Cyber Incident Response Team (CIRT) Lead
Accenture Federal Services
Overview:
We are hiring a CIRT Lead to manage 24x7x365 front-line defense against cyber incidents. You will oversee the full lifecycle of cybersecurity investigations, from detection to resolution, while driving continuous improvements to client’s security posture.
Key Responsibilities:
- Lead CIRT operations in advanced incident response
- Manage all SOC investigations, including misuse and data spillage cases.
- Perform advanced analysis of file system artifacts, memory, and network logs across Windows, Linux, and cloud environments.
- Oversee email trace/purge functions and recommend data spill handling/sanitization.
- Collaborate with government analysts on post-incident recommendations to improve security.
Basic Qualifications:
- 5+ years of experience in cybersecurity, incident response, or related fields.
- Certified Information Systems Security Professional (CISSP).
- One or more certifications: GCIA, GCIH, GCFA, GCED, or IAT Level III equivalent.
Preferred Skills:
- Expertise in evidence analysis, incident management, and advanced threat detection.
- Strong collaboration and communication skills to work across teams and with stakeholders.
As required by local law, Accenture Federal Services provides reasonable ranges of compensation for hired roles based on labor costs in the states of California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia. The base pay range for this position in these locations is shown below. Compensation for roles at Accenture Federal Services varies depending on a wide array of factors, including but not limited to office location, role, skill set, and level of experience. Accenture Federal Services offers a wide variety of benefits. You can find more information on benefits here. We accept applications on an on-going basis and there is no fixed deadline to apply.
Cyber Threat Hunt (CTH) Lead
Accenture Federal Services
Overview:
We are seeking an elite Cyber Threat Hunt Lead to build and guide a proactive threat hunting capability for our client. In this role, you will lead a specialized team in identifying advanced malicious activity that evades traditional security measures. This position requires a deep understanding of attacker TTPs, an offensive mindset, and expert-level skills with SIEM and endpoint management tools.
Key Responsibilities:
- Lead the CTH team to conduct iterative threat-hunting missions across networks and high-value assets.
- Develop and execute hunt hypotheses using threat models and Cyber Threat Intelligence.
- Propose corrective actions, escalate security issues, and recommend best practices.
- Collaborate with the SOC to create new detections, signatures, and alerts from hunt mission findings.
- Report findings to leadership and coordinate with asset owners to deconflict results.
Basic Qualifications:
- 5+ years of hands-on experience with network-based security monitoring and cybersecurity capabilities.
- Certifications: CEH or equivalent (e.g., DoD 8570 IAT Level II, IAM Level I, or CSSP Analyst/Incident Responder).
Preferred Skills:
- Proven ability to lead Purple Team engagements.
- Strong technical analysis and network traversal skills.
- Experience in developing proactive security measures to detect advanced threats.
As required by local law, Accenture Federal Services provides reasonable ranges of compensation for hired roles based on labor costs in the states of California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia. The base pay range for this position in these locations is shown below. Compensation for roles at Accenture Federal Services varies depending on a wide array of factors, including but not limited to office location, role, skill set, and level of experience. Accenture Federal Services offers a wide variety of benefits. You can find more information on benefits here. We accept applications on an on-going basis and there is no fixed deadline to apply.