Digital Forensics & Incident Response Specialist

Job description

We Are Accenture is a global collective of innovators whose aim is to improve the way the world works and lives. Empowered with innovative tools, continuous learning, and a global community of diverse talent, we help clients address their most complex challenges. Accenture Security helps organizations prepare for, detect, respond to, and recover from cyber incidents. Our Digital Forensics & Incident Response (DFIR) team combines deep investigative expertise, incident response capabilities, and practical client guidance to help organizations understand and contain cyber threats, determine what happened, and recover with confidence. You Are A curious, detail-oriented digital forensics and incident response professional who enjoys solving technical problems and helping clients understand cybersecurity incidents. You bring foundational investigative skills, a commitment to preserving the integrity of evidence, and a willingness to learn from experienced practitioners. You work effectively within a team, communicate your findings clearly, and consistently deliver accurate technical work with appropriate guidance. The Work You will be part of a specialized DFIR team responding to cybersecurity incidents and conducting forensic investigations for clients across industries. As an Investigator, you will support evidence collection, forensic analysis, threat hunting, preparation of findings, and other client engagement activities under the guidance of more experienced investigators. Projects and responsibilities might include: Supporting the collection, preservation, processing, and analysis of digital evidence from endpoints, servers, and other relevant sources, following established procedures and maintaining accurate documentation. Assisting with investigations of ransomware, business email compromise, unauthorized access, and other cybersecurity incidents by examining evidence and identifying relevant activity. Using approved forensic tools, endpoint telemetry, and security logs to conduct assigned analysis and contribute to threat hunting and incident response activities. Completing assigned investigative tasks with some guidance, maintaining clear work notes, meeting delivery expectations, and promptly raising questions, risks, or unexpected findings. Preparing accurate investigative notes, evidence summaries, technical findings, and draft report content for review by senior team members. Participating in client discussions and internal team updates, communicating technical information professionally, and supporting senior investigators in presenting findings. Supporting practice operations, including evidence-handling systems, investigative tools, documentation, training, and improvements to established DFIR processes. Travel may be required for this role. Travel will vary based on business needs and client requirements, including on-site incident response assignments. Here's What You Need Minimum of 2 years of relevant experience in digital forensics, incident response, cybersecurity investigations, or closely related technical work. Minimum of 2 years of foundational experience collecting, preserving, and analyzing digital evidence using established investigative procedures. Minimum of 2 years  working knowledge of cybersecurity incidents, common attacker techniques, operating systems, and security logs. Minimum of 2 years of experience using or supporting forensic, endpoint detection and response, or security analysis tools. Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate’s Degree, must have minimum 6 years work experience) Bonus Points If You Have Ability to document technical analysis and communicate findings accurately in writing and verbally. Ability to deliver assigned tasks with some guidance, manage priorities, and collaborate effectively in a client-service environment. One recognized DFIR certification, such as GCFE, GCIH, GCFA, or equivalent, or active progress toward an equivalent certification. Exposure to cloud or identity investigations involving Microsoft 365, Microsoft Entra ID, Azure, or AWS. Familiarity with threat hunting, malware triage, memory analysis, or network forensic concepts. Participation in ransomware, phishing, business email compromise, or unauthorized-access investigations. Experience preparing evidence logs, chain-of-custody records, or other defensible investigative documentation. Prior experience in a cybersecurity consulting, security operations, IT support, or incident response team. Compensation at Accenture varies depending on a wide array of factors, which may include but are not limited to the specific office location, role, skill set, and level of experience. As required by local law, Accenture provides a reasonable range of compensation for roles that may be hired as set forth below. We anticipate this job posting will be posted until 12/31/2026. Accenture offers a market competitive suite of benefits including medical, dental, vision, life, and long-term disability coverage, a 401(k) plan, bonus opportunities, paid holidays, and paid time off. See more information on our benefits here: U.S. Employee Benefits | Accenture Role Location Hourly Salary Range California $26.39 to $72.31 Colorado $26.39 to $62.45 Connecticut $26.39 to $62.45 District of Columbia $28.08 to $66.49 Illinois $24.42 to $62.45 Maine $22.45 to $53.22 Maryland $26.39 to $62.45 Massachusetts $26.39 to $66.49 Minnesota $26.39 to $62.45 New York $24.42 to $72.31 New Jersey $28.08 to $72.31 Ohio $24.42 to $57.84 Virginia $24.42 to $66.49 Washington $28.08 to $66.49 About Accenture Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.Visit us at www.accenture.com What We Believe We have an unwavering commitment to diversity with the aim that every one of our people has a full sense of belonging within our organization. As a business imperative, every person at Accenture has the responsibility to create and sustain an inclusive environment. Inclusion and diversity are fundamental to our culture and core values. Our rich diversity makes us more innovative and more creative, which helps us better serve our clients and our communities. Read more here Requesting An Accommodation Accenture is committed to providing e