Investigator/AI Developer

Accenture•St. Louis, MO

8d•$54,400 - $205,800

About The Position

Accenture is hiring an Investigator/AI Developer for a cybersecurity consulting practice that supports organizations before, during, and after security incidents. The role combines complex digital forensics and incident response with development of AI-powered tools, automation, and data products that improve investigative workflows and client engagements. The position conducts forensic investigations across host, network, cloud, OT, and enterprise environments; analyzes artifacts and attacker tactics, techniques, and procedures; and produces indicators of compromise, attack timelines, and defensible reports. It also designs, prototypes, documents, and iterates on investigation tools using development, low-code, data visualization, and generative AI capabilities. The role works directly with client stakeholders and legal counsel, presents technical findings, and supports engagement scoping. Travel may be required and can range from 0 to 100%, depending on business need and client requirements. Accenture anticipates the posting will remain open until 11/15/2026.

Requirements

Bachelor's degree or equivalent work experience of at least 12 years; applicants with an associate's degree must have at least 6 years of work experience.
At least 3 years of experience in DFIR with demonstrated expertise in complex investigations.
At least 3 years of experience in cybersecurity consulting and data-oriented development or analysis.
At least 3 years of experience building tools used by others in professional practice.
At least 3 years of demonstrated experience with at least one data or development layer, such as Python, PowerShell, Power BI, Power Apps/Automate, SQL, or a comparable stack.
At least 3 years of experience with common DFIR toolsets, such as Volatility, X-Ways, FTK, EnCase, or Autopsy.
At least 3 years of experience with Microsoft Windows, GNU/Linux, and macOS operating systems.
At least 3 years of experience in memory forensics.
At least 3 years of experience in enterprise environments, Active Directory, and common attack patterns.
At least 3 years of experience in threat hunting on endpoints and networks.
At least 3 years of experience with recognized incident response lifecycles and frameworks, such as SANS, NIST, or MITRE.
At least 3 years of experience producing accurate, defensible, well-documented analysis.
At least 1 year of experience using AI coding assistants and generative tools as a fluent, everyday part of the development workflow.
At least 1 year of experience with Azure and cloud-native architectures, with comfort using AI as a development accelerator.

Nice To Haves

Experience with cloud forensics across AWS, Azure, and GCP.
Experience in OT/ICS environments.
Malware analysis capabilities, including unpacking, deobfuscation, behavior analysis, and reverse engineering.
Experience with AI governance, responsible-use frameworks, or tool validation in a security or consulting context.

Responsibilities

Conduct complex forensic investigations, including advanced memory forensics, malware triage, encrypted artifact recovery, and anti-forensics detection.
Perform host and network digital forensics, log analysis, and threat hunting in support of incident response engagements.
Use EDR solutions, cloud platforms, and threat intelligence to identify and document attacker tactics, techniques, and procedures.
Participate in incident response across cloud, OT, and traditional enterprise environments.
Develop indicators of compromise and contribute to comprehensive, defensible attack timelines.
Design and build proprietary investigation tools, automation scripts, and data products to accelerate forensic workflows and improve team consistency.
Translate repeatable investigation processes into functional prototypes using AI-assisted development, low-code platforms, and data visualization tools.
Use generative AI and AI coding assistants to reduce manual effort across triage, analysis, and reporting.
Govern tools through documentation, version control, onboarding guides, and iteration informed by engagement feedback.
Collaborate with senior practitioners to identify tooling opportunities that improve service speed, quality, or scalability.
Interface with client stakeholders and legal counsel throughout engagements, both technically and strategically.
Author comprehensive, defensible written reports on investigative findings.
Present technical findings and tool outputs on client calls.
Support leadership in scoping engagements with methodical, innovative approaches.