Senior Investigator

Accenture Nordics; Stockholms kommun; Presencial; SEK 600.000 - 800.000; Jornada completa

Descripción de la vacante

Accenture Nordics is seeking an experienced Incident Response specialist to join our international team, focusing on rapid containment, root-cause analysis, and post-incident improvements across Nordic clients.

You will conduct digital forensics on devices, develop playbooks, participate in threat hunting, and collaborate with legal and management teams to strengthen security posture while working with leading security platforms in a multinational setting.

Formación

• Knowledge of file and memory forensics techniques and commonly used tools such as EnCase, Axiom, Autopsy, Kape, Plaso, Volatility, and FTK Suite.
• In-depth knowledge of cybersecurity operations, security monitoring, EDR and SIEM tools (CrowdStrike, Defender for Endpoint, VisionOne, Splunk).
• Experience in static/dynamic malware analysis using tools like IDA Pro, OllyDbg, REMnux and related disassemblers.
• Strong Windows and Unix/Linux OS familiarity and admin tooling.
• Proficiency in English and Swedish, plus ability to pass Security Clearances in Sweden.

Responsabilidades

• Perform incident response to cybersecurity incidents across a range of threats (APT, ransomware, data breaches).
• Conduct in-depth investigations to identify root causes, impact, containment and recovery actions, with final reports and improvement recommendations.
• Collaborate with cross-functional teams and communicate findings to management and legal stakeholders.
• Perform digital forensics examinations on devices to collect, analyze, and preserve evidence.
• Develop and update incident response plans, playbooks, and standard procedures.
• Participate in threat hunting activities to identify weaknesses and emerging threats.
• Assist in implementing and tuning security tools to enhance detection and response capabilities.
• Conduct training sessions to educate employees on cybersecurity best practices.

Conocimientos

Incident response

Digital forensics

Threat hunting

EDR and SIEM

Malware analysis

Windows & Unix

English & Swedish

Security clearances Sweden

Herramientas

EnCase

Axiom

Autopsy

Kape

Plaso

Volatility

FTK Suite

CrowdStrike

Microsoft Defender for Endpoint

TrendMicro VisionOne

Splunk

IDA Pro

OllyDbg

REMnux

Wireshark

Descripción del empleo

Your role and opportunities

Join our international network of talents in the Incident Response field. You will work with innovative technologies on exciting projects, developing solutions to manage data securely. Specifically, you will be able to:

Responsibilities

• Perform incident response to cybersecurity incidents, including but not limited to APT & Nation State attacks, Ransomware infections and Malware outbreaks, Insider Threats, BEC, DDOS, Security and Data breach, etc.
• Conduct in-depth investigations of cybersecurity incidents, identifying the root cause, the extent of the impact, and recommended actions for containment, eradication, and recovery, and providing a final report that contains recommendations on how to prevent the same attack in the future by strengthening security posture.
• Collaborate with cross-functional teams to gather information, coordinate incident response efforts, and communicate findings to relevant stakeholders, including management and legal teams.
• Perform digital forensics examinations on various digital devices (workstations, servers, mobile devices, etc.) to collect, analyze, and preserve evidence related to security incidents or policy violations.
• Develop/Update incident response plan, playbooks, process, and process documentation to ensure standardized incident response procedures.
• Participate in threat hunting activities, proactively seeking out and identifying potential security threats and weaknesses.
• Assist in implementing and fine-tuning security tools and technologies to enhance threat detection and incident response capabilities.
• Conduct training sessions and workshops to educate employees on cybersecurity best practices and incident response procedures.
• Work closely with the Nordic clients to ensure quality relationships.

If you share our passion for cybersecurity and have the following characteristics, we are looking forward to meeting you:

• Knowledge of file and memory forensics techniques and commonly used tools such as EnCase, Axiom, Autopsy, Kape, Plaso, Volatility, and FTK Suite.
• Good command of incident management and response processes and procedures.
• In-depth knowledge of cybersecurity operations, security monitoring, EDR and SIEM tools, including Crowdstrike, Microsoft Defender for Endpoint, TrendMicro VisionOne, and Splunk.
• Experience in conducting static or dynamic malware analysis, using solutions such as IDA Pro, OllyDbg, REMnux distro, and other disassemblers/debuggers.
• Detailed knowledge of Windows and Unix-based operating systems and administrative tools.
• Proficiency in English & Swedish.
• Ability to pass Security Clearances in Sweden
• Familiarity with disk and memory forensic analysis (Windows, Unix, or Linux environments).
• Knowledge of security controls such as authentication and identity management, network architectures enhanced for security, and application-based controls (including Windows, Unix, and network equipment).
• Proficiency in network traffic analysis and protocols using tools such as Wireshark.
• Interest to work closely with the clients, building relationships.

Please expect slower feedback on your application due to summer vacation period, until August 11.