Cyber Readiness & Crisis Senior Manager

Accenture’s Security is one of the fastest growing areas of the business with significant growth plans through additional recruitment and acquisitions. Our global Cyber Investigation and Forensic Response (CIFR) practice is rapidly expanding in order to uniquely deliver around the clock incident response services to our expanding portfolio of enterprise customers.

You'll learn, grow and advance in an innovative culture that thrives on shared success, innovative and diverse ways of thinking and enables boundaryless opportunities that can drive your career in new and exciting ways.

If you’re looking for a challenging career working in a vibrant environment with access to training and a global network of experts, this is the role for you.

• Are highly credible with the ability to engage on a broad C-suite agenda. Possess the personal and professional attributes necessary to guide senior leadership in the formulation of strategies that produce robust and dynamic security capabilities as well as enterprise resilience capabilities.
• Possess deep industry expertise sufficient to not only understand the nuances of an industry, but also guide client executives in developing suitable strategies with limited capacity in the dynamic theatre of incident response.
• Understand current and future client needs in the context of the security marketplace as well as client industry dynamics and apply insights to recommend both short and long-term value creation for clients that have the appropriate level of impact.

• Strong knowledge of incident response, digital forensics and cyber incident investigation processes.
• Strong familiarity with common DFIR toolsets.
• Strong DFIR related knowledge of Microsoft Windows, GNU/Linux and MacOS operating systems.
• Experience of Threat Hunting, on both the endpoint and ideally network.
• The ability to identify attacker Tactics, Techniques and procedures (TTPs) and to develop indicators of compromise.
• How to find and eradicate attackers, improve monitoring and protection capabilities.
• Develop and implement dynamic remediation plans for customers in conjunction with incident response engagements.
• Understanding of enterprise environments and how they work.
• Understanding of common malware types and behaviours and common infection vectors.
• The ability to lead a team of investigators during demanding engagements including client interaction.
• Excellent project management and client facing communication skills.

• Experience with Cloud environments.
• Experience with OT and IC environments.
• Knowledge of scripting and programming languages.
• Experience of reverse engineering and sandboxing technologies.
• Relevant degree in computing/IT.
• Security certifications, for example, but not limited to, GREM, GCFE, GCFA, CEH, GCIH.
• Minimum 5 years of DFIR experience.

• Lead incident response engagements, including coordination of other assigned resources for on-site and remote investigations.
• Identify and investigate intrusions to determine the cause and extent of the breach.
• Conduct data collection, host and network digital forensics, log analysis, malware analysis and living-of-the-land techniques in support of incident response investigations, including leveraging EDR solutions and threat intelligence.
• Lead threat hunting engagements.
• Conduct incident response within various Cloud platforms.
• Identify attacker Tactics, Techniques and Procedures (TTPs) to develop indicators of compromise.
• Develop and implement dynamic remediation plans in conjunction with incident response engagements.
• Take a lead role in authoring comprehensively written client reports on investigative findings.
• Effectively communicate and interface with customers, both technically and strategically to customer stakeholders and legal counsel throughout the engagement lifecycle.
• Support Accenture leadership in properly scoping engagements with innovative methodical approaches, based on customer requirements.
• Mentor and train CIFR team members.
• Work as part of the global practice to develop and maintain our service offerings.