Volatility, and FTK Suite.
• Good command of incident management and response processes and procedures.
• In-depth knowledge of cybersecurity operations, security monitoring, EDR and SIEM tools, including Crowdstrike, Microsoft Defender for Endpoint, TrendMicro VisionOne, and Splunk.
• Experience in conducting static or dynamic malware analysis, using solutions such as IDA Pro, OllyDbg, REMnux distro, and other disassemblers/debuggers.
• Detailed knowledge of Windows and Unix-based operating systems and administrative tools.
• Proficiency in English & Swedish.
• Ability to pass Security Clearances in Sweden
• Familiarity with disk and memory forensic analysis (Windows, Unix, or Linux environments).
• Knowledge of security controls such as authentication and identity management, network architectures enhanced for security, and application-based controls (including Windows, Unix, and network equipment).
• Proficiency in network traffic analysis and protocols using tools such as Wireshark.
• Interest to work closely with the clients, building relationships.

Please expect slower feedback on your application due to summer vacation period, until August 11.

//Accenture Security Recruitment Team