Cyber Investigative Analyst: Threat Hunting & Response

Accenture PLC; Lorton (VA); On-site; USD 106,000 - 206,000; Full time

Job summary

Accenture Federal Services seeks an Investigative Analyst to strengthen the security posture of critical systems and respond to advanced threats. You will apply policy, tools, and attack frameworks to rapid investigations and remediation, often outside core hours, with on-call responsibilities.

You will evaluate risks, hunt threats, and document findings while collaborating across teams to enhance SecOps capabilities and exercise resilience. A TS/SCI-level clearance is required for consideration.

Qualifications

• Bachelor's degree in Cybersecurity/IT or related field with 2+ years hands-on Cybersecurity experience or 3+ years hands-on Cybersecurity experience without a degree.
• 1+ year of experience in a cloud environment (Azure preferred).
• 1+ year hands-on with enterprise vulnerability management tools.
• 2+ years experience with querying languages.
• DoD 8570 IAT Level 2 or DoD 8140 certification and willingness to maintain certification.
• Strong understanding of Windows and/or Linux operating systems.
• Willingness to obtain Microsoft SC-200 within 6 months of onboarding.

Responsibilities

• Evaluate security risks and impacts.
• Proactively hunt and monitor for indications of misuse or attack.
• Investigate and remediate misuse and attacks (including basic forensics).
• Document events via technical reports and Incident Management protocols.
• Create, maintain, and enforce SecOps tools, capabilities, and processes.
• Lead and participate in Cybersecurity exercises.

Skills

APTs knowledge

Threat hunting

Windows/Linux

Query languages

Cloud Azure

SC-200 readiness

TS/SCI clearance

Education

Bachelor's degree in Cybersecurity/IT

Tools

Splunk

HBSS

ACAS

Microsoft Security Products

Job description

Accenture Federal Services seeks an Investigative Analyst to strengthen the security posture of critical systems and respond to advanced threats. You will apply policy, tools, and attack frameworks to rapid investigations and remediation, often outside core hours, with on-call responsibilities.

You will evaluate risks, hunt threats, and document findings while collaborating across teams to enhance SecOps capabilities and exercise resilience. A TS/SCI-level clearance is required for consideration.