Investigative Analyst

Accenture Federal Services • Lorton, VA

8d • $106,300 - $206,200

About The Position

The Investigative Analyst (IA) helps enhance and uphold the security posture of systems by applying expertise in cybersecurity policy, technologies, and tools to complex situations. The analyst works independently and collaboratively, using knowledge of advanced persistent threats (APTs), attacker tactics, attack frameworks, and techniques to respond swiftly to threats. The role involves rapidly investigating and remediating advanced attacks, often escalated from a Triage Team, and directly monitoring alerts for sensitive assets and known attacker campaigns. Work outside core hours may be needed for high-priority investigations, and the role may include on-call responsibilities.

Requirements

• Bachelor’s degree in Cybersecurity, IT, or another related field, plus 2+ years of hands-on cybersecurity experience; or, in lieu of a bachelor’s degree, 3+ years of hands-on cybersecurity experience.
• 1+ year of experience operating in a cloud environment; Azure experience is strongly preferred.
• 1+ years of hands-on experience with enterprise vulnerability management tools.
• 2+ years of experience with querying languages.
• DoD 8570 IAT Level 2 or DoD 8140 certification, and willingness to maintain certification.
• Deep understanding and experience with Windows and/or Linux operating systems.
• Willingness to obtain Microsoft SC-200 within 6 months of onboarding.
• Active TS/SCI security clearance.

Nice To Haves

• Experience with Splunk, HBSS, ACAS, or Microsoft Security Products.
• Scripting experience with Bash or Python (Python is listed twice in the posting).
• Experience with DevSecOps pipelines and SAFe methodology supporting Security Operations.
• DoD 8570 CSSP Incident Responder certification.
• Strong oral and written communication skills.

Responsibilities

• Evaluate security risks and impacts.
• Proactively hunt and monitor for indications of misuse or attack.
• Investigate and remediate misuse and attacks, including basic forensics activities.
• Document events through technical reports and Incident Management protocols.
• Create, maintain, recommend, update, and enforce SecOps tools, capabilities, and processes.
• Lead and participate in cybersecurity-related exercises.

Benefits

• A collaborative and caring community.
• Opportunities to grow, learn, and thrive through hands-on experience, certifications, and industry training.
• A wide variety of benefits; specific benefits are not listed in the posting.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level