Investigative Analyst
About this role
At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations.
Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more.
Join us to drive positive, lasting change that moves missions and the government forward!
Job Description:
The Investigative Analyst (IA) plays a vital role in enhancing and upholding the overall security posture of systems. As an IA, you will work both independently and collaboratively to apply your expertise in Cybersecurity policy, technologies, and tools to complex situations. Additionally, you will leverage your understanding of APTs and associated tactics, attack frameworks, and techniques to swiftly respond to threats. Perform rapid investigation and remediation of advanced attacks that require analysis and remediation; often escalated from Triage Team. Investigative Analysts also directly monitor alerts for sensitive assets and known attacker campaigns. This role may include the need to work outside of core hours on high priority investigations and may also include on-call responsibilities
Responsibilities include:
• Evaluating security risks and impacts • Proactively hunting and monitoring for indications of misuse or attack • Thoroughly investigating and remediating misuse and attacks (to include basic forensics activities) • Documenting events via technical reports and Incident Management protocols • Creating, maintaining, recommending, updating & enforcing SecOps tools, capabilities, and processes • Leading and participating in Cybersecurity related exercises
Here's what you need:
• Bachelor’s degree in Cybersecurity, IT (or another related field) and 2+ years of hands-on Cybersecurity OR, in lieu of a Bachelor’s degree, 3+ years of hands-on Cybersecurity experience • 1+ year of experience operating in a cloud environment (strong preference for Azure experience) • 1+ years hands-on experience with enterprise vulnerability management tools • 2+ year of experience with querying languages • DoD 8570 IAT Level 2 or DoD 8140 certification and willingness to maintain certification • Deep understanding and experience with Windows and/or Linux Operating Systems • Willingness to obtain Microsoft SC-200 within 6 months of onboarding