Senior Investigator

Location: Stockholm
Salary range: Not stated
Workplace: In office
Level: Senior / Staff IC
Job family: Investigations
Posted: Recently

The T&S Network estimates this role to be P3, Senior. We don't yet know typical pay for this level in Sweden. Most of our pay data comes from US roles. If you work in Trust & Safety in Sweden, add your pay to help others. Key skills at this level: runs an investigation end to end, from signal to enforcement to writeup, builds and maintains the tradecraft others on the team follow, and works law enforcement and external referral pathways correctly.

Learn more about this and similar levels

Why this level

Estimated from the posting rather than stated by the employer: the title reads as P3.

Apply on Accenture

The role, in T&S terms

Written by the T&S Network from Accenture's posting.

Cybersecurity incident response work in Accenture's Incident Response team, covering APT and nation-state attacks, ransomware, malware outbreaks, insider threats, BEC, DDoS and data breaches. The role runs investigations to root cause and impact, and writes final reports on preventing repeat attacks. It is oriented to Nordic clients.

What you'd do

Perform incident response on cyber incidents including APT, ransomware, malware, insider threats, BEC, DDoS and data breaches.
Investigate incidents to find root cause, impact extent, and containment, eradication and recovery steps.
Write final reports with recommendations to prevent repeat attacks by strengthening security posture.
Collect and preserve evidence from workstations, servers and mobile devices for incidents or policy violations.
Coordinate with cross-functional teams and brief management and legal teams on findings.
Develop and update incident response plans, playbooks and procedures.
Hunt proactively for threats and weaknesses, and help tune security tools.

What it asks for

Solid working knowledge of how incidents are managed and responded to, step by step.
In-depth knowledge of EDR and SIEM tools such as CrowdStrike, Defender for Endpoint, Trend Micro Vision One and Splunk.
Experience with static or dynamic malware analysis using IDA Pro, OllyDbg, REMnux or similar.
Thorough understanding of Windows and Unix-based systems and their administration tools.
Proficiency in English and Swedish.
Ability to pass security clearances in Sweden.

Worth knowing

Requires passing security clearances in Sweden.

Our best summary of the posting, and it can be wrong. The employer's posting is what counts: read it in full on Accenture before you apply. If we got something wrong, report this listing.

Tired of job hunting?

Let the roles come to you. Switch on Available, and when a hiring manager or recruiter brings us a role that fits, we'll put you forward. Never to the company you work for.

Join Hidden Talent

Still listed 14 hours ago