Digital Forensics & Incident Response Specialist

Accenture PLC; Oklahoma City (OK); On-site; USD 33,000 - 99,000; Full time

Job summary

Accenture is seeking a digital forensics and incident response Investigator to join our DFIR team. You will support evidence collection, forensic analysis, threat hunting, and client engagements under senior guidance.

Responsibilities include documenting findings, drafting reports, and presenting technical information to clients. Travel to client sites may be required; a strong foundation in forensics and incident response is essential.

Qualifications

• Minimum 2 years in digital forensics, incident response, or related work.
• Minimum 2 years collecting, preserving, and analyzing digital evidence.
• Minimum 2 years knowledge of cybersecurity incidents, attacker techniques and logs.
• Minimum 2 years experience with forensic or security analysis tools.
• Bachelor's degree or equivalent work experience.

Responsibilities

• Support evidence collection, forensic analysis, threat hunting, and client engagements under supervision.
• Prepare investigative notes, evidence summaries, and draft findings for review.
• Contribute to client discussions and internal updates with clear technical communication.
• Assist with practice operations, tools, and DFIR process improvements.
• Travel may be required for on-site incident response engagements.

Skills

Digital forensics

Incident response

Evidence collection

Forensic analysis

Threat hunting

Security logs

Education

Bachelor's degree

Tools

Forensic tools

EDR tools

Security analysis tools

Job description

We Are

Accenture is a global collective of innovators whose aim is to improve the way the world works and lives. Empowered with innovative tools, continuous learning, and a global community of diverse talent, we help clients address their most complex challenges.

Accenture Security helps organizations prepare for, detect, respond to, and recover from cyber incidents. Our Digital Forensics & Incident Response (DFIR) team combines deep investigative expertise, incident response capabilities, and practical client guidance to help organizations understand and contain cyber threats, determine what happened, and recover with confidence.

You Are

A curious, detail-oriented digital forensics and incident response professional who enjoys solving technical problems and helping clients understand cybersecurity incidents. You bring foundational investigative skills, a commitment to preserving the integrity of evidence, and a willingness to learn from experienced practitioners. You work effectively within a team, communicate your findings clearly, and consistently deliver accurate technical work with appropriate guidance.

The Work

You will be part of a specialized DFIR team responding to cybersecurity incidents and conducting forensic investigations for clients across industries. As an Investigator, you will support evidence collection, forensic analysis, threat hunting, preparation of findings, and other client engagement activities under the guidance of more experienced investigators.

Projects and responsibilities might include:

• Supporting the collection, preservation, processing, and analysis of digital evidence from endpoints, servers, and other relevant sources, following established procedures and maintaining accurate documentation.
• Assisting with investigations of ransomware, business email compromise, unauthorized access, and other cybersecurity incidents by examining evidence and identifying relevant activity.
• Using approved forensic tools, endpoint telemetry, and security logs to conduct assigned analysis and contribute to threat hunting and incident response activities.
• Completing assigned investigative tasks with some guidance, maintaining clear work notes, meeting delivery expectations, and promptly raising questions, risks, or unexpected findings.
• Preparing accurate investigative notes, evidence summaries, technical findings, and draft report content for review by senior team members.
• Participating in client discussions and internal team updates, communicating technical information professionally, and supporting senior investigators in presenting findings.
• Supporting practice operations, including evidence-handling systems, investigative tools, documentation, training, and improvements to established DFIR processes.

Travel may be required for this role. Travel will vary based on business needs and client requirements, including on-site incident response assignments.

Here’s What You Need

• Minimum of 2 years of relevant experience in digital forensics, incident response, cybersecurity investigations, or closely related technical work.
• Minimum of 2 years of foundational experience collecting, preserving, and analyzing digital evidence using established investigative procedures.
• Minimum of 2 years working knowledge of cybersecurity incidents, common attacker techniques, operating systems, and security logs.
• Minimum of 2 years of experience using or supporting forensic, endpoint detection and response, or security analysis tools.
• Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate’s Degree, must have minimum 6 years work experience)

Bonus Points If You Have

• Ability to document technical analysis and communicate findings accurately in writing and verbally.
• Ability to deliver assigned tasks with some guidance, manage priorities, and collaborate effectively in a client-service environment.
• One recognized DFIR certification, such as GCFE, GCIH, GCFA, or equivalent, or active progress toward an equivalent certification.
• Exposure to cloud or identity investigations involving Microsoft 365, Microsoft Entra ID, Azure, or AWS.
• Familiarity with threat hunting, malware triage, memory analysis, or network forensic concepts.
• Participation in ransomware, phishing, business email compromise, or unauthorized-access investigations.
• Experience preparing evidence logs, chain-of-custody records, or other defensible investigative documentation.
• Prior experience in a cybersecurity consulting, security operations, IT support, or incident response team.

Compensation at Accenture varies depending on a wide array of factors, which may include but are not limited to the specific office location, role, skill set, and level of experience. As required by local law, Accenture provides a reasonable range of compensation for roles that may be hired as set forth below.

We anticipate this job posting will be posted until 12/31/2026.

• Accenture offers a market competitive suite of benefits including medical, dental, vision, life, and long-term disability coverage, a 401(k) plan, bonus opportunities, paid holidays, and paid time off. See more information on our benefits here:

U.S. Employee Benefits | Accenture

Role Location Hourly Salary Range

California $26.39 to $72.31

Colorado $26.39 to $62.45

Connecticut $26.39 to $62.45

District of Columbia $28.08 to $66.49

Illinois $24.42 to $62.45

Maine $22.45 to $53.22

Maryland $26.39 to $62.45

Massachusetts $26.39 to $66.49

Minnesota $26.39 to $62.45

New York $24.42 to $72.31

New Jersey $28.08 to $72.31

Ohio $24.42 to $57.84

Virginia $24.42 to $66.49

Washington $28.08 to $66.49

Requesting an Accommodation

Accenture is committed to providing equal employment opportunities for persons with disabilities or religious observances, including reasonable accommodation when needed. If you are hired by Accenture and require accommodation to perform the essential functions of your role, you will be asked to participate in our reasonable accommodation process. Accommodations made to facilitate the recruiting process are not a guarantee of future or continued accommodations once hired.

If you would like to be considered for employment opportunities with Accenture and have accommodation needs such as for a disability or religious observance, please call us toll free at 1 [phone] or send us an email or speak with your recruiter.

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences.All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.

For details, view a copy of theAccenture Equal Opportunity Statement

Accenture is an EEO and affirmat ive Action Employer of Veterans/Individuals with Disabilities.

Accenture is committed to providing veteran employment opportunities to our service men and women.

Other Employment Statements

Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States.

Candidates who are currently employed by a client of Accenture or an affiliated Accenture business may not be eligible for consideration.

Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process. Further, at Accenture a criminal conviction history is not an absolute bar to employment.

The Company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. Additionally, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company's legal duty to furnish information.

California requires additional notifications for applicants and employees. If you are a California resident, live in or plan to work from Los Angeles County upon being hired for this position, please click here for additional important information.

Please read Accenture’s Recruiting and Hiring Statement for more information on how we process your data during the Recruiting and Hiring process.