Brazil
Pentera
Accenture
Cyber Investigation and Forensic Incident Response (CIFR)
RemoteBrazil
São Paulo, São Paulo, Brazil
PythonAWSGCP
Automatic translation. Check the original.
About Us
The Accenture Security area is one of the fastest-growing within Accenture, and our global Cyber Investigation and Forensic Response (CIFR) practice is at the heart of how we help our clients prepare for, respond to, and recover from the most significant cyber incidents. We provide 24x7 incident response services to a growing portfolio of corporate clients worldwide, providing expertise to multinational organizations and contributing to thought leadership both inside and outside the company.
Who You Are
A hands-on technical leader who excels in complex investigations. You have solid experience in digital forensics, incident response, and threat analysis, along with the ability to perform under pressure during active incidents. You are comfortable presenting findings to executives as well as conducting in-depth technical analysis. You take ownership of investigations, guide team members, and contribute to raising the standard of excellence in incident response.
Key Responsibilities
- Conduct complex forensic analyses, including advanced memory forensics, malware triage, recovery of encrypted artifacts, and identification of anti-forensic techniques.
- Perform digital forensics on hosts and networks, log analysis, and threat hunting activities in support of incident response investigations.
- Utilize EDR solutions, cloud platforms (AWS, Azure, and GCP), and threat intelligence to identify attacker Tactics, Techniques, and Procedures (TTPs).
- Respond to security incidents in Cloud, OT (Operational Technology), and traditional corporate environments.
- Develop indicators of compromise (IOCs) and contribute to building detailed attack timelines.
- Create automation tools and scripts to increase team efficiency and enhance investigative capabilities.
- Mentor and train from 2 to 4 investigators simultaneously, contributing to the team's technical development.
- Perform quality reviews of analyses produced by investigators before validation by the Lead Investigator.
- Lead medium and large-scale investigation fronts (20 to over 50 systems) with minimal supervision.
- Support Lead Investigators in technical decisions and defining the investigative strategy.
- Translate strategic direction into tactical activities for team execution.
- Communicate effectively with clients, stakeholders, and legal counsel throughout the project lifecycle.
- Prepare comprehensive technical reports on investigation findings, with substantiated and defensible conclusions.
- Present technical findings in client meetings as needed.
- Support Accenture leadership in defining project scope, using innovative and structured approaches.
Travel may be required for this role, varying according to business and client needs in Latin America.
Requirements
- Completed university degree or equivalent professional experience.
- Minimum of 3 to 4 years of experience in DFIR (Digital Forensics & Incident Response), with proven performance in complex investigations.
- English minimum level B2 and Spanish minimum level B1.
- For native Spanish speakers, Portuguese minimum level B1.
- Ability to obtain US security clearances as required by some clients.
Proven experience in
- Corporate incident response, digital forensics, and cyber incident investigation processes.
- DFIR tools such as Volatility, X-Ways, FTK, EnCase, Autopsy, among others.
- Microsoft Windows and GNU/Linux operating systems.
- Memory forensics and malware analysis.
- Developing indicators of compromise (IOCs) and identifying attacker TTPs.
- Leading investigation fronts and mentoring junior professionals.
- Corporate environments, Active Directory, and common attack patterns.
- Analytical skills and client communication.
- Solving complex forensic challenges using advanced techniques.
- Threat hunting on endpoints and networks.
- Producing accurate, defensible, and well-documented analyses.
- Eradication techniques, monitoring improvements, and strengthening protection controls.
- Developing and implementing dynamic remediation plans in conjunction with incident response actions.
Preferred Qualifications
- Experience in Cloud environments (AWS, Azure, and GCP) and cloud forensics.
- Experience in OT and ICS (Industrial Control Systems) environments.
- Project management experience.
- Knowledge of programming and scripting languages (Python, PowerShell, and Bash).
- Knowledge of MacOS operating system.
- Experience with reverse engineering and sandbox technologies.
- Advanced malware analysis capabilities (unpacking, deobfuscation, and behavioral analysis).
- Contributions to open-source DFIR tools or methodologies.
- Active participation in the security community (events, talks, publications, or training development).
About Accenture
Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent-and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.
Visit us at accenture.com accenture.com/
Equal Employment Opportunity Statement
We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.
More opportunities with one profile
Want to be considered for more roles without repeating the whole process? Create your profile and be found by companies using Nort.
Create my profile