DFIR Investigator: Cyber Forensics & Incident Response

Accenture PLC; Miami (FL); On-site; USD 39,000 - 83,000; Full time

Job summary

Accenture is seeking an Investigator for its DFIR team to respond to cybersecurity incidents and conduct forensic investigations for clients across industries. You will support evidence collection, analysis, threat hunting, and the preparation of findings under experienced guidance.

Responsibilities include handling digital evidence, documenting processes, and assisting with client discussions. Travel for on-site incident response assignments may be required.

Qualifications

• 2+ years in digital forensics, incident response, or cyber investigations.
• 2+ years collecting, preserving, and analyzing digital evidence.
• 2+ years knowledge of cybersecurity incidents, attacker techniques, OS and logs.
• 2+ years experience with forensic/EDR/security analysis tools.
• Bachelor's degree or equivalent work experience (minimum 12 years total).

Responsibilities

• Support evidence collection, forensic analysis, threat hunting, and findings preparation under supervision.
• Assist investigations of ransomware, BEC, and unauthorized access.
• Use approved forensic tools and security logs for assigned analyses.
• Prepare investigative notes, evidence summaries, and draft reports for review.
• Participate in client discussions and internal updates, presenting findings.

Skills

Digital forensics

Evidence preservation

Threat hunting

Team communication

Attention to detail

Education

Bachelor's degree or equivalent

Tools

Forensic tools

Endpoint telemetry

Job description

Accenture is seeking an Investigator for its DFIR team to respond to cybersecurity incidents and conduct forensic investigations for clients across industries. You will support evidence collection, analysis, threat hunting, and the preparation of findings under experienced guidance.

Responsibilities include handling digital evidence, documenting processes, and assisting with client discussions. Travel for on-site incident response assignments may be required.