Skip to main content Skip to footer

Security CIFR Senior Investigator

multiple locations +view all Job No. r00175884 Full-time

Job Description

Our Cyber Investigation and Forensic Response (CIFR) practice is rapidly growing, and we are hiring mid to very senior level incident response and threat hunting professionals to work with our F500 enterprise customers. With our recent acquisitions we continue to enhance our incident response, threat hunting, forensics, threat intelligence, and purple teaming capabilities.     

With Accenture Security, you will be part of a specialized team to respond to some of the largest and most complex data breaches around the world, as well as conduct cyber threat hunting in some of the most complex business environments, leveraging a variety of tools and techniques. You will work in a fast paced and highly collaborative environment along with a diverse team of talent, in support of one mission – providing expert incident response services to Accenture customers 

The Work:

  • Lead end-to-end incident response investigations with Accenture’s customers

  • Identify and investigate intrusions to determine the cause and extent of the breach, by leveraging EDR solutions and threat intelligence sources

  • Conduct host forensics, network forensics, log analysis, and malware analysis in support of incident response investigations

  • Conduct threat hunting across customer’s networks with indicators of compromise, hunting for evidence of a compromise

  • Conduct incident response within various Cloud platforms

  • Identify attacker tools, tactics, and procedures to develop indicators of compromise

  • Develop and implement remediation plans in conjunction with incident response

  • Form and articulate expert opinions based on findings and analysis

  • Produce comprehensive and accurate oral and written reports and presentations for both technical and executive audiences

  • Effectively communicate and interface with customers, both technically and strategically, from the executive level to customers, stakeholders, and legal counsel

  • Support leadership in properly scoping engagements with innovative methodical approaches, based on customer requirements

  • Lead engagement delivery from kickoff through remediation, either on premises or remote, depending on the customer requirements

  • On-site, customer travel will be required for this position, with the requirement to travel up to 50%


Here's What You Need:

  • Minimum of 3 years of experience working with forensic file system and memory techniques, and the use of the most used toolsets, such as EnCase and FTK Suite

  • Minimum of 3 years of experience working with methods utilized for evidence collection, maintenance of chain of custody and associated documentation, evidence storage and analysis, and evidentiary reporting

  • Minimum of 1 year of experience working with IDA Pro, OllyDbg, and other disassemblers/debuggers

  • Minimum of 3 years of experience with Windows and Unix based operating systems and administrative tools

  • Minimum of 1 year of experience with Windows disk and memory forensics

  • Minimum of 1 year of experience with Unix or Linux disk and memory forensics

  • Minimum of 6 months of experience with Static or Dynamic malware analysis

  • Minimum of 6 months of experience monitoring network traffic and protocol analysis using tools such as Wireshark

  • Travel may be required for this role.  The amount of travel will vary from 0 to 100% depending on business need and client requirements.

  • Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate’s Degree, must have minimum 6 years work experience)

Bonus Points If You Have:

  • Thorough understanding of cyber security operations, security monitoring, EDR and SIEM tools, to include Endgame, Falcon and Splunk

  • Applied knowledge of security controls such as authentication and identity management, security enhanced network architectures and application-based controls (including Windows, Unix, and network equipment)

  • Excellent time management, writing and communication skills

  • Strong analytic, qualitative, and quantitative reasoning skills

  • Bachelor's or Associate degree in Computer Engineering, Computer Science, Cyber Security, Information Security, or related disciplines

  • Security certifications: CISSP, SANS, GIAC (GREM, GCFA, GCIH), OSCP

  • Minimum 5 years of comparable experience

Compensation at Accenture varies depending on a wide array of factors, which may include but are not limited to the specific office location, role, skill set, and level of experience. As required by local law, Accenture provides a reasonable range of compensation for roles that may be hired in  California, Colorado, New York or Washington as set forth below.

Information on benefits is here.

California                                      $73,000 to $220,400

Colorado                                       $73,000 to $190,400

New York                                       $67,600 to $220,400

Washington                                  $77,700 to $202,700



What We Believe


We have an unwavering commitment to diversity with the aim that every one of our people has a full sense of belonging within our organization. As a business imperative, every person at Accenture has the responsibility to create and sustain an inclusive environment.


Inclusion and diversity are fundamental to our culture and core values. Our rich diversity makes us more innovative and more creative, which helps us better serve our clients and our communities. Read more here


Equal Employment Opportunity Statement

Accenture is an Equal Opportunity Employer. We believe that no one should be discriminated against because of their differences, such as age, disability, ethnicity, gender, gender identity and expression, religion or sexual orientation.

All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.

Accenture is committed to providing veteran employment opportunities to our service men and women.


For details, view a copy of the Accenture Equal Employment Opportunity and Affirmative Action Policy Statement.

Requesting An Accommodation

Accenture is committed to providing equal employment opportunities for persons with disabilities or religious observances, including reasonable accommodation when needed. If you are hired by Accenture and require accommodation to perform the essential functions of your role, you will be asked to participate in our reasonable accommodation process. Accommodations made to facilitate the recruiting process are not a guarantee of future or continued accommodations once hired.

If you would like to be considered for employment opportunities with Accenture and have accommodation needs for a disability or religious observance, please call us toll free at 1 (877) 889-9009, send us an email or speak with your recruiter.

Other Employment Statements

Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States.

Candidates who are currently employed by a client of Accenture or an affiliated Accenture business may not be eligible for consideration.

Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process.

The Company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. Additionally, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company's legal duty to furnish information.


AZ - Phoenix, CA - Los Angeles, CA - San Diego, CA - San Francisco, CA - San Jose, CO - Denver, CT - Hartford, FL - Miami, FL - St. Petersburg, GA - Atlanta, IL - Chicago, IN - Carmel, KS - Overland Park, MA - Boston, MI - Detroit, MN - Minneapolis, NC - Charlotte, NC - Raleigh, NJ - Florham Park, NY - New York City, OH - Cleveland, PA - Philadelphia, PA - Pittsburgh, TX - Austin, TX - Houston, TX - Irving, VA - Arlington, WA - Seattle, WI - Milwaukee

Life at Accenture

Training and Development

Take time away to learn and learn all the time in our regional learning hubs, connected classrooms, online courses and learning boards.

Work Environment

Be your best every day in a work environment that helps drive innovation in everything you do.

Rewards & Benefits

With Accenture's Total Rewards, you are empowered to be your best—for the business, for your family, and for yourself.

Learn more about Accenture

Our Expertise

See how we embrace the power of change to create value and shared success for our clients, people, shareholders, partners and communities.

Meet Our People

From entry-level to leadership, across all business and industry segments, get to know our people harnessing technology to make a difference, every day.

Stay connected

Join Our Team

Search open positions that match your skills and interest. We look for passionate, curious, creative and solution-driven team players.

Keep Up to Date

Stay ahead with careers tips, insider perspectives, and industry-leading insights you can put to use today–all from the people who work here.

Job Alert Emails

Personalize your subscription to receive job alerts, latest news and insider tips tailored to your preferences. See what exciting and rewarding opportunities await.