Senior DFIR Lead: Incident Response & Forensics

Accenture Federal Services; Germantown (MD); On-site; USD 100,200 - 203,400; Full time

Job summary

Accenture Federal Services seeks a seasoned Incident Response & Digital Forensics Lead in Germantown, MD. You will lead the IR & Forensics team and coordinate briefings with clients and senior leadership on incident responses.

Requirements: 7+ years in IR/forensics, GCFE or GCIH, and hands-on with Magnet, GrayKey, EnCase or Cellebrite. Must have TS clearance, US citizenship, and be onsite in Germantown one day per week.

Qualifications

• Minimum 7+ years of practical experience in cyber incident response and digital forensics.
• Certifications: GCFE OR GCIH
• Proficiency in tools: Magnet, GrayKey, EnCase, or Cellebrite.
• Expertise in cloud security, endpoint security, access management, and secure networking.

Responsibilities

• Lead and manage the Incident Response & Forensics team.
• Deliver briefings and coordinate with clients and senior leadership on incident responses.
• Analyze intrusion artifacts to mitigate cyber threats.
• Manage and own service delivery and capacity models for digital forensics and incident response offerings.
• Provide technical support across enterprise cyber defense teams.
• Build DFIR analysts skillsets through technical mentorship and structured training on incident response and forensic methodologies.
• Oversee incident response operations and ensure effective threat handling.
• Monitor external sources for emerging threats.

Skills

Incident response

Digital forensics

Threat analysis

Mentorship

Education

GCFE OR GCIH

Tools

Magnet

GrayKey

EnCase

Cellebrite

Job description

Accenture Federal Services seeks a seasoned Incident Response & Digital Forensics Lead in Germantown, MD. You will lead the IR & Forensics team and coordinate briefings with clients and senior leadership on incident responses.

Requirements: 7+ years in IR/forensics, GCFE or GCIH, and hands-on with Magnet, GrayKey, EnCase or Cellebrite. Must have TS clearance, US citizenship, and be onsite in Germantown one day per week.