DFIR Investigator: Incident Response & Forensics Expert

Accenture PLC; Pittsburgh (Allegheny County); On-site; USD 36,000 - 99,000; Full time

Benefits offered by this job

Medical, dental, vision

Life and long-term disability

401(k) plan

Bonus opportunities

Paid holidays

Paid time off

Job summary

Accenture is seeking a dedicated DFIR Investigator to join our security practice. You will support evidence collection, forensic analysis, threat hunting, and client engagements under senior guidance.

Travel may be required for on-site incident response and investigations across industries, with a strong emphasis on preserving evidence integrity and delivering clear technical findings to stakeholders.

Qualifications

• Minimum of 2 years of relevant experience in digital forensics, incident response, cybersecurity investigations, or closely related technical work.
• Minimum of 2 years of foundational experience collecting, preserving, and analyzing digital evidence using established investigative procedures.
• Minimum of 2 years working knowledge of cybersecurity incidents, common attacker techniques, operating systems, and security logs.
• Minimum of 2 years of experience using or supporting forensic, endpoint detection and response, or security analysis tools.
• Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate’s Degree, must have minimum 6 years work experience)

Responsibilities

• Supporting evidence collection, preservation, processing, and analysis of digital evidence from endpoints, servers, and other sources, following procedures.
• Assisting with investigations of ransomware, business email compromise, unauthorized access, and other cybersecurity incidents by examining evidence.
• Using approved forensic tools, endpoint telemetry, and security logs to conduct analysis and contribute to threat hunting and incident response.
• Completing assigned investigative tasks with guidance, maintaining work notes, and raising questions or risks as needed.
• Preparing investigative notes, evidence summaries, and draft report content for review by senior team members.
• Participating in client discussions and internal updates, communicating technical information professionally.
• Supporting practice operations, including evidence-handling systems, tools, and DFIR process improvements.

Skills

Digital forensics

Incident response

Cybersecurity investigations

Forensic tools

Evidence collection

Education

Bachelor's degree or equivalent experience

Tools

Endpoint telemetry

Forensic tools

Job description

Accenture is seeking a dedicated DFIR Investigator to join our security practice. You will support evidence collection, forensic analysis, threat hunting, and client engagements under senior guidance.

Travel may be required for on-site incident response and investigations across industries, with a strong emphasis on preserving evidence integrity and delivering clear technical findings to stakeholders.