Investigator/AI Developer

We Are:A cybersecurity consulting practice focused on helping organizations build real resilience; before, during, and after an incident. We design and run high-impact client engagements, and we build the data-driven tools that make those engagements better. Our team doesn’t just deliver advice; we create the structured frameworks, interactive assets, and analytical products that clients take home and actually use. We’re growing a capability at the intersection of cybersecurity expertise and applied data and development skills, and we want people who can do both.You Are:You're a builder and an investigator. You bring digital forensics expertise to complex incidents and the technical instincts to turn hard-won investigation experience into scalable, AI-powered tools that make the next engagement sharper. You're as comfortable leading a memory forensics workstream as you are in a Python notebook designing a pipeline that automates it. You think in structures — how to capture the right artifacts, surface the right signals, and produce outputs that drive defensible decisions for clients and teams alike.You bring expert presence to client calls, can translate attacker TTPs for a CISO and a general counsel in the same breath, and stay composed when the path forward isn't defined. You pick up new domains, tools, and environments quickly — and you apply that same curiosity to both your investigations and your development work.The Work:Investigations & Forensic AnalysisConduct complex forensic investigations including advanced memory forensics, malware triage, encrypted artifact recovery, and anti-forensics detectionPerform host and network digital forensics, log analysis, and threat hunting in support of incident response engagementsLeverage EDR solutions, cloud platforms (AWS, Azure, GCP), and threat intelligence to identify and document attacker TTPsParticipate in incident response across cloud, OT, and traditional enterprise environmentsDevelop indicators of compromise and contribute to comprehensive, defensible attack timelinesTool & AI DevelopmentDesign and build proprietary investigation tools, automation scripts, and data products that accelerate forensic workflows and improve team consistencyTranslate repeatable investigation processes into functional prototypes using AI-assisted development, low-code platforms, and data visualization tools (Power BI, Azure Data Services, Python, or similar)Apply generative AI and AI coding assistants as core development accelerators - not occasionally, but fluently - to reduce manual effort across triage, analysis, and reportingGovern the tools you build: documentation, version control, onboarding guides, and iteration based on real-world engagement feedbackCollaborate with senior practitioners to identify where new tooling improves speed, quality, or scalability across service offeringsClient EngagementInterface with client stakeholders and legal counsel throughout the engagement lifecycle, both technically and strategicallyAuthor comprehensive, defensible written reports on investigative findingsPresent technical findings and tool outputs on client callsSupport leadership in scoping engagements with methodical, innovative approachesTravel may be required for this role. The amount of travel will vary from 0 to 100% depending on business need and client requirements.Here’s What You Need:Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate’s Degree, must have minimum 6 years work experience)Minimum of 3 years’ experience in:DFIR with demonstrated expertise in complex investigationsCybersecurity consulting and data-oriented development or analysisBuilding tools that others use in professional practiceMinimum of 3 years demonstrated experience in:At least one data or development layer: Python, PowerShell, Power BI, Power Apps/Automate, SQL, or comparable stackCommon DFIR toolsets (Volatility, X-Ways, FTK, EnCase, Autopsy, etc.)Microsoft Windows, GNU/Linux, and MacOS operating systemsMemory forensicsEnterprise environments, Active Directory, and common attack patternsThreat hunting on both endpoints and networksIndustry recognized incident response lifecycles and frameworks (e.g., SANS, NIST, MITRE, etc.)Producing accurate, defensible, well-documented analysisMinimum of 1 year demonstrated experience in:Using AI coding assistants and generative tools as a fluent part of your everyday development workflowAzure and cloud-native architectures; comfort using AI as a development acceleratorBonus Points If:Experience with cloud forensics across AWS, Azure, and GCP; OT/ICS environments a plusMalware analysis capabilities: unpacking, deobfuscation, behavior analysis, reverse engineeringExperience with AI governance, responsible use frameworks, or tool validation in a security or consulting contextCompensation at Accenture varies depending on a wide array of factors, which may include but are not limited to the specific office location, role, skill set, and level of experience. As required by local law, Accenture provides a reasonable range of compensation for roles that may be hired as set forth below.We anticipate this job posting will be posted until 11/15/2026.Accenture offers a market competitive suite of benefits including medical, dental, vision, life, and long-term disability coverage, a 401(k) plan, bonus opportunities, paid holidays, and paid time off. See more information on our benefits here: U.S. Employee Benefits | AccentureRole Location Annual Salary RangeCalifornia $70,350 to $205,800Colorado $63,800 to $177,800Connecticut $63,800 to $177,800District of Columbia $68,000 to $189,300Illinois $59,100 to $177,800Maine $54,400 to $151,400Maryland $63,800 to $177,800Massachusetts $63,800 to $189,300Minnesota $63,800 to $177,800New York $66,300 to $205,800New Jersey $68,000 to $205,800Ohio $59,100 to $164,600Virginia $59,100 to $189,300Washington $80,200 to $189,300Requesting an AccommodationAccenture is committed to providing equal employment opportunities for persons with disabilities or religious observances, including reasonable accommodation when needed. If you are hired by Accenture and require accommodation to perform the essential functions of your role, you will be asked to participate in our reasonable accommodation process. Accommodations made to facilitate the recruiting process are not a guarantee of future or continued accommodations once hired.If you would like to be considered for employment opportunities with Accenture and have accommodation needs such as for a disability or religious observance, please call us toll free at View phone number on click.appcast.io or send us an email or speak with your recruiter.Equal Employment Opportunity StatementWe believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.For details, view a copy of the Accenture Equal Opportunity and Affirmative Action Policy StatementAccenture is an EEO and Affirmative Action Employer of Females/Minorities/Veterans/Individuals with Disabilities.Accenture is committed to providing veteran employment opportunities to our service men and women.Other Employment StatementsApplicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States.Candidates who are currently employed by a client of Accenture or an affiliated Accenture business may not be eligible for consideration.Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process. Further, at Accenture a criminal conviction history is not an absolute bar to employment. The Company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. Additionally, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company's legal duty to furnish information.California requires additional notifications for applicants and employees. If you are a California resident, live in or plan to work from Los Angeles County upon being hired for this position, please click here for additional important information.Please read Accenture’s Recruiting and Hiring Statement for more information on how we process your data during the Recruiting and Hiring process.