Investigative Analyst

Summary

Investigative Analyst

At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations. Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more. Join us to drive positive, lasting change that moves missions and the government forward!

The Investigative Analyst (IA) plays a vital role in enhancing and upholding the overall security posture of systems. As an IA, you will work both independently and collaboratively to apply your expertise in Cybersecurity policy, technologies, and tools to complex situations. Additionally, you will leverage your understanding of APTs and associated tactics, attack frameworks, and techniques to swiftly respond to threats. Perform rapid investigation and remediation of advanced attacks that require analysis and remediation; often escalated from Triage Team. Investigative Analysts also directly monitor alerts for sensitive assets and known attacker campaigns. This role may include the need to work outside of core hours on high priority investigations and may also include on-call responsibilities.

Responsibilities include:

• Evaluating security risks and impacts
• Proactively hunting and monitoring for indications of misuse or attack
• Thoroughly investigating and remediating misuse and attacks (to include basic forensics activities)
• Documenting events via technical reports and Incident Management protocols
• Creating, maintaining, recommending, updating & enforcing SecOps tools, capabilities, and processes
• Leading and participating in Cybersecurity related exercises

Here's what you need:

• Bachelor's degree in Cybersecurity, IT (or another related field) and 2+ years of hands-on Cybersecurity OR, in lieu of a Bachelor's degree, 3+ years of hands-on Cybersecurity experience
• 1+ year of experience operating in a cloud environment (strong preference for Azure experience)
• 1+ years hands-on experience with enterprise vulnerability management tools
• 2+ year of experience with querying languages
• DoD 8570 IAT Level 2 or DoD 8140 certification and willingness to maintain certification
• Deep understanding and experience with Windows and/or Linux Operating Systems
• Willingness to obtain Microsoft SC-200 within 6 months of onboarding

Bonus points if you have:

• Experience with Splunk, HBSS, ACAS, or Microsoft Security Products
• Scripting experience with any of the following: Bash, Python, Python
• Experience with DevSecOps pipelines and SAFe methodology supporting Security Operations
• DOD 8570 CSSP Incident Responder certification
• Strong oral and written communication skills

An active TS/SCI security clearance

The pay range for the states of California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia is: $106,300 —$206,200 USD

Equal Employment Opportunity Statement We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities. For details, view a copy of the Accenture Federal Services Equal Opportunity Policy Statement. Accenture Federal Services is an Equal Employment Opportunity employer. Additionally, as an Affirmative Action Employer for Veterans and Individuals with Disabilities, Accenture Federal Services is committed to providing veteran employment opportunities to our service men and women.

Job Description

Investigative Analyst

At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations. Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more. Join us to drive positive, lasting change that moves missions and the government forward!

The Investigative Analyst (IA) plays a vital role in enhancing and upholding the overall security posture of systems. As an IA, you will work both independently and collaboratively to apply your expertise in Cybersecurity policy, technologies, and tools to complex situations. Additionally, you will leverage your understanding of APTs and associated tactics, attack frameworks, and techniques to swiftly respond to threats. Perform rapid investigation and remediation of advanced attacks that require analysis and remediation; often escalated from Triage Team. Investigative Analysts also directly monitor alerts for sensitive assets and known attacker campaigns. This role may include the need to work outside of core hours on high priority investigations and may also include on-call responsibilities.

Responsibilities include:

• Evaluating security risks and impacts
• Proactively hunting and monitoring for indications of misuse or attack
• Thoroughly investigating and remediating misuse and attacks (to include basic forensics activities)
• Documenting events via technical reports and Incident Management protocols
• Creating, maintaining, recommending, updating & enforcing SecOps tools, capabilities, and processes
• Leading and participating in Cybersecurity related exercises

Here's what you need:

• Bachelor's degree in Cybersecurity, IT (or another related field) and 2+ years of hands-on Cybersecurity OR, in lieu of a Bachelor's degree, 3+ years of hands-on Cybersecurity experience
• 1+ year of experience operating in a cloud environment (strong preference for Azure experience)
• 1+ years hands-on experience with enterprise vulnerability management tools
• 2+ year of experience with querying languages
• DoD 8570 IAT Level 2 or DoD 8140 certification and willingness to maintain certification
• Deep understanding and experience with Windows and/or Linux Operating Systems
• Willingness to obtain Microsoft SC-200 within 6 months of onboarding

Bonus points if you have:

• Experience with Splunk, HBSS, ACAS, or Microsoft Security Products
• Scripting experience with any of the following: Bash, Python, Python
• Experience with DevSecOps pipelines and SAFe methodology supporting Security Operations
• DOD 8570 CSSP Incident Responder certification
• Strong oral and written communication skills

An active TS/SCI security clearance

The pay range for the states of California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia is: $106,300 —$206,200 USD

Equal Employment Opportunity Statement We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities. For details, view a copy of the Accenture Federal Services Equal Opportunity Policy Statement. Accenture Federal Services is an Equal Employment Opportunity employer. Additionally, as an Affirmative Action Employer for Veterans and Individuals with Disabilities, Accenture Federal Services is committed to providing veteran employment opportunities to our service men and women.