Incident Response Analyst

Our Cyber Investigation and Forensic Response (CIFR) practice is rapidly growing, and we are hiring mid to very senior level incident response and threat hunting professionals to work with our F500 enterprise customers. With our recent acquisitions we continue to enhance our incident response, threat hunting, forensics, threat intelligence, and purple teaming capabilities.   

With Accenture Security, you will be part of a specialized team to respond to some of the largest and most complex data breaches around the world, as well as conduct cyber threat hunting in some of the most complex business environments, leveraging a variety of tools and techniques. You will work in a fast paced and highly collaborative environment along with a diverse team of talent globally, in support of one mission – providing expert incident response services to Accenture customers

Job Functions

• Lead end-to-end incident response investigations with Accenture’s customers
• Identify and investigate intrusions to determine the cause and extent of the breach, by leveraging EDR solutions and threat intelligence sources
• Conduct host forensics, network forensics, log analysis, and malware analysis in support of incident response investigations
• Conduct threat hunting across customer’s networks with indicators of compromise, hunting for evidence of a compromise
• Conduct incident response within various Cloud platforms   
• Identify attacker tools, tactics, and procedures to develop indicators of compromise
• Develop and implement remediation plans in conjunction with incident response
• Form and articulate expert opinions based on findings and analysis
• Produce comprehensive and accurate oral and written reports and presentations for both technical and executive audiences
• Effectively communicate and interface with customers, both technically and strategically from the executive level, to customers stakeholders and legal counsel
• Support leadership in properly scoping engagements with innovative methodical approaches, based on customer requirements
• Lead engagement delivery from kickoff through remediation, either on premises or remote, depending on customer requirements

Qualifications

Basic Qualifications

• Minimum 3 years of comparable experience /expert knowledge of forensic file system and memory techniques and use of the most commonly used toolsets, such as EnCase and FTK Suite
• Minimum 3 years of comparable experience/ deep technical knowledge of methods utilized for evidence collection, maintenance of chain of custody and associated documentation, evidence storage and analysis, and evidentiary reporting
• Minimum 2 years of comparable experience with IDA Pro, OllyDbg, other disassemblers/debuggers
• Minimum 3 years of comparable experience/thorough understanding of cyber security operations, security monitoring, EDR and SIEM tools, to include Endgame, Falcon, and Splunk
• Minimum 3 years of comparable experience/detailed knowledge of Windows & Unix based operating systems and administrative tools, windows disk and memory forensic, Unix or Linux disk and memory forensics and Static and dynamic malware analysis

You will embrace the following values:

• Willingness to share your perspectives and experiences with other less technical people to help them increase their understanding of security
• Desire to collaborate with your peers to continue to develop your technical, professional and commercial acumen
• Passion for understanding the client problems and looking or innovative ways to use your offensive security skills to help them advance their security capabilities.
• Egoless-greatness – collaborating as part of a team and sharing in the team’s success
• Taking risks, trying new things and being open to changing the way you do things in the interest of advancing our profession and enhancing the value to our clients

Nice Skills to Have

• Bachelor's Degree in Computer Engineering, Computer Science, Cyber Security, Information Security or related disciplines
• Security certifications: CISSP, SANS GIAC (GREM, GCFA, GCIH), OSCP
• Network traffic and protocol analysis utilizing tools such as Wireshark

• Applied knowledge of security controls such as authentication and identity management, security enhanced network architectures and application based controls (including Windows, Unix, and network equipment)
• Excellent time management, writing and communication skills
• Strong analytic, qualitative, and quantitative reasoning skills

About Accenture

Accenture is a global professional services company with leading capabilities in digital, cloud and security. Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Interactive, Technology and Operations services—all powered by the world’s largest network of Advanced Technology and Intelligent Operations centers. Our 514,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries. We embrace the power of change to create value and shared success for our clients, people, shareholders, partners and communities. Visit us at www.accenture.com. 

At Accenture, our philosophy is anchored in recognising that our people are multi-dimensional. We take an intersectional human approach to create a work environment where all people feel like they can bring their authentic selves to work, every day.

We believe that equality drives innovation. Our commitment to accelerating equality starts at the top with our board and CEO and extends across every part of the company. This comes to life when our people own the equality agenda, making it part of their jobs – every decision, every day – and feel free to speak up and to act.

We do not tolerate discrimination because of differences, such as age, ability, ethnicity, gender, gender identity or expression, religion, or sexual orientation. We want a workplace that is inclusive and diverse to that end we are setting bold goals and taking comprehensive action. To achieve these goals, we collect information that allows us to track the effectiveness of our Inclusion and Diversity programs.

Learn how Accenture protects your personal data and know your rights in relation to your personal data. Read more about our Privacy Statement.

Nainika Mathur is the Recruiter managing this role. As the team experience high volumes of applications, we appreciate your patience to allow for a fair and timely process.

#disabilityinclusion