DFIR Investigator: Digital Forensics & Incident Response

Accenture PLC; Oklahoma City (OK); On-site; USD 39,000 - 99,000; Full time

Job summary

Accenture is seeking a DFIR Investigator to join our specialized security team and help clients across industries respond to cyber incidents. You will support evidence collection, forensic analysis, threat hunting, and preparation of findings under guidance from experienced investigators.

You will work with endpoints, servers, and logs, documenting work notes, maintaining evidence integrity, and communicating technical information professionally in client discussions and internal reviews.

Qualifications

• Minimum of 2 years in digital forensics, incident response, cybersecurity investigations, or related technical work.
• Minimum of 2 years collecting, preserving, and analyzing digital evidence using established procedures.
• Minimum of 2 years working knowledge of cybersecurity incidents, attacker techniques, operating systems, and security logs.
• Minimum of 2 years using or supporting forensic, endpoint detection and response, or security analysis tools.
• Bachelor's degree or equivalent (minimum 12 years) work experience; Associates requires minimum 6 years.

Responsibilities

• Support collection, preservation, processing, and analysis of digital evidence from endpoints, servers, and other sources, with proper documentation.
• Assist investigations of ransomware, business email compromise, unauthorized access, and related incidents by examining evidence.
• Use approved forensic tools, endpoint telemetry, and security logs to conduct analysis and contribute to threat hunting and IR activities.
• Complete tasks with guidance, maintain clear work notes, meet delivery expectations, and raise questions or risks promptly.
• Prepare investigative notes, evidence summaries, technical findings, and draft reports for senior review.
• Participate in client discussions and internal updates, communicating technical information professionally.
• Support DFIR practice operations, including evidence-handling systems, tools, documentation, and process improvements.

Skills

Digital forensics

Incident response

Cyber investigations

Evidence handling

Report writing

Education

Bachelor's degree

Tools

Forensic tools

EDR tools

Security analytics tools

Job description

Accenture is seeking a DFIR Investigator to join our specialized security team and help clients across industries respond to cyber incidents. You will support evidence collection, forensic analysis, threat hunting, and preparation of findings under guidance from experienced investigators.

You will work with endpoints, servers, and logs, documenting work notes, maintaining evidence integrity, and communicating technical information professionally in client discussions and internal reviews.