DFIR Investigator: Cyber Incident Response & Forensics

Accenture PLC; Irving (TX); On-site; USD 36,000 - 99,000; Full time

Job summary

Accenture is seeking a DFIR Investigator to join the specialized DFIR team in the United States. You will support evidence collection, forensic analysis, threat hunting, and client engagements under guidance from senior investigators.

The role focuses on documenting findings, maintaining chain-of-custody, and contributing to incident response across industries. Travel may be required for on-site assignments and client meetings.

Qualifications

• Minimum of 2 years of relevant experience in digital forensics, incident response, cybersecurity investigations, or closely related technical work.
• Minimum of 2 years of foundational experience collecting, preserving, and analyzing digital evidence using established investigative procedures.
• Minimum of 2 years working knowledge of cybersecurity incidents, common attacker techniques, operating systems, and security logs.
• Minimum of 2 years of experience using or supporting forensic, endpoint detection and response, or security analysis tools.
• Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate’s Degree, must have minimum 6 years work experience)

Responsibilities

• Supporting evidence collection, preservation, processing, and analysis of digital evidence from endpoints, servers, and other relevant sources, following established procedures and maintaining accurate documentation.
• Assisting with investigations of ransomware, business email compromise, unauthorized access, and other cybersecurity incidents by examining evidence and identifying relevant activity.
• Using approved forensic tools, endpoint telemetry, and security logs to conduct assigned analysis and contribute to threat hunting and incident response activities.
• Completing assigned investigative tasks with some guidance, maintaining clear work notes, meeting delivery expectations, and promptly raising questions, risks, or unexpected findings.
• Preparing accurate investigative notes, evidence summaries, technical findings, and draft report content for review by senior team members.
• Participating in client discussions and internal team updates, communicating technical information professionally, and supporting senior investigators in presenting findings.
• Supporting practice operations, including evidence-handling systems, investigative tools, documentation, training, and improvements to established DFIR processes.

Skills

Digital forensics

Incident response

Cybersecurity investigations

Evidence handling

Forensic tools

Education

Bachelor's degree or equivalent (12 years) work experience

Tools

Forensic tools

Endpoint telemetry

Security logs

Job description

Accenture is seeking a DFIR Investigator to join the specialized DFIR team in the United States. You will support evidence collection, forensic analysis, threat hunting, and client engagements under guidance from senior investigators.

The role focuses on documenting findings, maintaining chain-of-custody, and contributing to incident response across industries. Travel may be required for on-site assignments and client meetings.