> Markdown version of [/jobs/ext/4703955-digital-forensics-incident-response-specialist](https://www.wearedevelopers.com/jobs/ext/4703955-digital-forensics-incident-response-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Digital Forensics & Incident Response Specialist

- **Company:** Accenture
- **Location:** Overland Park, KS, United States
- **Experience:** Experienced
- **Salary:** $54,891 - $150,405
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Amazon Web Services, Microsoft Azure, Cyber Security, Digital Forensics, Network Forensics, Azure Active Directory, Anti-Phishing, Malware, Cybercrime
- **Published:** November 13, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3517349493&tx=JL1913FFK&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Minimum of 2 years of relevant experience in digital forensics, incident response, cybersecurity investigations, or closely related technical work.
 * Minimum of 2 years of foundational experience collecting, preserving, and analyzing digital evidence using established investigative procedures.
 * Minimum of 2 years working knowledge of cybersecurity incidents, common attacker techniques, operating systems, and security logs.
 * Minimum of 2 years of experience using or supporting forensic, endpoint detection and response, or security analysis tools.
 * Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate's Degree, must have minimum 6 years work experience)

Bonus Points If You Have

 * Ability to document technical analysis and communicate findings accurately in writing and verbally.
 * Ability to deliver assigned tasks with some guidance, manage priorities, and collaborate effectively in a client-service environment.
 * One recognized DFIR certification, such as GCFE, GCIH, GCFA, or equivalent, or active progress toward an equivalent certification.
 * Exposure to cloud or identity investigations involving Microsoft 365, Microsoft Entra ID, Azure, or AWS.
 * Familiarity with threat hunting, malware triage, memory analysis, or network forensic concepts.
 * Participation in ransomware, phishing, business email compromise, or unauthorized-access investigations.
 * Experience preparing evidence logs, chain-of-custody records, or other defensible investigative documentation.
 * Prior experience in a cybersecurity consulting, security operations, IT support, or incident response team.

## Description

Accenture is a global collective of innovators whose aim is to improve the way the world works and lives. Empowered with innovative tools, continuous learning, and a global community of diverse talent, we help clients address their most complex challenges.

Accenture Security helps organizations prepare for, detect, respond to, and recover from cyber incidents. Our Digital Forensics & Incident Response (DFIR) team combines deep investigative expertise, incident response capabilities, and practical client guidance to help organizations understand and contain cyber threats, determine what happened, and recover with confidence.

You Are

A curious, detail-oriented digital forensics and incident response professional who enjoys solving technical problems and helping clients understand cybersecurity incidents. You bring foundational investigative skills, a commitment to preserving the integrity of evidence, and a willingness to learn from experienced practitioners. You work effectively within a team, communicate your findings clearly, and consistently deliver accurate technical work with appropriate guidance.

The Work

You will be part of a specialized DFIR team responding to cybersecurity incidents and conducting forensic investigations for clients across industries. As an Investigator, you will support evidence collection, forensic analysis, threat hunting, preparation of findings, and other client engagement activities under the guidance of more experienced investigators.

Projects and responsibilities might include

 * Supporting the collection, preservation, processing, and analysis of digital evidence from endpoints, servers, and other relevant sources, following established procedures and maintaining accurate documentation.
 * Assisting with investigations of ransomware, business email compromise, unauthorized access, and other cybersecurity incidents by examining evidence and identifying relevant activity.
 * Using approved forensic tools, endpoint telemetry, and security logs to conduct assigned analysis and contribute to threat hunting and incident response activities.
 * Completing assigned investigative tasks with some guidance, maintaining clear work notes, meeting delivery expectations, and promptly raising questions, risks, or unexpected findings.
 * Preparing accurate investigative notes, evidence summaries, technical findings, and draft report content for review by senior team members.
 * Participating in client discussions and internal team updates, communicating technical information professionally, and supporting senior investigators in presenting findings.
 * Supporting practice operations, including evidence-handling systems, investigative tools, documentation, training, and improvements to established DFIR processes.

Travel may be required for this role. Travel will vary based on business needs and client requirements, including on-site incident response assignments.