Cyber Investigative Analyst - Threat Hunter (TS/SCI)

Accenture-Federal-Services-2; Lorton (VA); On-site; USD 106,000 - 206,000; Full time

Job summary

Accenture Federal Services seeks an Investigative Analyst to strengthen security posture by applying cyber policy, tools, and threat-hunting across systems. You will investigate advanced attacks, monitor alerts for sensitive assets, and participate in on-call duties and high-priority investigations. A TS/SCI clearance is often required.

The role emphasizes collaboration, rapid remediation, and ongoing certification maintenance, with potential after-hours work and escalation from Triage Team.

Qualifications

• Bachelor’s degree in Cybersecurity, IT (or related field) and 2+ years of hands-on Cybersecurity OR, 3+ years in lieu of a Bachelor’s degree
• 1+ year of experience operating in a cloud environment (Azure preferred)
• 1+ years experience with enterprise vulnerability management tools
• 2+ years experience with querying languages
• DoD 8570 IAT Level 2 or DoD 8140 certification (willingness to maintain)
• Deep understanding of Windows and/or Linux operating systems
• Willingness to obtain Microsoft SC-200 within 6 months

Responsibilities

• Evaluating security risks and impacts
• Proactively hunting and monitoring for indications of misuse or attack
• Investigating and remediating misuse and attacks (basic forensics sometimes)
• Documenting events via technical reports and Incident Management protocols
• Creating, maintaining, updating SecOps tools, capabilities, and processes
• Leading and participating in Cybersecurity exercises

Skills

Cybersecurity

Cloud - Azure

Threat hunting

Forensics basics

Query languages

Windows/Linux OS

Security monitoring

Education

Bachelor’s degree in Cybersecurity or IT

Tools

Splunk

HBSS

ACAS

Microsoft Security Products

Job description

Accenture Federal Services seeks an Investigative Analyst to strengthen security posture by applying cyber policy, tools, and threat-hunting across systems. You will investigate advanced attacks, monitor alerts for sensitive assets, and participate in on-call duties and high-priority investigations. A TS/SCI clearance is often required.

The role emphasizes collaboration, rapid remediation, and ongoing certification maintenance, with potential after-hours work and escalation from Triage Team.