DFIR Investigator: Cyber Incident Response & Forensics

Accenture PLC; Morristown (NJ); On-site; USD 39,000 - 99,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Paid holidays

Paid time off

Job summary

Accenture is seeking a DFIR Investigator to join a specialized team handling cybersecurity incidents and forensic inquiries for diverse clients. You will support evidence collection, forensic analyses, threat hunting, and findings preparation under senior guidance.

The role requires strong fundamentals in digital forensics, incident response, and documenting technical work, with on‑site engagement for varied client projects. Travel may be required.

Qualifications

• 2+ years in digital forensics or incident response.
• 2+ years collecting, preserving, and analyzing digital evidence.
• 2+ years knowledge of cybersecurity incidents, OS, and security logs.
• Bachelor’s degree or equivalent work experience; 12 years total, or 6 years with Associate degree.

Responsibilities

• Support evidence collection, preservation, and analysis across endpoints and servers.
• Assist investigations of ransomware, BEC, unauthorized access, and related incidents.
• Use approved forensic tools, endpoint telemetry, and security logs for analysis and threat hunting.
• Complete tasks with guidance, maintain work notes, raise risks or findings promptly.
• Prepare investigative notes, evidence summaries, and draft findings for review.
• Participate in client discussions and internal updates, presenting findings.
• Support DFIR practice operations and tool/process improvements.

Skills

Digital forensics

Incident response

Cybersecurity investigations

Evidence collection

Documentation

Education

Bachelor's degree

Tools

Forensic tools

EDR tools

Security logs

Job description

Accenture is seeking a DFIR Investigator to join a specialized team handling cybersecurity incidents and forensic inquiries for diverse clients. You will support evidence collection, forensic analyses, threat hunting, and findings preparation under senior guidance.

The role requires strong fundamentals in digital forensics, incident response, and documenting technical work, with on‑site engagement for varied client projects. Travel may be required.