Digital Forensics & Incident Response Specialist

Accenture PLC; Arlington (VA); On-site; USD 70,000 - 153,000; Full time

Job summary

Accenture Federal Services is seeking a skilled Cyber Forensic Specialist to join our DFIR team. You will support the Cyber Incident Response Team (CIRT) by performing expert-level digital forensics, investigating incidents, and collaborating with HR, Legal, and Insider Threat to handle sensitive internal investigations.

Responsibilities include evidence intake, eDiscovery-related data captures, litigation holds, and maintaining chain of custody.

Qualifications

• 3-5 years of experience in information security or equivalent work experience.
• 3+ years of experience performing digital forensics on physical and cloud systems.
• 2+ years of experience with SIEM and event/log analysis across multiple tools.
• 1+ years collecting, processing, reviewing, and producing ESI for legal teams.
• Ability to work independently and communicate complex technical information clearly.

Responsibilities

• DFIR Support: investigate incidents, perform forensic analysis, and provide containment and recovery guidance.
• Investigative Support: conduct internal investigations with HR, Legal, and Insider Threat teams.
• Litigation Holds and eDiscovery: preserve and collect ESI, stay compliant with legal requirements.
• Evidence Intake and Management: maintain chain of custody and documentation for digital evidence.
• Process Optimization and Tooling: leverage forensic tools and document improved methodologies.
• Collaboration and Training: guide CIRT and other teams on forensic processes.

Skills

Digital forensics

Incident response

Evidence handling

Report writing

Collaboration

Tools

EnCase

FTK

X-Ways

Cellebrite

Job description

Accenture Federal Services is seeking a skilled Cyber Forensic Specialist to join our DFIR team. You will support the Cyber Incident Response Team (CIRT) by performing expert-level digital forensics, investigating incidents, and collaborating with HR, Legal, and Insider Threat to handle sensitive internal investigations.

Responsibilities include evidence intake, eDiscovery-related data captures, litigation holds, and maintaining chain of custody.