Responsibilities
- Manage and support end-to-end incident response investigations with Accenture's customers
- Identify and investigate intrusions to determine the cause and extent of the breach, by leveraging EDR, SIEM, and threat intelligence sources
- Conduct host forensics, log analysis, network forensics, and malware analysis in support of incident response investigations
- Conduct Threat Hunting across customer's environments with indicators ofpromise, hunting for evidence of suspicious behaviour
- Conduct incident response within various Cloud platforms
- Identify attacker tools, tactics, and procedures to develop indicators ofpromise for CTI consumption
- Work on proactive exercising and simulations, such as tabletops and purple teams
- Work alongside the EMEA team in a follow-the-sun model for large engagements
- Eligible for on-call responsibilities and meet SLAs for iing incidents
- Develop and implement remediation plans in conjunction with incident response
- Form and articulate expert opinions based on findings
- Produceprehensive and accurate oral and written reports and presentations for both technical and executive audiences
- Effectivelymunicate and interface with client, both technically and strategically from the executive level, to client stakeholders and legal counsel
- Support leadership in properly scoping engagements with innovative methodical approaches, based on client requirements
- Participating in engagements from kickoff through remediation, either on premises or remote, depending on client requirements
- Collaborate well with a highly experienced and diverse team of talent, in support of one mission - providing expert incident response services to Accenture clients
- Travel to on-site incident locations for acquisition, support, and engagement delivery both in and out of the country will be required for this position, with the requirement to travel up to 50%
Qualifications & Experience
Bachelor's Degree or relevant investigative experienceSecurity certifications such as : CISSP, SANS GIAC (GCFA, GCIH, GCFR), BTL1, or similarExpert knowledge of forensic file system and memory techniques and use of the mostmonly used toolsets, such as EnCase and FTK SuiteDeep technical knowledge of methods utilized for evidence collection, maintenance of chain of custody and associated documentation, evidence storage and analysis and evidentiary reportingThorough understanding of cyber security operations, security monitoring, EDR and SIEM tools, such as CrowdStrike and SplunkDetailed knowledge of Windows & Unix based operating systems and administrative toolsWindows disk and memory forensicsUnix or Linux disk and memory forensicsNetwork traffic and protocol analysis utilizing tools such as WiresharkStrong knowledge of incident response, forensics and investigation processesKnowledge of IDA Pro, OllyDbg, other disassemblers / debuggersApplied knowledge of security controls such as authentication and identity management, security enhanced network architectures and application-based controls (including Windows, Unix, and network equipment)Knowledge of static and dynamic malware analysisExcellent time management, writing andmunication skillsStrong analytic, qualitative, and quantitative reasoning skillsMinimum 3 years ofparable experienceRelevant industry certifications valuableDoes this appeal to you? If so, we would like to hear from you!!
Please follow the application process and we look forward to discussing this opportunity with you.
Please advise if you have any particular requirements, so we can look into arranging reasonable adjustments to the recruitment process. You can contact us at accessIErecruitment@accenture
What's in it for you?
At Accenture Ireland, in addition to apetitive base salary, you will also have an extensive benefits package which includes pension, private health insurance, discounted gym membership, emergency caring facilities, and 2 days' leave per year for charitable work of your choice! Flexible working arrangements can be discussed depending on the position.
Please also note that Accenture is an equal opportunities employer and wees applications from all sections of society and does not discriminate on grounds of race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, or gender identity.
About Accenture
We work with one shared purpose : to deliver on the promise of technology and human ingenuity. Every day, more than 775,000 of us help our stakeholders continuously reinvent. Together, we drive positive change and deliver value to our clients, partners, shareholders,munities, and each believe that delivering value requires innovation, and innovation thrives in an inclusive and diverse environment. We actively foster a workplace free from bias, where everyone feels a sense of belonging and is respected and empowered to do their best Accenture, we see well-being holistically, supporting our people's physical, mental, and financial health. We also provide opportunities to keep skills relevant through certifications, learning, and diverse work experiences. We're proud to be consistently recognized as one of the World's Best Workplaces™.Join Accenture to work at the heart of change.
Visit us at accenture
Equal Employment Opportunity Statement
All employment decisions shall be made without regard to age, race, creed, colour, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as applicable by law.
Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process. Job ID R00269172