Cyber Readiness Senior Manager

Accenture is a leading global professional services company, providing a broad range of services in strategy and consulting, interactive, technology and operations, with digital capabilities across all of these services. With our thought leadership and culture of innovation, we apply industry expertise, diverse skill sets and next-generation technology to each business challenge.

We believe in inclusion and diversity and supporting the whole person. Our core values comprise of Stewardship, Best People, Client Value Creation, One Global Network, Respect for the Individual and Integrity. Year after year, Accenture is recognized worldwide not just for business performance but for inclusion and diversity too.

“Across the globe, one thing is universally true of the people of Accenture: We care deeply about what we do and the impact we have with our clients and with the communities in which we work and live. It is personal to all of us.”

Julie Sweet, Accenture CEO

Accenture’s Security is one of the fastest growing areas of the business with significant growth plans through additional recruitment and acquisitions. Our global Cyber Investigation and Forensic Response (CIFR) practice is rapidly expanding in order to uniquely deliver around the clock incident response services to our expanding portfolio of enterprise customers. The sheer variety and scale of work we do and the experience it offers, provides an unbeatable platform to build a career. The team you will join operates across Europe, providing expertise to multi-national clients and thought leadership within our company.

You'll learn, grow and advance in an innovative culture that thrives on shared success, innovative and diverse ways of thinking and enables boundaryless opportunities that can drive your career in new and exciting ways

If you’re looking for a challenging career working in a vibrant environment with access to training and a global network of experts, this is the role for you. As part of our global team, you'll be working with cutting-edge technologies and will have the opportunity to develop a wide range of new skills.

Accenture CIFR Security professionals:

• Are highly credible with the ability to engage on a broad C-suite agenda. Possess the personal and professional attributes necessary to guide senior leadership in the formulation of strategies that produce robust and dynamic security capabilities as well as enterprise resilience capabilities.

• 
  Possess deep industry expertise sufficient to not only understand the nuances of an industry, but also guide client executives in developing suitable strategies with limited capacity in the dynamic theatre of incident response

• 
  Understand current and future client needs in the context of the security marketplace as well as client industry dynamics and apply insights to recommend both short and long-term value creation for clients that have the appropriate level of impact.

As part of the Accenture Security CIFR, you will be part of a specialised team to respond to some of the largest and most complex data breaches around the world, as well as conduct cyber threat hunting in some of the most complex business environments, leveraging a variety of tools and Digital Forensic and Incident Response (DIFR) techniques. You will work in a fast paced and highly collaborative environment with a diverse team of talent, in support of one mission – providing expert incident response services to Accenture customers.

We are looking for experience in the following skills:

• Strong knowledge of incident response, digital forensics and cyber incident investigation processes
• Strong familiarity with common DFIR toolsets
• Strong DFIR related knowledge of Microsoft Windows, GNU/Linux and MacOS operating systems
• Experience of Threat Hunting, on both the endpoint and ideally network
• The ability to identify attacker Tactics, Techniques and procedures (TTPs) and to develop indicators of compromise
• How to find and eradicate attackers, improve monitoring and protection capabilities
• Develop and implement dynamic remediation plans for customers in conjunction with incident response engagements
• Understanding of enterprise environments and how they work
• Understanding of common malware types and behaviours and common infection vectors
• The ability to lead a team of investigators during demanding engagements including client interaction
• Excellent project management and client facing communication skills.

Bonus Points If (Preferred Skills)

• 
  Experience with Cloud environments
• Experience with OT and ICS environments
• Knowledge of scripting and programming languages
• Experience of reverse engineering and sandboxing technologies
• Relevant degree in computing/IT
• Security certifications, for example, but not limited to, GREM, GCFE, GCFA, CEH, GCIH
• Minimum 5 years of DFIR experience

Your background and know-how

• Lead incident response engagements, including co-ordination of other assigned resources for on-site and remote investigations
• Identify and investigate intrusions to determine the cause and extent of the breach
• Conduct data collection, host and network digital forensics, log analysis, malware analysis and living-of-the-land techniques in support of incident response investigations, including leveraging EDR solutions and threat intelligence
• Lead threat hunting engagements
• Conduct incident response within various Cloud platforms
• Identify attacker Tactics, Techniques and Procedures (TTPs) to develop indicators of compromise
• Develop and implement dynamic remediation plans in conjunction with incident response engagements
• Take a lead role in authoring comprehensively written client reports on investigative findings
• Effectively communicate and interface with customers, both technically and strategically to customer stakeholders and legal counsel throughout the engagement lifecycle
• Support Accenture leadership in properly scoping engagements with innovative methodical approaches, based on customer requirements
• Mentor and train CIFR team members
• Work as part of the global practice to develop and maintain our service offerings.