DFIR Investigator: Cyber Incident Response & Forensics

Accenture PLC; Chicago (IL); Presencial; USD 34.000 - 86.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical insurance

Dental insurance

Vision insurance

Life insurance

Long-term disability coverage

401(k) plan

Bonus opportunities

Paid holidays

Paid time off

Descripción de la vacante

Accenture is seeking a digital forensics and incident response Investigator to join the DFIR team. You will support evidence collection, forensic analysis, threat hunting, and preparation of findings for client engagements across industries.

Travel for on-site assignments may be required. The role requires 2+ years of relevant DFIR experience, foundational evidence handling skills, and hands-on work with forensic tools.

Formación

• 2+ years in digital forensics, incident response, cybersecurity investigations, or related technical work.
• Foundational experience collecting, preserving, and analyzing digital evidence using established procedures.
• 2+ years of experience with cybersecurity incidents, attacker techniques, operating systems, and security logs.
• 2+ years using or supporting forensic, endpoint detection and response, or security analysis tools.
• Bachelor's degree or equivalent work experience (minimum 12 years); if Associate’s Degree, minimum 6 years of work experience.
• Ability to document technical analysis and communicate findings in writing and verbally.
• One recognized DFIR certification (e.g., GCFE, GCIH, GCFA) or progress toward an equivalent certification.
• Exposure to cloud/identity investigations involving Microsoft 365, Entra ID, Azure, or AWS.
• Familiarity with threat hunting, malware triage, memory analysis, or network forensics.
• Experience in ransomware, phishing, BEC, or unauthorized-access investigations.

Responsabilidades

• Support collection, preservation, processing, and analysis of digital evidence from endpoints, servers, and other sources.
• Assist investigations of ransomware, business email compromise, unauthorized access, and other cybersecurity incidents.
• Use approved forensic tools, endpoint telemetry, and security logs for analysis and threat hunting.
• Complete assigned investigative tasks with guidance, maintain notes, and raise questions or risks.
• Prepare investigative notes, evidence summaries, and draft reports for review by seniors.
• Participate in client discussions and internal updates, communicating findings professionally.
• Support practice operations, including evidence-handling systems and DFIR tooling.
• Travel may be required for on-site incident response assignments.

Conocimientos

Digital forensics

Incident response

Evidence collection

Forensic tools

Threat hunting

Report writing

Client communication

Team collaboration

Educación

Bachelor's degree or equivalent

Herramientas

Microsoft 365

Microsoft Entra ID

Azure

AWS

Descripción del empleo

Accenture is seeking a digital forensics and incident response Investigator to join the DFIR team. You will support evidence collection, forensic analysis, threat hunting, and preparation of findings for client engagements across industries.

Travel for on-site assignments may be required. The role requires 2+ years of relevant DFIR experience, foundational evidence handling skills, and hands-on work with forensic tools.