Incident Response Digital Investigator

Written by the T&S Network from Accenture's posting.

Incident response and digital forensics work in cybersecurity. The role analyzes intrusions to find how and how far breaches spread, using EDR tools and threat intelligence, and runs forensics, malware analysis and threat hunting. It also covers remediation planning and tabletop exercises that test incident response plans. The posting does not name a platform, market or harm area.

What you'd do

• Analyze intrusions to determine the cause and scope of breaches using EDR tools and threat intelligence.
• Conduct host forensics, network forensics, log analysis and malware analysis during incident response.
• Carry out incident response and threat hunting activities.
• Identify attacker tactics, techniques and procedures and turn them into indicators of compromise.
• Develop and implement remediation plans.
• Run tabletop exercises and test the procedures in the incident response plan.

What it asks for

• Knowledge of file and memory forensics tools such as EnCase, Axiom, Autopsy, Volatility and FTK Suite.
• Solid command of incident management and response processes and procedures.
• In-depth knowledge of security operations and EDR and SIEM tools such as CrowdStrike and Splunk.
• Experience with static or dynamic malware analysis using IDA Pro, OllyDbg or REMnux.
• Disk and memory forensics skills on Windows, Unix or Linux environments.
• Network traffic and protocol analysis with Wireshark.
• Excellent English.

Our best summary of the posting, and it can be wrong. The employer's posting is what counts: read it in full on Accenturenorth_east before you apply. If we got something wrong, report this listing.