Senior DFIR Investigator & Incident Response Lead

Accenture PLC; Chicago (IL); On-site; USD 59,000 - 178,000; Full time

Job summary

Accenture Security is seeking a hands-on technical leader specializing in Digital Forensics and Incident Response to guide complex investigations across diverse environments. You will mentor junior investigators, develop automation, and deliver defensible forensic findings to clients with a strategic, consultative approach.

The role involves leading multi-system workstreams, coordinating with stakeholders, and presenting results in client calls while advancing incident response capabilities

Qualifications

• Minimum 12 years of work experience with a Bachelor’s degree or 6 years with an Associate’s degree
• 4+ years of Digital Forensics and Incident Response (DFIR) experience handling complex investigations
• Ability to obtain US security clearances as required by client engagements
• Experience with enterprise incident response, digital forensics, and cyber investigations processes
• Familiarity with common DFIR toolsets (Volatility, X‑Ways, FTK, EnCase, Autopsy, etc.)
• OS independence across Windows, Linux, and macOS; memory forensics and malware analysis
• Experience building indicators of compromise and attacker TTPs; leading investigations and mentoring juniors
• Experience with Active Directory, enterprise environments, and standard attack patterns
• Strong project management, analytical, and client-facing communication skills
• Proven track record producing defensible, well-documented analyses
• Experience with remediation planning and threat-hunting on endpoints and networks

Responsibilities

• Lead complex forensic analyses including memory forensics, malware triage, and artifact recovery
• Perform host and network DFIR including log analysis and threat hunting for incident response
• Leverage EDR, cloud platforms (AWS/Azure/GCP), and threat intel to map attacker TTPs
• Conduct IR across Cloud, OT, and traditional environments
• Develop IOCs and comprehensive attack timelines
• Create automation tools and scripts to boost investigation efficiency
• Mentor 2–4 investigators across multiple cases
• Ensure quality on investigator findings before final review
• Lead medium to large workstreams (20–50+ systems) with minimal oversight
• Support Principal Investigators in technical decisions and strategy
• Translate strategy into tactical tasks for the team
• Communicate with customers and legal counsel throughout engagements
• Author client reports with defensible conclusions and present findings in client calls
• Support leadership in proper scoping with innovative approaches

Skills

Digital Forensics

Incident Response

Threat Analysis

Memory Forensics

Malware Analysis

Threat Hunting

Education

Bachelor's degree or equivalent (minimum 12 years) work experience

Tools

Volatility

X‑Ways

FTK

EnCase

Autopsy

Job description

Accenture Security is seeking a hands-on technical leader specializing in Digital Forensics and Incident Response to guide complex investigations across diverse environments. You will mentor junior investigators, develop automation, and deliver defensible forensic findings to clients with a strategic, consultative approach.

The role involves leading multi-system workstreams, coordinating with stakeholders, and presenting results in client calls while advancing incident response capabilities