Cyber Defense Forensics (CDF) Lead

Accenture Federal Services • Arlington, VA

1d

About The Position

At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations.
Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more.
Join us to drive positive, lasting change that moves missions and the government forward!
We are seeking a Cyber Defense Forensics Lead to oversee forensics and insider threat operations for our customer. You will lead a team of analysts conducting digital forensic investigations, monitoring data loss, and analyzing insider threats. This role requires expertise in forensic tools, incident response, and managing complex investigations.

Requirements

• 7+ years of overall cybersecurity experience
• 5+ years of hands-on experience with host/network security monitoring, forensic tools, SIEM platforms, and endpoint threat detection.
• Certifications such as GCFA, GCFE, CCFP, CISM, or CISSP are highly desirable.

Nice To Haves

• Experience working with federal or law enforcement agencies.
• Familiarity with CBP operations or similar government entities.

Responsibilities

• Lead the CDF team in supporting insider threat operations, DLP monitoring, and policy violation investigations.
• Conduct forensic analysis of Windows, Linux, Mac, and cloud systems.
• Maintain and modernize the client’s SOC forensics lab.
• Manage CDF investigations, documenting findings and escalating cases as needed.
• Serve as an SME in evidence preservation, chain of custody, and malware analysis.
• Develop insider threat dashboards, reports, and workflows.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 1,001-5,000 employees