Cyber Forensic Specialist

The role

The Cyber Forensic Specialist provides digital forensic and investigative support to the Cyber Incident Response Team. This role involves conducting internal investigations, managing litigation holds, and performing eDiscovery-related evidence captures.

What you will do

• Collaborate with the Cyber Incident Response Team to investigate cybersecurity incidents.
• Perform digital forensic analysis on laptops, desktops, servers, mobile devices, and network logs.
• Provide recommendations on containment, remediation, and recovery activities.
• Conduct internal investigations in collaboration with HR, Legal, and Insider Threat teams.
• Analyze electronic communications, file systems, and digital artifacts.
• Prepare detailed, well-documented reports and findings.
• Implement litigation holds and collect electronically stored information.
• Perform eDiscovery-related data captures on on-premises and cloud-based systems.
• Serve as the central point for evidence intake and management.
• Provide guidance and training to the CIRT and other internal teams.

Required qualifications

• US Citizenship required.
• 3-5 years of experience in information security, or equivalent combination of education or work experience.
• 3+ years of experience performing digital forensics on physical and cloud systems.
• 2+ years of experience performing event and log analysis including Anti-Virus, Intrusion Detection Systems, Firewalls, Active Directory, Web Proxies, Data loss prevention tools and other security tool
• Experience working with Security Information and Event Management (SIEM) solutions.
• 1+ years of experience investigating, containing, eradicating, and preventing compromises.
• 1+ years of experience with collecting, processing, reviewing, and producing Electronically Stored Information (ESI) to legal teams.
• Work independently to deliver prompt solutions without direct supervision.
• Excellent written and oral communication skills, attention to detail, and interpersonal skills.
• Experience presenting complex technical information to decision makers.
• Experience with digital forensic imaging (FTK, Cellebrite, Paladin, etc.) and analysis tools (EnCase, Autopsy, Nuix, etc.).
• Experience with evidence preservation and chain of custody.

Nice to have

• DFIR related certifications including SANS (GCED, GCLD, GCIH, GCFE, GCFA, GREM), CFCE, EnCE.
• Knowledge of scripting languages (e.g., Python, PowerShell) to automate forensic tasks.
• Experience with eDiscovery toolsets such as Microsoft Purview eDiscovery (Standard/Premium) and Nuix.
• Familiarity with the Electronic Discovery Reference Model (EDRM).

Benefits

• Collaborative and caring community
• Hands-on experience
• Certifications
• Industry training

Before you apply

• US Citizenship required.
• Applicants must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States.
• Candidates currently employed by a client of Accenture Federal Services or an affiliated Accenture business may not be eligible for consideration.

About the company

Accenture Federal Services is a technology company within global Accenture that helps the US federal government. Its 13,000+ people work across defense, national security, public safety, civilian, and military health organizations.