Senior Investigator

Accenture; Stockholms kommun; On-site; SEK 700,000 - 1,000,000; Full time

Job summary

Accenture in Sweden seeks an Incident Response Specialist to join our international cybersecurity team. You will work on cutting-edge projects, performing forensic investigations and building incident response playbooks to manage data securely.

You will collaborate with cross-functional teams and Nordic clients, coordinate response efforts, and provide final reports with containment and recovery recommendations.

Qualifications

• Experience in incident response to cybersecurity incidents across multiple threat types.
• Proficiency with security monitoring, EDR and SIEM tools.
• Strong ability to coordinate with stakeholders and communicate findings.

Responsibilities

• Perform incident response to cybersecurity incidents, including APT & Nation State attacks, ransomware infections, malware outbreaks, insider threats, BEC, DDOS, data breaches.
• Conduct in-depth investigations to identify root cause, impact, and containment actions.
• Collaborate with cross-functional teams to coordinate incident response and report findings to management and legal teams.
• Perform digital forensics on devices to collect, preserve, and analyze evidence.
• Develop/update incident response plans, playbooks, and process documentation.
• Participate in threat hunting to identify threats and weaknesses.
• Assist in implementing and tuning security tools to enhance detection and response.
• Conduct training sessions on cybersecurity best practices and response procedures.
• Work with Nordic clients to maintain quality relationships.

Skills

Incident response

Digital forensics

Threat hunting

Security operations

Stakeholder communication

English & Swedish

Security clearances

Windows and Unix

Tools

EnCase

Axiom

Autopsy

Kape

Plaso

Volatility

FTK Suite

IDA Pro

OllyDbg

REMnux

Wireshark

CrowdStrike

Microsoft Defender for Endpoint

TrendMicro VisionOne

Splunk

Job description

At Accenture, you can bring your innovative vision to the heart of change to transform entire market sectors. Shape the future of business and technology by developing cutting‑edge solutions that create new value.

Your role and opportunities

Join our international network of talents in the Incident Response field. You will work with innovative technologies on exciting projects, developing solutions to manage data securely. Specifically, you will be able to:

• Perform incident response to cybersecurity incidents, including but not limited to APT & Nation State attacks, Ransomware infections and Malware outbreaks, Insider Threats, BEC, DDOS, Security and Data breach, etc.
• Conduct in‑depth investigations of cybersecurity incidents, identifying the root cause, the extent of the impact, and recommended actions for containment, eradication, and recovery, and providing a final report that contains recommendations on how to prevent the same attack in the future by strengthening security posture.
• Collaborate with cross‑functional teams to gather information, coordinate incident response efforts, and communicate findings to relevant stakeholders, including management and legal teams.
• Perform digital forensics examinations on various digital devices (workstations, servers, mobile devices, etc.) to collect, analyze, and preserve evidence related to security incidents or policy violations.
• Develop/Update incident response plan, playbooks, process, and process documentation to ensure standardized incident response procedures.
• Participate in threat hunting activities, proactively seeking out and identifying potential security threats and weaknesses.
• Assist in implementing and fine‑tuning security tools and technologies to enhance threat detection and incident response capabilities.
• Conduct training sessions and workshops to educate employees on cybersecurity best practices and incident response procedures.
• Work closely with the Nordic clients to ensure quality relationships.

Qualifications

If you share our passion for cybersecurity and have the following characteristics, we are looking forward to meeting you:

• Knowledge of file and memory forensics techniques and commonly used tools such as EnCase, Axiom, Autopsy, Kape, Plaso, Volatility, and FTK Suite.
• Good command of incident management and response processes and procedures.
• In‑depth knowledge of cybersecurity operations, security monitoring, EDR and SIEM tools, including Crowdstrike, Microsoft Defender for Endpoint, TrendMicro VisionOne, and Splunk.
• Experience in conducting static or dynamic malware analysis, using solutions such as IDA Pro, OllyDbg, REMnux distro, and other disassemblers/debuggers.
• Detailed knowledge of Windows and Unix‑based operating systems and administrative tools.
• Proficiency in English & Swedish.
• Ability to pass Security Clearances in Sweden
• Familiarity with disk and memory forensic analysis (Windows, Unix, or Linux environments).
• Knowledge of security controls such as authentication and identity management, network architectures enhanced for security, and application‑based controls (including Windows, Unix, and network equipment).
• Proficiency in network traffic analysis and protocols using tools such as Wireshark.
• Interest to work closely with the clients, building relationships.

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, sexual orientation, gender identity or expression, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.