Investigator - Cyber Incident Response

Investigator – Cyber Incident Response

Location Flexible (UK)

Please Note: Due to the nature of client work you will be undertaking, you will need to be willing to go through a Security Clearance process as part of this role, which requires 5+ years UK address history at the point of application.

As part of our global Incident Response team you’ll help organisations investigate, contain, and recover from the full spectrum of cyber incidents, from sophisticated intrusions to complex fraud and ransomware. Between high‑intensity engagements, you’ll also work proactively with clients, running tabletop exercises, purple‑team operations, playbook development, and help them build resilience before the next crisis strikes. You’ll collaborate closely with brilliant minds in forensics, threat intelligence, and crisis management, all working together to help clients make the right decisions in the toughest moments.

• Understand what an attack looks like, both on hosts and across the network.
• Can think like an attacker and spot how lateral movement happens.
• Build labs, experiment, break things.
• Know or use frameworks like MITRE ATT&CK and care about TTPs, not just tools.
• Have seen what a “bad day” looks like in an incident, and still want more.

Formal qualifications are great, but curiosity and practical experience count for more. Whether you’ve come up through traditional routes or through your own self‑taught path, we’re interested in how you’ve learned and how you apply it. Certifications are welcome, but so is evidence that you’ve used training to improve how you work or to strengthen your team.

• Access to world‑class training and tools, and a global network of experts to learn from.
• Variety: you’ll move between crisis work, proactive resilience, and strategic recovery.
• The chance to make a real difference; sometimes even save lives.
• A supportive, welfare‑focused culture that understands the demands of the job.

We know incident response can be intense, and we look after our people accordingly. Flexibility and mobility are required to deliver this role as there may be requirements to spend time onsite with our clients and partners to enable delivery of the first‑class services we are known for.

• London
• Birmingham
• Bristol
• Edinburgh
• Glasgow
• Manchester

31/01/2026

Accenture reserves the right to close the role prior to this date should a suitable applicant be found.

Accenture is an equal opportunities employer and welcomes applications from all sections of society and does not discriminate on grounds of race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, or gender identity, or any other basis as protected by applicable law.

All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.

Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process. Accenture is committed to providing veteran employment opportunities to our service men and women.