Cyber Incident Responder
工作描述
About Accenture
Accenture is a global professional services company with leading capabilities in digital, cloud and security. Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Interactive, Technology and Operations services—all powered by the world’s largest network of Advanced Technology and Intelligent Operations centres. Our 801,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries. We embrace the power of change to create value and shared success for our clients, people, shareholders, partners and communities. Visit us at www.accenture.com
All of our professionals receive comprehensive training covering business, technical and professional skills development. You will have opportunities to hone your functional skills and expertise in Cyber Security as part of our global security practice. The sheer variety and scale of work we do, and the experience it offers, provides an unbeatable platform to build and prosper your career. In addition, our growth, combined with our integrated career counselling, offers great opportunities for your professional development and rapid advancement.
DESCRIPTION
Accenture’s Security Practice is one of the fastest growing areas of the business with significant growth plans through additional recruitment and acquisitions. Our Cyber Investigation and Forensic Response (CIFR) practice is rapidly growing, and we are hiring mid to very senior level incident response and threat hunting professionals to work with our F500 enterprise customers. With our recent acquisitions we continue to enhance our incident response, threat hunting, forensics, threat intelligence, and red teaming capabilities.
Role Responsibilities:
- Manage and support end-to-end incident response investigations with Accenture’s customers
- Identify and investigate intrusions to determine the cause and extent of the breach, by leveraging EDR, SIEM, and threat intelligence sources
- Conduct host forensics, log analysis, network forensics, and malware analysis in support of incident response investigations
- Conduct Threat Hunting across customer’s environments with indicators of compromise, hunting for evidence of suspicious behaviour
- Conduct incident response within various Cloud platforms
- Identify attacker tools, tactics, and procedures to develop indicators of compromise for CTI consumption
- Work on proactive exercising and simulations, such as tabletops and purple teams
- Work alongside the EMEA team in a follow-the-sun model for large engagements
- Eligible for on-call responsibilities and meet SLAs for incoming incidents
- Develop and implement remediation plans in conjunction with incident response
- Form and articulate expert opinions based on findings
- Produce comprehensive and accurate oral and written reports and presentations for both technical and executive audiences
- Effectively communicate and interface with client, both technically and strategically from the executive level, to client stakeholders and legal counsel
- Support leadership in properly scoping engagements with innovative methodical approaches, based on client requirements
- Participating in engagements from kickoff through remediation, either on premises or remote, depending on client requirements
- Collaborate well with a highly experienced and diverse team of talent, in support of one mission – providing expert incident response services to Accenture clients
- Travel to on-site incident locations for acquisition, support, and engagement delivery both in and out of the country will be required for this position, with the requirement to travel up to 50%
职位要求
Qualifications & Experience
- Bachelor's Degree or relevant investigative experience
- Security certifications such as: CISSP, SANS GIAC (GCFA, GCIH, GCFR), BTL1, or similar
- Expert knowledge of forensic file system and memory techniques and use of the most commonly used toolsets, such as EnCase and FTK Suite
- Deep technical knowledge of methods utilized for evidence collection, maintenance of chain of custody and associated documentation, evidence storage and analysis and evidentiary reporting
- Thorough understanding of cyber security operations, security monitoring, EDR and SIEM tools, such as CrowdStrike and Splunk
- Detailed knowledge of Windows & Unix based operating systems and administrative tools
- Windows disk and memory forensics
- Unix or Linux disk and memory forensics
- Network traffic and protocol analysis utilizing tools such as Wireshark
- Strong knowledge of incident response, forensics and investigation processes
- Knowledge of IDA Pro, OllyDbg, other disassemblers/debuggers
- Applied knowledge of security controls such as authentication and identity management, security enhanced network architectures and application-based controls (including Windows, Unix, and network equipment)
- Knowledge of static and dynamic malware analysis
- Excellent time management, writing and communication skills
- Strong analytic, qualitative, and quantitative reasoning skills
- Minimum 3 years of comparable experience
- Relevant industry certifications valuable
Does this appeal to you? If so, we would like to hear from you!!
Please follow the application process and we look forward to discussing this opportunity with you.
Please advise if you have any particular requirements, so we can look into arranging reasonable adjustments to the recruitment process. You can contact us at accessIErecruitment@accenture.com
What’s in it for you?
At Accenture Ireland, in addition to a competitive base salary, you will also have an extensive benefits package which includes pension, private health insurance, discounted gym membership, emergency caring facilities, and 2 days’ leave per year for charitable work of your choice! Flexible working arrangements can be discussed depending on the position.
Please also note that Accenture is an equal opportunities employer and welcomes applications from all sections of society and does not discriminate on grounds of race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, or gender identity.
