Investigator/AI Developer

Accenture•Chicago, IL

About The Position

Accenture is hiring an Investigator/AI Developer for its cybersecurity consulting practice. The role combines digital forensics and incident response (DFIR) expertise with applied data and software development, building tools and analytical products that improve investigations and client engagements. The investigator will conduct complex forensic work, lead or contribute to incident response, identify attacker tactics, techniques, and procedures (TTPs), and produce defensible findings for clients. The developer will create and maintain investigation tools, automation, prototypes, and data products, using AI-assisted development and generative AI to streamline triage, analysis, and reporting. The position includes working with client stakeholders and legal counsel, authoring comprehensive investigative reports, presenting technical findings, and helping leadership scope engagements. Work may involve cloud, operational technology (OT), and traditional enterprise environments. Travel may be required, ranging from 0 to 100% depending on business and client needs. Accenture lists annual salary ranges by location: California $70,350–$205,800; Colorado, Connecticut, Maryland, and Minnesota $63,800–$177,800; District of Columbia $68,000–$189,300; Illinois $59,100–$177,800; Maine $54,400–$151,400; Massachusetts $63,800–$189,300; New York $66,300–$205,800; New Jersey $68,000–$205,800; Ohio $59,100–$164,600; Virginia $59,100–$189,300; and Washington $80,200–$189,300. The posting is anticipated to remain open until 11/15/2026.

Requirements

Bachelor's degree or equivalent, with a minimum of 12 years of work experience; alternatively, an associate degree with a minimum of 6 years of work experience.
At least 3 years of experience in DFIR, including demonstrated expertise in complex investigations.
At least 3 years of experience in cybersecurity consulting and data-oriented development or analysis.
At least 3 years of experience building tools used by others in professional practice.
At least 3 years of demonstrated experience with at least one data or development layer such as Python, PowerShell, Power BI, Power Apps/Automate, SQL, or a comparable stack.
At least 3 years of demonstrated experience with common DFIR toolsets such as Volatility, X-Ways, FTK, EnCase, or Autopsy.
At least 3 years of demonstrated experience with Microsoft Windows, GNU/Linux, and macOS operating systems.
At least 3 years of demonstrated experience in memory forensics.
At least 3 years of demonstrated experience with enterprise environments, Active Directory, and common attack patterns.
At least 3 years of demonstrated experience in endpoint and network threat hunting.
At least 3 years of demonstrated experience with recognized incident response lifecycles and frameworks, such as SANS, NIST, or MITRE.
At least 3 years of demonstrated experience producing accurate, defensible, well-documented analysis.
At least 1 year of demonstrated experience using AI coding assistants and generative tools fluently in everyday development workflows.
At least 1 year of demonstrated experience with Azure and cloud-native architectures, and comfort using AI as a development accelerator.
Applicants for US employment must have work authorization that does not now or in the future require visa sponsorship.

Nice To Haves

Experience with cloud forensics across AWS, Azure, and GCP; OT/ICS experience is a plus.
Malware analysis capabilities, including unpacking, deobfuscation, behavior analysis, and reverse engineering.
Experience with AI governance, responsible-use frameworks, or tool validation in a security or consulting context.

Responsibilities

Conduct complex forensic investigations, including memory forensics, malware triage, encrypted artifact recovery, and anti-forensics detection.
Perform host and network digital forensics, log analysis, and threat hunting for incident response engagements.
Use EDR solutions, cloud platforms, and threat intelligence to identify and document attacker TTPs.
Participate in incident response in cloud, OT, and traditional enterprise environments.
Develop indicators of compromise and contribute to comprehensive, defensible attack timelines.
Design and build proprietary investigation tools, automation scripts, and data products to accelerate forensic workflows and improve consistency.
Translate repeatable investigation processes into functional prototypes using AI-assisted development, low-code platforms, and data visualization tools.
Use generative AI and AI coding assistants to reduce manual effort in triage, analysis, and reporting.
Document, version-control, and maintain tools; create onboarding guides and iterate based on real-world engagement feedback.
Collaborate with senior practitioners to identify tooling opportunities that improve speed, quality, or scalability.
Interface with client stakeholders and legal counsel throughout engagements, both technically and strategically.
Author comprehensive, defensible written reports on investigative findings.
Present technical findings and tool outputs on client calls.
Support leadership in scoping engagements with methodical, innovative approaches.
Travel as required by business needs and client requirements, potentially from 0 to 100%.