Investigator/AI Developer

Accenture PLC; City of Albany (NY); Presencial; USD 140.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical, dental, vision benefits

401(k) plan

Descripción de la vacante

Accenture plc is seeking a skilled cybersecurity investigator to drive investigations and build AI-powered tools for forensic workflows. You will lead memory forensics and threat hunting across cloud and on‑prem environments, translating findings into defensible client outputs.

You will design and automate investigative pipelines, collaborate with senior practitioners, and contribute to scalable solutions that speed up engagements. Travel may be required.

Formación

• Bachelor's degree or equivalent (minimum 12 years) work experience.
• Minimum 3 years in DFIR with complex investigations.
• Minimum 3 years in cybersecurity consulting and data-oriented development/analysis.
• Experience building tools used in professional practice.

Responsabilidades

• Conduct complex forensic investigations including memory forensics and malware triage.
• Support incident response with host and network forensics and log analysis.
• Develop indicators of compromise and defensible timelines.

Conocimientos

DFIR

Memory forensics

Threat hunting

Python

PowerShell

Power BI

SQL

AI coding assistants

Cloud platforms (AWS/Azure/GCP)

Educación

Bachelor's degree or equivalent (minimum 12 years) work experience

Herramientas

Volatility

X-Ways

FTK

EnCase

Autopsy

Descripción del empleo

We Are

A cybersecurity consulting practice focused on helping organizations build real resilience; before, during, and after an incident. We design and run high-impact client engagements, and we build the data-driven tools that make those engagements better. Our team doesn’t just deliver advice; we create the structured frameworks, interactive assets, and analytical products that clients take home and actually use. We’re growing a capability at the intersection of cybersecurity expertise and applied data and development skills, and we want people who can do both.

You Are

You're a builder and an investigator. You bring digital forensics expertise to complex incidents and the technical instincts to turn hard-won investigation experience into scalable, AI-powered tools that make the next engagement sharper. You're as comfortable leading a memory forensics workstream as you are in a Python notebook designing a pipeline that automates it. You think in structures — how to capture the right artifacts, surface the right signals, and produce outputs that drive defensible decisions for clients and teams alike.

You bring expert presence to client calls, can translate attacker TTPs for a CISO and a general counsel in the same breath, and stay composed when the path forward isn't defined. You pick up new domains, tools, and environments quickly — and you apply that same curiosity to both your investigations and your development work.

The Work

Investigations & Forensic Analysis

• Conduct complex forensic investigations including advanced memory forensics, malware triage, encrypted artifact recovery, and anti-forensics detection
• Perform host and network digital forensics, log analysis, and threat hunting in support of incident response engagements
• Leverage EDR solutions, cloud platforms (AWS, Azure, GCP), and threat intelligence to identify and document attacker TTPs
• Participate in incident response across cloud, OT, and traditional enterprise environments
• Develop indicators of compromise and contribute to comprehensive, defensible attack timelines

Tool & AI Development

• Design and build proprietary investigation tools, automation scripts, and data products that accelerate forensic workflows and improve team consistency
• Translate repeatable investigation processes into functional prototypes using AI-assisted development, low-code platforms, and data visualization tools (Power BI, Azure Data Services, Python, or similar)
• Apply generative AI and AI coding assistants as core development accelerators - not occasionally, but fluently - to reduce manual effort across triage, analysis, and reporting
• Govern the tools you build: documentation, version control, onboarding guides, and iteration based on real-world engagement feedback
• Collaborate with senior practitioners to identify where new tooling improves speed, quality, or scalability across service offerings

Client Engagement

• Interface with client stakeholders and legal counsel throughout the engagement lifecycle, both technically and strategically
• Author comprehensive, defensible written reports on investigative findings
• Present technical findings and tool outputs on client calls
• Support leadership in scoping engagements with methodical, innovative approaches

Travel may be required for this role. The amount of travel will vary from 0 to 100% depending on business need and client requirements.

Here’s What You Need

• Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate’s Degree, must have minimum 6 years work experience)
• Minimum of 3 years’ experience in:
  • DFIR with demonstrated expertise in complex investigations
  • Cybersecurity consulting and data-oriented development or analysis
  • Building tools that others use in professional practice
• Minimum of 3 years demonstrated experience in:
  • At least one data or development layer: Python, PowerShell, Power BI, Power Apps/Automate, SQL, or comparable stack
  • Common DFIR toolsets (Volatility, X-Ways, FTK, EnCase, Autopsy, etc.)
  • Microsoft Windows, GNU/Linux, and MacOS operating systems
  • Memory forensics
  • Enterprise environments, Active Directory, and common attack patterns
  • Threat hunting on both endpoints and networks
  • Industry recognized incident response lifecycles and frameworks (e.g., SANS, NIST, MITRE, etc.)
  • Producing accurate, defensible, well‑documented analysis
• Minimum of 1 year demonstrated experience in:
  • Using AI coding assistants and generative tools as a fluent part of your everyday development workflow
  • Azure and cloud‑native architectures; comfort using AI as a development accelerator

Bonus Points If

• Experience with cloud forensics across AWS, Azure, and GCP; OT/ICS environments a plus
• Malware analysis capabilities: unpacking, deobfuscation, behavior analysis, reverse engineering
• Experience with AI governance, responsible use frameworks, or tool validation in a security or consulting context

Compensation at Accenture varies depending on a wide array of factors, which may include but are not limited to the specific office location, role, skill set, and level of experience. As required by local law, Accenture provides a reasonable range of compensation for roles that may be hired as set forth below.

We anticipate this job posting will be posted until 11/15/2026.

Accenture offers a market competitive suite of benefits including medical, dental, vision, life, and long-term disability coverage, a 401(k) plan, bonus opportunities, paid holidays, and paid time off. See more information on our benefits here: U.S. Employee Benefits | Accenture

Role Location Annual